last executing test programs: 1m4.218350646s ago: executing program 1 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}}, 0x20}, 0x1, 0x0, 0x0, 0x24000844}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m4.060073088s ago: executing program 3 (id=417): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x7, 0x2, 0x7fff, 0xfff7, 0xffff, 0xf]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 1m4.059833069s ago: executing program 1 (id=418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket(0xa, 0x3, 0xff) sendto$inet6(r1, 0x0, 0x0, 0x8fc, &(0x7f0000000040)={0xa, 0x39, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000004c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000500)='xfrm0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f0000000580)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0x17, 0x6, @random="1cef8012b203"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) unshare(0x22020600) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000480)=' ', 0xffffff1f}], 0x1}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x140, 0xa79, 0x5, 0x2, 0x5, 0x2, 0x8002, 0x1002, 0x20000040, 0xd72d, 0x9, 0x2, 0x2009, 0x0, 0x4ce, 0xfffffffe, 0x3af0, 0x4, 0x8, 0x9, 0x4, 0x400, 0xe, 0x3, 0x7fc, 0x5, 0x7ff, 0x0, 0xffffffff, 0x207ff, 0x2]}) 1m4.043493418s ago: executing program 3 (id=419): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/249, 0xf9) fanotify_init(0x200, 0x0) (async) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 1m3.979580186s ago: executing program 3 (id=420): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x3ff, 0x8, 0xe, 0x12, 0xfc}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x80000001}]}}]}, 0x150}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x3ff, 0x8, 0xe, 0x12, 0xfc}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x80000001}]}}]}, 0x150}}, 0x0) 1m3.979431955s ago: executing program 3 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) gettid() syz_io_uring_setup(0x29d7, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 42) 1m3.700286081s ago: executing program 3 (id=422): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/hash_elasticity\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/100, 0x64) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x8, @name="03489dc364b8b035b088af7cd259cf32928518e18ff9ffffff08581448a7fc5e"}) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000200)=0x5) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.700033817s ago: executing program 3 (id=423): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0xfc, 0x0, 0x0, 0x0, "3bad90732d8c59f7"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380100001000050000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000ffffffffffffffffffffffffffff9effffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900"/203], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000003000010601000000000000000000000034000180300001800900010067617465000000002000028018000200000000000000000000000000000000000000000004000580"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x2, 0x0, 0x2}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) connect$inet(r4, &(0x7f0000000380)={0x2, 0x1234, @local}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9b0caeb398b021b6000000588533ad00320000008d0866af47457f6347843409630b731bbd8b6030a9a5e6486d38b04329392b6904"], 0x14}, 0x1, 0x0, 0x0, 0x20040}, 0x80) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 1m1.02829957s ago: executing program 1 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) gettid() syz_io_uring_setup(0x29d7, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 44) 1m0.795491621s ago: executing program 1 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x9801) move_mount(r0, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x5) (async) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x2125099, 0x0) 1m0.795375092s ago: executing program 1 (id=443): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x140, 0xa79, 0x5, 0x2, 0x5, 0x2, 0x8002, 0x1002, 0x20000040, 0xd72d, 0x9, 0x2, 0x2009, 0x0, 0x4ce, 0xfffffffe, 0x3af0, 0x4, 0x8, 0x9, 0x4, 0x400, 0xe, 0x3, 0x7fc, 0x5, 0x7ff, 0x4001, 0xffffffff, 0x207ff, 0x2]}) 1m0.539040035s ago: executing program 1 (id=446): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f00000008c0), 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000240)='./file0\x00', 0x8100, &(0x7f0000000280)={0xb, 0x2, 0x7ce81106999febde}, 0x20) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000002c0)=0x100) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000900)={{}, "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"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a310000000009000200"], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0xe12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./trace\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='./dummy\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/uprobe_events\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)='p:mygroup/myevent ./dummy:0', 0x1b) write(r7, &(0x7f0000000740)='p:mygroup/myevent ./dummy:0', 0x1b) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa1a080008000ce76a2320dd6ed476650028006700000206907864010101c51414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x8, 0x0, 0x1000}}}}}}, 0x0) 1m0.497712161s ago: executing program 32 (id=446): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f00000008c0), 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000240)='./file0\x00', 0x8100, &(0x7f0000000280)={0xb, 0x2, 0x7ce81106999febde}, 0x20) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000002c0)=0x100) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000900)={{}, "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"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a310000000009000200"], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0xe12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./trace\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='./dummy\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/uprobe_events\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)='p:mygroup/myevent ./dummy:0', 0x1b) write(r7, &(0x7f0000000740)='p:mygroup/myevent ./dummy:0', 0x1b) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa1a080008000ce76a2320dd6ed476650028006700000206907864010101c51414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x8, 0x0, 0x1000}}}}}}, 0x0) 48.198842691s ago: executing program 33 (id=423): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0xfc, 0x0, 0x0, 0x0, "3bad90732d8c59f7"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380100001000050000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000ffffffffffffffffffffffffffff9effffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c2900"/203], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000003000010601000000000000000000000034000180300001800900010067617465000000002000028018000200000000000000000000000000000000000000000004000580"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x2, 0x0, 0x2}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) connect$inet(r4, &(0x7f0000000380)={0x2, 0x1234, @local}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9b0caeb398b021b6000000588533ad00320000008d0866af47457f6347843409630b731bbd8b6030a9a5e6486d38b04329392b6904"], 0x14}, 0x1, 0x0, 0x0, 0x20040}, 0x80) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 43.619543817s ago: executing program 4 (id=587): unshare(0x2c020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_KEYS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = msgget$private(0x0, 0x240) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000"], 0xfd1, 0x0) msgrcv(0x0, &(0x7f00000000c0), 0xfffffcef, 0x0, 0x4800) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 43.540086638s ago: executing program 4 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="b6e8deb49cd5fe336d16f90856cc3761d3a85a9a6a1224e713ec04cf6db7de47d7bb16cdab4f72ee631e48a99e193b6b17e1548ba7e97fe4675fbbd364a1d110c04e7eaeacd7a04cb080a5eff7ba2d39fa8887905b1976eee489cc31f41563c5a2634c77fbb0396404a574f1b81e5cbc6c6eab17448c1df9f2da11809b7adc3a172cdebb7574e98c4a12d842cc22f250801834b313f57fe58142a093f8688b2da7a901b4cd692a9a007222532e4861bfab27a97bacc8370a08b5f335eb5f173f5536ae0775560bb99a5c6855837fbe62d347735a791795db0d2f71f1f0cc6b49211993b6b2c7e3abf2bd146e5e"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x8084) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)={0x0, 0x80, 0x41}, 0x18) mkdirat(r2, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mkdirat(r2, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000c80)='logfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001300)=""/256, 0x100) (async) read(0xffffffffffffffff, &(0x7f0000001300)=""/256, 0x100) 43.480153734s ago: executing program 4 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.memory_pressure\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000004c0)={0x0, 0x2, 0x8, 0x73e9}) (fail_nth: 4) 43.418729439s ago: executing program 4 (id=593): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000009c0)='\x00', 0x9801) move_mount(r2, &(0x7f0000000a00)='.\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="580000000206010200000000000000000200000005000400030000000900020073797a31000000000500010007000000050005000a0000001400078008000640000008fe080012400000ffff1f000300686173683a697000"], 0x58}}, 0x0) umount2(&(0x7f0000000a80)='./file0/file0\x00', 0x4) mount$bind(&(0x7f0000000ac0)='./file0/file0\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000540)=[{{&(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040880) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) connect$vsock_stream(r5, &(0x7f0000000840)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r5, &(0x7f0000000880), 0x10) connect$vsock_stream(r5, &(0x7f00000008c0)={0x28, 0x0, 0x2711, @host}, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xa, 0x1, 0x20010, r2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c000140", @ANYRES32=r8], 0x12c}}, 0x0) 42.368772477s ago: executing program 4 (id=596): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) init_module(&(0x7f0000001580)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x5, 0x7, 0x519, 0x3, 0x3e, 0x10, 0x208, 0x40, 0x222, 0xac, 0x0, 0x38, 0x1, 0x8, 0x7, 0x4}, [{0x6, 0x9, 0x8, 0x0, 0x4, 0x80000001, 0x1, 0x4e}]}, 0x78, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./mnt\x00', 0x1ff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001780)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x4040050) (async) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000001480), &(0x7f00000014c0)=0x4) add_key$user(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580), 0xc9, 0xfffffffffffffffd) (async) mount(&(0x7f00000015c0), &(0x7f0000001600)='./mnt\x00', &(0x7f0000001640)='ecryptfs\x00', 0x0, &(0x7f0000001680)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') r5 = syz_open_dev$sndctrl(&(0x7f00000019c0), 0x2, 0x0) (async) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001a00)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000001a40)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001ec0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) (async) open(&(0x7f0000001700)='./mnt\x00', 0x4000, 0x104) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') exit(0xffff) pread64(r7, &(0x7f0000000300)=""/4108, 0x100c, 0x3) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x804) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x4008000) (async) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x6c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4001) 42.208668687s ago: executing program 4 (id=604): symlink(&(0x7f0000000000)='./file0/file0/..\x00', &(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000080)='./file0/file0/..\x00') r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="84", 0x1}, {&(0x7f0000000a80)="aeffa69a6050fbb8ba8076101a8e4d9cc28a3097e6fb4caba9c3e811088cb0db72f419a2f4283f58e74e68200e10a43e14aad40315d74c2ae68591de27c540e4b3cca898051d45fa1aeade5cf8b4ad662357b696b4ce288b4ff23debaf763bdc0239df182067d752785afb51b74348ef7960a62744d79d9c3e4c8664e961f6812dcc00d2d06bc52b1bdab5c28416d0d5a4ad5fd7fb700333aec1498fcd9a8ea6493b6d3331100da4751dfa714fec543c148b65836aef6b79acdd8ff7720daaa561827380fdac39999f0fe5b71c753c7259b44dd8a6a07e61a3d62100a2d74138711487d888103b70f3543a277620a51afd4ebd397f16fe44fce5753e72594ef65208e889bdfe89081959f2335319f091e2a6be8d7ac1f69c8e4e8715f4d672bb69a71c8e2d46db820fc6f925cb1eed818f003f93b6d958742705457ad18b48d4b4725fe21f5a5c2f1057ee9f7f5923bad621b4675af6c504dd167e41a132e95e4995c969f3fdb325a878f00ba8cf696488fa09d7bebcf4225b3fa1d8a8756eeb104808da2aa07c226f73dfcbbe29ab7808b5b16495b279c7d118df654742e4f5e5bc2d3d3e09af23da6367e49e7c5b40bc4f94ede9a1d105011cd91dea698a195101da1f6b9a9f56087f75fc8e2341bbad7ab9cd8b4bad485363b074dea0a1c2cee5300fd5cebb32884dc3bbb97a9bab27f842172b727df2f6a92725d84258490bd47a2ebc0ab9b804ecf4db80f972991f7c3bce86f4c7081a8277b012ff8f77056fa8b8d51759502f8ffefe1e41477318fa2771a572efa6339bc06348df29d138de77eed01e1c5720b7d2d06799a69c8f2a85e7e786db32f30d13e2ff5f4fd2b97cbc15b856ae8085532799d0efceabe87a2db06540a85ce99189f99859aadc58a29dfefffd14dc70c35fafe94cb38295e54c1eb177ca63a701510791fe0d5e44b14db682daad94b2b075d719f4a9084c9b53e20c6695fe16184e165bd9585e7a9c67b555c1f34a60fc6e90613358047af8281ff60937dea38fe45e5e84a46e88ad4d89395076c9230826358aaf76466f2ebc2b7fd8016af4d2dc90554821e5e7952c74273817f210f01b76122c7f6dd57158e51d2884669693e466e82a9ed41b92fd397bc08d6717003a93254e72e82b53474f595478fc275190a1d55f7ab9889fd3b081e1e3e3fb6dc33783edf92620f617f605cf62193c96f54429b690f9a478b343e6718ff48ce64167fbeff03278780936d7aef33dcf0c681b6f43aa375305085af640c2b723e2b7551785da39dc973653d857723ce2b63e313b322168f5f4c76b780ea6dbba96a0d160b5b8e480f918a8ad48df8aaa30f216090253f29e160546dfbf8c3e770624f7e5c43ee159837325714ae34f8901d41605cf1f694d82d253bf732ba651825ba28709fdad243a12e23cb31847e1026e6d776fa45b029d6bfb352efbdccd5bb67b0cb188de347c831516f93d180fe90e06df9c45d06eaf90c37fbd7f8de60b90728929e64b4ed56088842908e1cac8751834c71040ce5b621c1d15870149ea0c491c700ba2b2cab7fe23ffd4d98c22939b7adc3705fb9a24d401be8867063072753e9c4fb075e0463a37ad79a976039653668a66f6a12130df4d30ff23ccce0b865db7b6c2327a76aecde5e7f653e446ff344157131853860672f5af93f3b486a6cae1ceb1927bdcaff2534099e8ce78a031af8771613c0fd1ff5cc965ddd1cac205d8ae3b6dcbc66a86871c75cf0000bc5190a19683f782732386275413e8b0be63b952b44e99a184ca89d6d2a7a389eca19568425e71f095bde947caf856da87622078f0f6557f7862ca2d11f41c7212556510027a9c31d8d609439d147d79703938a0bfc897cf87ccb69b221cca69eff62d986ff99b5e99d8fbf22ce9f1fdffc8aa0d806e8b87e2f41f7f7bd3267a62923e55f237de3fdf373af2e4caa898a5c7f9490c77547f42fd85251efbea965ba0dd706b427319", 0x583}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 42.104910824s ago: executing program 34 (id=604): symlink(&(0x7f0000000000)='./file0/file0/..\x00', &(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000080)='./file0/file0/..\x00') r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="84", 0x1}, {&(0x7f0000000a80)="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", 0x583}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 3.13924302s ago: executing program 2 (id=1182): listxattr(&(0x7f0000000080)='.\x00', &(0x7f0000002400)=""/4097, 0xdbe) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = socket$inet(0x2, 0x6, 0x67) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES16=r0, @ANYBLOB="0100000002"], 0x40) syz_emit_ethernet(0x101, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r2, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000001240), 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r5, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={r3, &(0x7f00000013c0), 0x0}, 0x20) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169c02, 0x0) r8 = dup(r7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4000000000000200, 0xe50fb6c50bc849c9) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) r12 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r12, &(0x7f0000000600)="616464726573735f67726f7570207e72703120302e302e302e302d3235352e3235a6defd881d22713e1cda457960352e3235352e3235350a616464726573735f67726f75702067727031203a3a2d666666663ae60500003a666666663a666666663a666666663a666666663a666666663a666666660a61", 0x77) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x3, 0xffffe000, 0x4808, r6, 0x400, '\x00', r11, r12, 0x4, 0x0, 0x4, 0x4}, 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000fcdbdf2545008fffffff01006e657464657673696d0000000f0002006e657464657673696d30000008008e0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) write(r8, &(0x7f0000000040)='8', 0x1) 2.999891695s ago: executing program 2 (id=1183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000200)) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) (async) sendto(r5, &(0x7f0000000180), 0xfeb5, 0x0, 0x0, 0x0) (async) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) (async) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000660000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x32, @unmapped=0xf0000008}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af24, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.898619923s ago: executing program 2 (id=1184): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)) add_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, &(0x7f0000000000)="305c0605e182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, r0) 2.898345697s ago: executing program 2 (id=1185): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c000) syz_open_dev$usbfs(0x0, 0x77, 0x109341) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x1004040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101002, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffd, 0x6, 0xfe, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="b5c9bf61c5eb", 0x0, 0x300, 0x10, 0x2, 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x80) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0xb0, 0x2000000000000400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp(r5, r5, 0x6, r4, r6) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x20811) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.775097059s ago: executing program 2 (id=1186): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000900000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0xa0, 0x24, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0xfff2}, {0x10, 0x4}, {0x4, 0x3}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x68008850) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2.546380002s ago: executing program 6 (id=1192): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000840)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000880)=0xd) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000480)={{0xf, 0x1, 0x1, 0xfffffff8, 0xd1}, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000008c0)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000900)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000940)=0x1e) 2.503478134s ago: executing program 2 (id=1193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001a40)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a80)={0x1, &(0x7f0000001ac0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000001b00), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000001b40)={0xa4, 0x0, 0x1}) socket(0x9, 0x6, 0xfffffac5) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000001bc0)={0x0, 0x0}) ioctl(r5, 0x4040aea0, &(0x7f0000001c00)="00c3a5310800000000a79000000000008000000010") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001700)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x101440, &(0x7f0000000080)={@_ha_fsid={[0xfffffff7]}, {0x5, 0x7, 0x3, 0x100000001}}, 0xf839, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}, 0x2, &(0x7f00000016c0)=[{0x1, 0x1, &(0x7f0000001440)='\x00', &(0x7f0000001480)="d09df5c004660551678dc01bbdfd15642df49b5378f803f4a8449e34d7d954d5c598d90f069c3cccdea20fb32a8d2ce12a302b6c3837de7e17df8945f7a5b5992b5071e8f99a5f8832ac3ec06f440c45ca69dc31b4870d85542a8c6051cca013b46dab9b9dbb69846713a1415ad17e0c71565c50f206570a29c5e2a22ba8886e59c8a34e32cf9965771c5b1405752b750e079c93bb1a96c8c203024f02766ab9e09e394a510ced872274ef81d36ecedd55cfca922b77bc029d252d6448e8158b9c5b8a35cad623d5b91dbaabf90e799cc17365553e0360433d521a6e55aa24b50d4386ad72", 0xe5, 0x2}, {0x3, 0x8f, &(0x7f0000001580)='&\x00', &(0x7f00000015c0)="9800fb46df0baf36f9ce8298441d040f14703f61ac9aeb4f3274063460d2e30edaa1fb8b3ed6652e8f85b899e50cfa653592a6aa8dafddbaed90c734183184c4bfba2a2761d732d2f7132c13b9786a77fd30a775cf95ca7e2e6581ef4763c436b29705ac336462bfd606e4cefbf8587342538c3c5e030e85e1d5005c4e2ea62466400a8cf74a3bd3fcb063ea355471b67bf155755b21b73832b61faccc0bf4d6527e303d540baae883f60384c71aceb98f5dc523224d5986035fb24fa10bf9f6cc4e2dab1c92910bf14ec38c1fa915b7d8d0c3c1f8bb7fc8f41498b4303908c17b637bdab4a303616b650509f70d287e302a276412060f", 0xf7, 0x10}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r6, 0x0, 0xef, 0x6e, &(0x7f0000001780)="959cff1669d03adbcc679b8948c1a9ce004caab8dc82bff90a9e51207b424d8d9fe31f634a9a21c283de086615d204c838170a18564ccd61de8acc50df09c2ee5c361676bee8168ffd6ef25f90de1efa58e74515f88a1560370296adc637228a99eb62965374575f892a8f08a0dba901f3addf39a3c090328249efc8093da61d380c632d3e795fd1909f77e90b0e29c418f455198360a4e39f748bb5fd8ecef5f8a1fa2cf29675d10706053ec3a8353648d5c2a4987b8779552c182ea88961fac75d30315c12615646bf5584b6465773ae1df74cfa7971b9060b9f5d266fd8dbdcfa89c4293f41a454367d12a277a6", &(0x7f0000001880)=""/110, 0x4, 0x0, 0x36, 0x44, &(0x7f0000001900)="15eb347bfe2d753c0f5562eecd5c3d375cb4d21f5e53dd8514a1052bc511973dbf5f02df6379fa5b24559ef6244f49a2b163b99468fb", &(0x7f0000001940)="1858dda870f5f7552a43945dd278e786545edfbe328c9894dd45aeb1f8970dce70f8e0ae90f8b4d16a401417c9da7f8a32fd9929d077634348b28755fea020c368368332", 0x1, 0x0, 0x5}, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)="c00f70096e2870ee324548356c0389863a5011de225b08f0fa1236650180e2360eee3b5e", 0x24}, {&(0x7f00000002c0)="3cf4ed6e978d85909dc185a1cc5e468b7d66b8427acab19938a90023e56d9e106bcccd6444815cfa41190ddbefea275993b2a8bce4b1a7631b38dfbf4c81286df9637709be91ab68c7f01232d0203f7677a3c0b9f1dd7dea7b467e573a5db570aa288bd0f599145e48108c", 0x6b}, {&(0x7f0000000140)="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", 0x166}, {&(0x7f0000000040)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b015d9f0237ad2165fd2638e70317c323d1ca0fc849b80a5d58f6ecc205f4437948a1b7c458ef62297aa0ed659edba22bf6bff08fd269bb142c023194a96b44ce87270eda479f2f8b94a7ee07437373da1", 0x51}], 0x6) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.380359896s ago: executing program 35 (id=1193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001a40)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001a80)={0x1, &(0x7f0000001ac0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0x0, &(0x7f0000001b00), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000001b40)={0xa4, 0x0, 0x1}) socket(0x9, 0x6, 0xfffffac5) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000001bc0)={0x0, 0x0}) ioctl(r5, 0x4040aea0, &(0x7f0000001c00)="00c3a5310800000000a79000000000008000000010") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001700)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x101440, &(0x7f0000000080)={@_ha_fsid={[0xfffffff7]}, {0x5, 0x7, 0x3, 0x100000001}}, 0xf839, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}, 0x2, &(0x7f00000016c0)=[{0x1, 0x1, &(0x7f0000001440)='\x00', &(0x7f0000001480)="d09df5c004660551678dc01bbdfd15642df49b5378f803f4a8449e34d7d954d5c598d90f069c3cccdea20fb32a8d2ce12a302b6c3837de7e17df8945f7a5b5992b5071e8f99a5f8832ac3ec06f440c45ca69dc31b4870d85542a8c6051cca013b46dab9b9dbb69846713a1415ad17e0c71565c50f206570a29c5e2a22ba8886e59c8a34e32cf9965771c5b1405752b750e079c93bb1a96c8c203024f02766ab9e09e394a510ced872274ef81d36ecedd55cfca922b77bc029d252d6448e8158b9c5b8a35cad623d5b91dbaabf90e799cc17365553e0360433d521a6e55aa24b50d4386ad72", 0xe5, 0x2}, {0x3, 0x8f, &(0x7f0000001580)='&\x00', &(0x7f00000015c0)="9800fb46df0baf36f9ce8298441d040f14703f61ac9aeb4f3274063460d2e30edaa1fb8b3ed6652e8f85b899e50cfa653592a6aa8dafddbaed90c734183184c4bfba2a2761d732d2f7132c13b9786a77fd30a775cf95ca7e2e6581ef4763c436b29705ac336462bfd606e4cefbf8587342538c3c5e030e85e1d5005c4e2ea62466400a8cf74a3bd3fcb063ea355471b67bf155755b21b73832b61faccc0bf4d6527e303d540baae883f60384c71aceb98f5dc523224d5986035fb24fa10bf9f6cc4e2dab1c92910bf14ec38c1fa915b7d8d0c3c1f8bb7fc8f41498b4303908c17b637bdab4a303616b650509f70d287e302a276412060f", 0xf7, 0x10}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r6, 0x0, 0xef, 0x6e, &(0x7f0000001780)="959cff1669d03adbcc679b8948c1a9ce004caab8dc82bff90a9e51207b424d8d9fe31f634a9a21c283de086615d204c838170a18564ccd61de8acc50df09c2ee5c361676bee8168ffd6ef25f90de1efa58e74515f88a1560370296adc637228a99eb62965374575f892a8f08a0dba901f3addf39a3c090328249efc8093da61d380c632d3e795fd1909f77e90b0e29c418f455198360a4e39f748bb5fd8ecef5f8a1fa2cf29675d10706053ec3a8353648d5c2a4987b8779552c182ea88961fac75d30315c12615646bf5584b6465773ae1df74cfa7971b9060b9f5d266fd8dbdcfa89c4293f41a454367d12a277a6", &(0x7f0000001880)=""/110, 0x4, 0x0, 0x36, 0x44, &(0x7f0000001900)="15eb347bfe2d753c0f5562eecd5c3d375cb4d21f5e53dd8514a1052bc511973dbf5f02df6379fa5b24559ef6244f49a2b163b99468fb", &(0x7f0000001940)="1858dda870f5f7552a43945dd278e786545edfbe328c9894dd45aeb1f8970dce70f8e0ae90f8b4d16a401417c9da7f8a32fd9929d077634348b28755fea020c368368332", 0x1, 0x0, 0x5}, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)="c00f70096e2870ee324548356c0389863a5011de225b08f0fa1236650180e2360eee3b5e", 0x24}, {&(0x7f00000002c0)="3cf4ed6e978d85909dc185a1cc5e468b7d66b8427acab19938a90023e56d9e106bcccd6444815cfa41190ddbefea275993b2a8bce4b1a7631b38dfbf4c81286df9637709be91ab68c7f01232d0203f7677a3c0b9f1dd7dea7b467e573a5db570aa288bd0f599145e48108c", 0x6b}, {&(0x7f0000000140)="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", 0x166}, {&(0x7f0000000040)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b015d9f0237ad2165fd2638e70317c323d1ca0fc849b80a5d58f6ecc205f4437948a1b7c458ef62297aa0ed659edba22bf6bff08fd269bb142c023194a96b44ce87270eda479f2f8b94a7ee07437373da1", 0x51}], 0x6) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.065971852s ago: executing program 5 (id=1199): mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='gfs2\x00', 0x800041, &(0x7f00000000c0)='discard') r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)={0x8800, 0xe, 0x5dd07a6b57d90c08}, 0x18) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x10081, 0x7fffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001900)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001c80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001cc0)='./cgroup\x00', &(0x7f0000001d00)='configfs\x00', 0x801040, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ab) r3 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./config/usb_gadget/g1/functions/SourceSink.0/iso_qlen\x00', 0x2, 0x8) write(r3, &(0x7f0000001d80)="b11c39a6309707cbf76f0c84082c1cdb3b12", 0xffffffee) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001940)={'syzkaller0\x00', @link_local}) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xc, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1cb1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x5, 0x5, 0x401, 0x1}, {0x4, 0x2, 0x2, 0x5, 0x9, 0x5}, 0x400, 0x9, 0x1ec2}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$CDROM_SET_OPTIONS(r8, 0x5320, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001ac0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001b00), 0x56) sendmsg$kcm(r3, &(0x7f0000001b40)={&(0x7f0000001b80)=@xdp={0x2c, 0x20, r9, 0x3e}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000300)="27030200e61114120600002fb96dbcf706e10500000086ddffff04000000bf4a31accbfdc9ac325a7e9c8b21a274f1847b4c5d521fed59ac4d41b24377f7b0e78fa2851e550baa73cb67713debf2e4188029300739", 0x55}, {&(0x7f0000001fc0)="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", 0x19a}, {&(0x7f0000000780)="9507b860849ec3e493c50974759a9e7acf39d4c67bdfc20200d9568cc26a1ed16eb2fe9fc49c178a1eb66238844446c19d9841f1543e727d148b8a507bb647061cc1a4d6feea85ab607a85468a78e8023e625957be3bb6906f121b84e31d3cd39403d1", 0x63}, {&(0x7f0000001e40)="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", 0x171}, {&(0x7f00000008c0)="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", 0x1000}], 0x5}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x80) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x4, &(0x7f00000003c0)=[{0x8, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x1, @uvalue=0x800}, {0x2, @uvalue=0x8}, {0x2, @svalue=0x5}]}, 0x2}, {0x43, '\x00', @st={0x4, [{0x3}, {0x2, @uvalue=0x5}, {0x3, @uvalue=0xc}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @st={0x4, [{0x0, @uvalue=0x3}, {0x2, @svalue=0x6}, {0x3, @svalue=0x7}, {0x1, @svalue=0x1}]}, 0x1000}, {0x2c, '\x00', @data=0x7, 0x10000}]}) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x402183, 0x0) write$tun(r11, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x13b4) 1.93953658s ago: executing program 5 (id=1200): r0 = socket$igmp(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f0000000800)='jiffies', 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 1.936480553s ago: executing program 5 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x940) 1.844645658s ago: executing program 5 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="28616d65207e20221d22", 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 1.75881293s ago: executing program 5 (id=1203): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x50009405, &(0x7f0000000100)={0x1, 0x402000, 0x5cd2}) syz_usb_connect$hid(0x1, 0x28, 0x0, 0x0) 489.887695ms ago: executing program 0 (id=1206): socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x802) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) (async) r1 = syz_io_uring_setup(0x3aeb, &(0x7f0000000040)={0x0, 0x69f0, 0x8, 0x0, 0x35}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x48, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x4, '\x00', 0x0}}) (async) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) (async) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000540)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) shutdown(r5, 0x1) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c0c0) splice(r5, 0x0, r7, 0x0, 0x40000000003, 0x0) 439.94551ms ago: executing program 6 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text64={0x40, &(0x7f00000011c0)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {}, [], {{0x5, 0x1, 0xb, 0x0}, {}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001240)={[0x2000000000, 0xb, 0x8, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x2, 0x3aa, 0x7, 0x1, 0x7, 0x8, 0x40000000080a8c, 0xce77], 0x6000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 359.969578ms ago: executing program 0 (id=1208): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 275.757228ms ago: executing program 0 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x108040, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x40000000) 275.55355ms ago: executing program 6 (id=1210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000002301000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) 208.967658ms ago: executing program 0 (id=1211): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000540)={[{0x136, 0x1, 0x1, 0x7, 0x4, 0xce, 0x6, 0x8, 0xff, 0x1, 0x2, 0xd1, 0x292f}, {0xfffffffe, 0x8, 0x8, 0x8, 0x1, 0xf7, 0x17, 0x9, 0x40, 0x7, 0x3, 0x0, 0x2}, {0x2, 0x4, 0x2, 0x5, 0xc, 0x6d, 0x3, 0xb, 0x6, 0x80, 0x0, 0x9, 0x10000}], 0x7fffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl(r2, 0x3b81, &(0x7f0000000600)='\f') ioctl(r2, 0x3ba0, &(0x7f0000000640)="480000000200000001") ioctl(r2, 0x3b89, &(0x7f0000000680)="28000000010000000300000001") ioctl(r2, 0x3b90, &(0x7f00000006c0)="2000000000000000efbeadde0300000005") r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c841}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x1, 0x0, 0x110}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000340)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r5, @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRESDEC=r7], 0x1c}}, 0x20040895) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004094) 208.373703ms ago: executing program 6 (id=1212): r0 = socket$igmp(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f0000000800)='jiffies', 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 149.990724ms ago: executing program 6 (id=1213): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 147.420172ms ago: executing program 0 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 146.893734ms ago: executing program 6 (id=1215): timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000240)='./file0\x00', 0x4a) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x78) mount$cgroup(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x10, &(0x7f0000000340)={[{@subsystem='cpuset'}, {@xattr}, {@favordynmods}]}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000001880)=""/183, 0xb7}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r3) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="1c4f8f369f8e169f52f387a256de51d5cd08dc22dd55aaa56222b56710fac88259de5285fd0b5aac4d5d5d0c01ebe2c1def322bac6964eb2ae0073896c71ad131c06fdb138a3de316ee8a937cdb7eea7db3e9a1fbb45333198", 0x59, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x24}}, 0x0) 89.30597ms ago: executing program 0 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/x86/nmi_longest_ns\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x8, 0x12) r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000240)={0x3fffffff, 0x270, "ac29b4479ef2eefbf682705a1cb99be8098c4bddf7c2e904de797d0a3138c61b", 0x3, 0x80000000, 0xb, 0x6, 0xa2dbb73f42ccd34}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) 0s ago: executing program 5 (id=1217): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000080)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0x33) kernel console output (not intermixed with test programs): [ 103.356123][ T8174] ? __pfx_p9pdu_readf+0x10/0x10 [ 103.356147][ T8174] ? sched_dynamic_show+0x29/0x190 [ 103.356173][ T8174] p9_client_getlock_dotl+0x1c0/0x310 [ 103.356192][ T8174] v9fs_file_lock_dotl+0x3bc/0x690 [ 103.356211][ T8174] ? __pfx_v9fs_file_lock_dotl+0x10/0x10 [ 103.356232][ T8174] ? lockdep_init_map_type+0x5c/0x250 [ 103.356248][ T8174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.356268][ T8174] ? __pfx_v9fs_file_lock_dotl+0x10/0x10 [ 103.356286][ T8174] vfs_test_lock+0xee/0x1c0 [ 103.356304][ T8174] fcntl_getlk+0x375/0x8a0 [ 103.356322][ T8174] ? __might_fault+0xc5/0x140 [ 103.356335][ T8174] ? __pfx_fcntl_getlk+0x10/0x10 [ 103.356357][ T8174] do_fcntl+0x104a/0x16c0 [ 103.356375][ T8174] ? __pfx_do_fcntl+0x10/0x10 [ 103.356395][ T8174] ? selinux_file_fcntl+0xe5/0x170 [ 103.356432][ T8174] __x64_sys_fcntl+0x163/0x200 [ 103.356452][ T8174] do_syscall_64+0x123/0x790 [ 103.356465][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.356477][ T8174] RIP: 0033:0x7f5bc719f559 [ 103.356487][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.356499][ T8174] RSP: 002b:00007f5bc7ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 103.356511][ T8174] RAX: ffffffffffffffda RBX: 00007f5bc7425fa0 RCX: 00007f5bc719f559 [ 103.356518][ T8174] RDX: 00002000000004c0 RSI: 0000000000000024 RDI: 0000000000000003 [ 103.356526][ T8174] RBP: 00007f5bc7ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 103.356532][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.356539][ T8174] R13: 00007f5bc7426038 R14: 00007f5bc7425fa0 R15: 00007fff737d0188 [ 103.356556][ T8174] [ 103.420548][ T6006] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 103.570770][ T6006] usb 7-1: Using ep0 maxpacket: 32 [ 103.571873][ T6006] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 103.573610][ T6006] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 103.576539][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.576560][ T6006] usb 7-1: Product: syz [ 103.576576][ T6006] usb 7-1: Manufacturer: syz [ 103.576589][ T6006] usb 7-1: SerialNumber: syz [ 103.583691][ T6006] usb 7-1: config 0 descriptor?? [ 103.584917][ T8158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.585728][ T6006] hub 7-1:0.0: bad descriptor, ignoring hub [ 103.585742][ T6006] hub 7-1:0.0: probe with driver hub failed with error -5 [ 103.652952][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.715295][ T7689] svc: failed to register nfsdv3 RPC service (errno 5). [ 103.715315][ T7689] failed to unregister tcp with rpcbind [ 103.752675][ T8193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=8193 comm=syz.5.632 [ 103.863938][ T8046] veth0_vlan: entered promiscuous mode [ 103.864932][ T8201] netlink: 27 bytes leftover after parsing attributes in process `syz.5.635'. [ 103.869787][ T8046] veth1_vlan: entered promiscuous mode [ 103.888708][ T8046] veth0_macvtap: entered promiscuous mode [ 103.892544][ T8046] veth1_macvtap: entered promiscuous mode [ 103.898959][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.900755][ T5865] usb 7-1: USB disconnect, device number 12 [ 103.910244][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.970774][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.970814][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.970844][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.970873][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.998651][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.998670][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.010757][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.010771][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.131265][ T5797] Bluetooth: hci1: command tx timeout [ 104.282057][ T5797] Bluetooth: hci4: command tx timeout [ 104.441431][ T8212] pci_bus 0000:01: busn_res: [bus 01] is released [ 105.280553][ T41] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 105.349122][ T8227] FAULT_INJECTION: forcing a failure. [ 105.349122][ T8227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.349144][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.2.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.349161][ T8227] Tainted: [L]=SOFTLOCKUP [ 105.349165][ T8227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.349173][ T8227] Call Trace: [ 105.349189][ T8227] [ 105.349194][ T8227] dump_stack_lvl+0x100/0x190 [ 105.349286][ T8227] should_fail_ex.cold+0x5/0xa [ 105.349329][ T8227] _copy_to_user+0x32/0xd0 [ 105.349384][ T8227] do_fcntl+0x95a/0x16c0 [ 105.349430][ T8227] ? __pfx_do_fcntl+0x10/0x10 [ 105.349461][ T8227] ? selinux_file_fcntl+0xe5/0x170 [ 105.349498][ T8227] __x64_sys_fcntl+0x163/0x200 [ 105.349527][ T8227] do_syscall_64+0x123/0x790 [ 105.349604][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.349624][ T8227] RIP: 0033:0x7ff5b319f559 [ 105.349638][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.349656][ T8227] RSP: 002b:00007ff5b4100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 105.349674][ T8227] RAX: ffffffffffffffda RBX: 00007ff5b3425fa0 RCX: 00007ff5b319f559 [ 105.349686][ T8227] RDX: 00002000000004c0 RSI: 0000000000000024 RDI: 0000000000000003 [ 105.349697][ T8227] RBP: 00007ff5b4100090 R08: 0000000000000000 R09: 0000000000000000 [ 105.349707][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.349718][ T8227] R13: 00007ff5b3426038 R14: 00007ff5b3425fa0 R15: 00007ffea92c0e58 [ 105.349743][ T8227] [ 105.401637][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.482881][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.648'. [ 105.501691][ T8240] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.503096][ T41] usb 10-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 105.504009][ T41] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.504033][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.726216][ T41] qmi_wwan 10-1:1.0: cdc-wdm0: USB WDM device [ 105.742483][ T41] wwan wwan0: port wwan0qmi0 attached [ 105.800742][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.963068][ T8222] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.967847][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 105.967859][ T42] audit: type=1400 audit(105.884:666): avc: denied { write } for pid=8262 comm="syz.2.652" name="auth.unix.ip" dev="proc" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 105.968529][ T42] audit: type=1400 audit(105.884:667): avc: denied { add_name } for pid=8262 comm="syz.2.652" name="channel" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 105.968743][ T42] audit: type=1400 audit(105.884:668): avc: denied { create } for pid=8262 comm="syz.2.652" name="channel" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysctl_rpc_t tclass=file permissive=1 [ 105.968917][ T42] audit: type=1400 audit(105.884:669): avc: denied { associate } for pid=8262 comm="syz.2.652" name="channel" scontext=root:object_r:sysctl_rpc_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.969524][ T42] audit: type=1400 audit(105.884:670): avc: denied { write } for pid=8261 comm="syz.6.653" name="/" dev="9p" ino=71827791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.969598][ T8264] team0: No ports can be present during mode change [ 105.973038][ T42] audit: type=1400 audit(105.894:671): avc: denied { associate } for pid=8261 comm="syz.6.653" name="cpuset.memory_pressure" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.979310][ T8263] FAULT_INJECTION: forcing a failure. [ 105.979310][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.979349][ T8263] CPU: 2 UID: 0 PID: 8263 Comm: syz.6.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.979375][ T8263] Tainted: [L]=SOFTLOCKUP [ 105.979382][ T8263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.979394][ T8263] Call Trace: [ 105.979414][ T8263] [ 105.979422][ T8263] dump_stack_lvl+0x100/0x190 [ 105.979556][ T8263] should_fail_ex.cold+0x5/0xa [ 105.979605][ T8263] _copy_to_user+0x32/0xd0 [ 105.979665][ T8263] simple_read_from_buffer+0xcb/0x170 [ 105.979705][ T8263] proc_fail_nth_read+0x1af/0x230 [ 105.979743][ T8263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.979770][ T8263] ? rw_verify_area+0xce/0x6d0 [ 105.979800][ T8263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.979826][ T8263] vfs_read+0x1e4/0xb40 [ 105.979855][ T8263] ? lock_acquire+0x1d1/0x380 [ 105.979887][ T8263] ? __fget_files+0x34/0x3d0 [ 105.979907][ T8263] ? __pfx_vfs_read+0x10/0x10 [ 105.979930][ T8263] ? find_held_lock+0x2b/0x80 [ 105.979951][ T8263] ? __fget_files+0x215/0x3d0 [ 105.979979][ T8263] ? __fget_files+0x21f/0x3d0 [ 105.980013][ T8263] ksys_read+0x12a/0x250 [ 105.980028][ T8263] ? __pfx_ksys_read+0x10/0x10 [ 105.980051][ T8263] do_syscall_64+0x123/0x790 [ 105.980124][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.980146][ T8263] RIP: 0033:0x7fa30cd5fd8e [ 105.980160][ T8263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.980177][ T8263] RSP: 002b:00007fa30aff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.980194][ T8263] RAX: ffffffffffffffda RBX: 00007fa30aff66c0 RCX: 00007fa30cd5fd8e [ 105.980206][ T8263] RDX: 000000000000000f RSI: 00007fa30aff60a0 RDI: 0000000000000004 [ 105.980216][ T8263] RBP: 00007fa30aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.980226][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.980236][ T8263] R13: 00007fa30d026038 R14: 00007fa30d025fa0 R15: 00007ffe1033f128 [ 105.980264][ T8263] [ 106.027495][ T41] qmi_wwan 10-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 22:6e:36:02:b8:3b [ 106.047884][ T41] usb 10-1: USB disconnect, device number 2 [ 106.072581][ T41] qmi_wwan 10-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 106.129522][ T8272] smc: removing ib device syz2 [ 106.190182][ T41] wwan wwan0: port wwan0qmi0 disconnected [ 106.200975][ T5797] Bluetooth: hci1: command tx timeout [ 106.233756][ T8272] smbdirect: ib_dev[syz2] removed [ 106.611960][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.659'. [ 106.762469][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.660'. [ 106.811691][ T42] audit: type=1400 audit(106.734:672): avc: denied { map } for pid=8284 comm="syz.5.661" path="/42/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 106.815405][ T8285] jffs2: notice: (8285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 106.841573][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.949785][ T42] audit: type=1400 audit(106.864:673): avc: denied { listen } for pid=8292 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.951087][ T42] audit: type=1400 audit(106.874:674): avc: denied { connect } for pid=8292 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.959665][ T42] audit: type=1400 audit(106.874:675): avc: denied { mounton } for pid=8291 comm="syz.5.664" path="/45/file0/file0" dev="9p" ino=71827823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.959705][ T8294] fuse: Bad value for 'fd' [ 106.986114][ T8295] can: request_module (can-proto-3) failed. [ 107.013655][ T8301] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.013836][ T8302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.156344][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 107.435582][ T8326] ptrace attach of "/syz-executor exec"[5784] was attempted by ""[8326] [ 107.881955][ T1180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.882369][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.885971][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.205692][ T8323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.205863][ T8323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.205895][ T8323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.215457][ T8323] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.215506][ T8323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.221980][ T8323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.225385][ T8323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.225448][ T8323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.229791][ T8323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.450817][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.451567][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.521623][ T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.671261][ T57] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 108.672589][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.672617][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.672637][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.672671][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.675341][ T57] usb 7-1: config 0 descriptor?? [ 108.788139][ T8342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.678'. [ 108.804772][ T8337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19736 sclass=netlink_route_socket pid=8337 comm=syz.5.677 [ 108.805643][ T8338] netlink: 40 bytes leftover after parsing attributes in process `syz.5.677'. [ 108.806042][ T5141] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 109.080980][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081011][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081032][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081053][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081073][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081094][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081114][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081134][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081155][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.081173][ T57] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 109.090039][ T57] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.250650][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.287181][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.287606][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.355955][ T8351] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 109.493345][ T5141] Bluetooth: hci0: command 0x0c20 tx timeout [ 109.497090][ T8355] device-mapper: table: 248:1: linear: Device lookup failed (-ENOENT) [ 109.497124][ T8355] device-mapper: ioctl: error adding target to table [ 109.563447][ T8361] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 109.728964][ T8376] loop5: detected capacity change from 0 to 7 [ 109.731806][ T8376] buffer_io_error: 10 callbacks suppressed [ 109.731822][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.731853][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.731883][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.731910][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.731952][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.731989][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.732017][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.732032][ T8376] ldm_validate_partition_table(): Disk read failed. [ 109.732058][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.732085][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.732111][ T8376] Buffer I/O error on dev loop5, logical block 0, async page read [ 109.732147][ T8376] Dev loop5: unable to read RDB block 0 [ 109.732199][ T8376] loop5: unable to read partition table [ 109.732348][ T8376] loop5: partition table beyond EOD, truncated [ 109.732363][ T8376] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 110.111760][ T8396] tipc: Resetting bearer [ 110.117683][ T8396] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 110.280646][ T5141] Bluetooth: hci1: command 0x0419 tx timeout [ 110.280677][ T5797] Bluetooth: hci2: command 0x040f tx timeout [ 110.521963][ T5875] net_ratelimit: 9 callbacks suppressed [ 110.521983][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.522823][ T7978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.523883][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.524504][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.842969][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.843308][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.920646][ T8410] netlink: 68 bytes leftover after parsing attributes in process `syz.6.700'. [ 110.985510][ T8417] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.986896][ T8417] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.988169][ T8417] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 110.990930][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 110.990944][ T42] audit: type=1400 audit(110.914:686): avc: denied { getopt } for pid=8415 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.993206][ T8417] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 111.010790][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.113177][ T42] audit: type=1400 audit(111.034:687): avc: denied { getopt } for pid=8423 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.124961][ T42] audit: type=1400 audit(111.044:688): avc: denied { ioctl } for pid=8423 comm="syz.0.704" path="socket:[26062]" dev="sockfs" ino=26062 ioctlcmd=0x8080583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.173595][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.174747][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.176284][ T42] audit: type=1400 audit(111.094:689): avc: denied { ioctl } for pid=8427 comm="syz.0.706" path="socket:[26066]" dev="sockfs" ino=26066 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.226994][ T8431] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 111.238760][ T8431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.306358][ T42] audit: type=1400 audit(111.224:690): avc: denied { write } for pid=8434 comm="syz.6.708" name="/" dev="9p" ino=71827791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.356695][ T24] usb 7-1: USB disconnect, device number 13 [ 111.570537][ T5797] Bluetooth: hci0: command 0x0c20 tx timeout [ 111.577419][ T8445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=263 sclass=netlink_tcpdiag_socket pid=8445 comm=syz.5.713 [ 111.636464][ T8445] netlink: 52 bytes leftover after parsing attributes in process `syz.5.713'. [ 111.672812][ T8453] futex_wake_op: syz.5.715 tries to shift op by -1; fix this program [ 111.673847][ T42] audit: type=1400 audit(111.594:691): avc: denied { shutdown } for pid=8452 comm="syz.5.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.675318][ T8454] overlayfs: conflicting options: userxattr,redirect_dir=on [ 111.775637][ T42] audit: type=1400 audit(111.694:692): avc: denied { mounton } for pid=8457 comm="syz.5.716" path="/61/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 111.801585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.836041][ T42] audit: type=1400 audit(111.754:693): avc: denied { write } for pid=8466 comm="syz.2.718" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 111.881041][ T856] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 111.890280][ T8467] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 111.978294][ T42] audit: type=1400 audit(111.894:694): avc: denied { read } for pid=8470 comm="syz.2.720" lport=54753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.978941][ T8471] netlink: 'syz.2.720': attribute type 30 has an invalid length. [ 112.032257][ T8473] netlink: 'syz.2.720': attribute type 30 has an invalid length. [ 112.033987][ T8471] netlink: 'syz.2.720': attribute type 30 has an invalid length. [ 112.041611][ T856] usb 11-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 112.042551][ T856] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 112.042592][ T856] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 112.042616][ T856] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 112.042637][ T856] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64 [ 112.042656][ T856] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 112.044927][ T856] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.044945][ T856] usb 11-1: Product: syz [ 112.044960][ T856] usb 11-1: Manufacturer: syz [ 112.044971][ T856] usb 11-1: SerialNumber: syz [ 112.048894][ T8451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 112.061599][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 112.074438][ T856] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input16 [ 112.094597][ T8473] netlink: 'syz.2.720': attribute type 30 has an invalid length. [ 112.287146][ T5797] Bluetooth: hci2: unexpected event for opcode 0x204e [ 112.290985][ T856] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 112.291002][ T856] (id 0x00) [ 112.309267][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309352][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309423][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309510][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309630][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309746][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309844][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.309926][ T8488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8488 comm=syz.2.726 [ 112.339872][ T8494] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 112.350598][ T856] rc_core: IR keymap rc-imon-pad not found [ 112.350614][ T856] Registered IR keymap rc-empty [ 112.350948][ T856] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 112.350967][ T856] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 112.360190][ T8494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.370740][ T5797] Bluetooth: hci1: command 0x0419 tx timeout [ 112.495963][ T856] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 112.497614][ T856] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input17 [ 112.504055][ T856] imon 11-1:155.0: iMON device (15c2:ffdc) on usb<11:2> initialized [ 112.655077][ T8509] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 112.667014][ T8502] geneve2: entered promiscuous mode [ 112.682872][ T57] usb 11-1: USB disconnect, device number 2 [ 112.756778][ T42] audit: type=1400 audit(112.674:695): avc: denied { audit_read } for pid=8514 comm="syz.5.734" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.288260][ T8525] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 113.300023][ T8525] rtrs_client L2106: : Failed to resolve address, err: -ENODEV [ 113.301669][ T8525] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 113.321187][ T8525] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 113.327398][ T8525] rtrs_client L2106: : Failed to resolve address, err: -ENODEV [ 113.327492][ T8525] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 113.441571][ T8538] process 'syz.2.738' launched './file0' with NULL argv: empty string added [ 113.542885][ T8547] jffs2: notice: (8547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 113.630106][ T8554] tipc: Started in network mode [ 113.630124][ T8554] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.630151][ T8554] tipc: Enabling of bearer rejected, failed to enable media [ 113.783214][ T8557] FAULT_INJECTION: forcing a failure. [ 113.783214][ T8557] name failslab, interval 1, probability 0, space 0, times 0 [ 113.783247][ T8557] CPU: 2 UID: 0 PID: 8557 Comm: syz.5.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.783274][ T8557] Tainted: [L]=SOFTLOCKUP [ 113.783281][ T8557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.783294][ T8557] Call Trace: [ 113.783302][ T8557] [ 113.783311][ T8557] dump_stack_lvl+0x100/0x190 [ 113.783350][ T8557] should_fail_ex.cold+0x5/0xa [ 113.783382][ T8557] should_failslab+0xc2/0x120 [ 113.783405][ T8557] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.783436][ T8557] ? __lock_acquire+0x5c0/0x1f40 [ 113.783463][ T8557] ? dst_alloc+0x99/0x1a0 [ 113.783579][ T8557] dst_alloc+0x99/0x1a0 [ 113.783604][ T8557] rt_dst_alloc+0x35/0x3a0 [ 113.783643][ T8557] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 113.783678][ T8557] ip_route_output_key_hash+0x118/0x2b0 [ 113.783705][ T8557] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 113.783735][ T8557] ? ping_v4_sendmsg+0x4d5/0x19c0 [ 113.783794][ T8557] ? find_held_lock+0x2b/0x80 [ 113.783820][ T8557] ip_route_output_flow+0x27/0x150 [ 113.783849][ T8557] ping_v4_sendmsg+0xa9d/0x19c0 [ 113.783877][ T8557] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 113.783899][ T8557] ? __lock_acquire+0x5c0/0x1f40 [ 113.783938][ T8557] ? release_sock+0x21/0x280 [ 113.783965][ T8557] ? inet_autobind+0x145/0x1a0 [ 113.783983][ T8557] ? find_held_lock+0x2b/0x80 [ 113.784015][ T8557] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.784048][ T8557] ? inet_autobind+0x145/0x1a0 [ 113.784067][ T8557] ? __local_bh_enable_ip+0xa5/0x120 [ 113.784104][ T8557] ? inet_autobind+0x14a/0x1a0 [ 113.784124][ T8557] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 113.784148][ T8557] inet_sendmsg+0x11c/0x140 [ 113.784174][ T8557] ____sys_sendmsg+0xa23/0xc30 [ 113.784228][ T8557] ? __pfx_inet_sendmsg+0x10/0x10 [ 113.784256][ T8557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.784298][ T8557] ___sys_sendmsg+0x190/0x1e0 [ 113.784329][ T8557] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.784357][ T8557] ? futex_wait+0x11e/0x370 [ 113.784425][ T8557] ? find_held_lock+0x2b/0x80 [ 113.784467][ T8557] __sys_sendmsg+0x160/0x210 [ 113.784491][ T8557] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.784527][ T8557] do_syscall_64+0x123/0x790 [ 113.784550][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.784570][ T8557] RIP: 0033:0x7f5bc719f559 [ 113.784587][ T8557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.784606][ T8557] RSP: 002b:00007f5bc7fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.784627][ T8557] RAX: ffffffffffffffda RBX: 00007f5bc7426090 RCX: 00007f5bc719f559 [ 113.784641][ T8557] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 113.784653][ T8557] RBP: 00007f5bc7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.784667][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.784678][ T8557] R13: 00007f5bc7426128 R14: 00007f5bc7426090 R15: 00007fff737d0188 [ 113.784707][ T8557] [ 114.092263][ T5876] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 114.116422][ T8563] loop0: detected capacity change from 0 to 4096 [ 114.189319][ T8563] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 114.189345][ T8563] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 114.189446][ T8563] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 114.189496][ T8563] loop0: [ 114.250946][ T5876] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 114.252207][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.252237][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.252259][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 114.252297][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.255295][ T5876] usb 7-1: config 0 descriptor?? [ 114.440582][ T5797] Bluetooth: hci1: command 0x0419 tx timeout [ 114.530528][ T41] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 114.662250][ T5876] hid_parser_main: 1 callbacks suppressed [ 114.662265][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662280][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662293][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662306][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662319][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662332][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662345][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662359][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662372][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.662385][ T5876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 114.704582][ T41] usb 11-1: not running at top speed; connect to a high speed hub [ 114.704602][ T41] usb 11-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 114.707302][ T41] usb 11-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.707321][ T41] usb 11-1: config 1 interface 0 has no altsetting 0 [ 114.709791][ T5876] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.709943][ T41] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.709956][ T41] usb 11-1: Product: syz [ 114.709964][ T41] usb 11-1: Manufacturer: syz [ 114.709971][ T41] usb 11-1: SerialNumber: syz [ 114.867977][ T29] usb 7-1: USB disconnect, device number 14 [ 114.960133][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.960700][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.966492][ T41] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 114.972526][ T41] usb 11-1: USB disconnect, device number 3 [ 115.589220][ T8593] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 115.590163][ T8593] @0Ù: renamed from bond_slave_1 (while UP) [ 115.749083][ T3385] net_ratelimit: 5 callbacks suppressed [ 115.749102][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.802586][ T8611] netlink: 164 bytes leftover after parsing attributes in process `syz.5.762'. [ 115.803647][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.803784][ T8609] netlink: 128 bytes leftover after parsing attributes in process `syz.2.760'. [ 115.803803][ T8609] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.803869][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.809602][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.821763][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.848917][ T8540] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 115.910914][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.943162][ T8620] uhci_hcd 0000:00:1d.0: remove, state 4 [ 115.943197][ T8620] usb usb2: USB disconnect, device number 1 [ 115.953824][ T8621] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 115.976904][ T8620] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 115.984204][ T8620] FAULT_INJECTION: forcing a failure. [ 115.984204][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 115.984226][ T8620] CPU: 3 UID: 0 PID: 8620 Comm: syz.6.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.984244][ T8620] Tainted: [L]=SOFTLOCKUP [ 115.984248][ T8620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.984257][ T8620] Call Trace: [ 115.984262][ T8620] [ 115.984267][ T8620] dump_stack_lvl+0x100/0x190 [ 115.984292][ T8620] should_fail_ex.cold+0x5/0xa [ 115.984312][ T8620] should_failslab+0xc2/0x120 [ 115.984327][ T8620] kmem_cache_alloc_noprof+0x92/0x6a0 [ 115.984346][ T8620] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 115.984410][ T8620] ? acpi_ut_create_update_state+0x72/0x130 [ 115.984428][ T8620] acpi_ut_create_update_state+0x72/0x130 [ 115.984444][ T8620] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 115.984466][ T8620] acpi_ut_update_object_reference+0x32f/0x800 [ 115.984486][ T8620] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 115.984504][ T8620] ? __pfx_acpi_ut_trace+0x10/0x10 [ 115.984523][ T8620] ? __pfx_acpi_ut_trace+0x10/0x10 [ 115.984538][ T8620] ? acpi_ut_status_exit+0x111/0x1c0 [ 115.984556][ T8620] acpi_ut_add_reference+0x80/0x170 [ 115.984573][ T8620] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 115.984594][ T8620] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 115.984615][ T8620] ? acpi_ds_create_operand+0x267/0xc20 [ 115.984632][ T8620] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 115.984650][ T8620] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 115.984668][ T8620] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 115.984684][ T8620] ? __asan_memset+0x23/0x50 [ 115.984701][ T8620] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 115.984718][ T8620] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 115.984732][ T8620] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 115.984747][ T8620] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 115.984760][ T8620] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 115.984777][ T8620] acpi_ds_exec_end_op+0xb78/0x1e60 [ 115.984793][ T8620] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 115.984806][ T8620] acpi_ps_parse_loop+0x5e1/0x26e0 [ 115.984824][ T8620] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 115.984836][ T8620] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 115.984854][ T8620] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 115.984869][ T8620] ? acpi_ut_create_thread_state+0x6d/0x170 [ 115.984887][ T8620] acpi_ps_parse_aml+0x81e/0x1120 [ 115.984904][ T8620] acpi_ps_execute_method+0x5c4/0xe90 [ 115.984923][ T8620] acpi_ns_evaluate+0x640/0x1670 [ 115.984944][ T8620] acpi_ut_evaluate_object+0xf7/0x610 [ 115.984964][ T8620] acpi_rs_get_prt_method_data+0xa0/0x150 [ 115.984981][ T8620] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 115.984999][ T8620] ? acpi_ut_status_exit+0x111/0x1c0 [ 115.985017][ T8620] ? acpi_rs_validate_parameters+0x104/0x210 [ 115.985036][ T8620] acpi_get_irq_routing_table+0xb8/0x140 [ 115.985054][ T8620] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 115.985076][ T8620] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 115.985097][ T8620] ? preempt_schedule_thunk+0x16/0x40 [ 115.985116][ T8620] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 115.985140][ T8620] acpi_pci_irq_lookup+0x8e/0x6b0 [ 115.985158][ T8620] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 115.985180][ T8620] acpi_pci_irq_disable+0x1a8/0x360 [ 115.985198][ T8620] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 115.985215][ T8620] pcibios_disable_device+0x89/0xb0 [ 115.985234][ T8620] do_pci_disable_device+0x9f/0x100 [ 115.985252][ T8620] ? __pfx_do_pci_disable_device+0x10/0x10 [ 115.985268][ T8620] ? hub_event+0x17a3/0x4420 [ 115.985306][ T8620] ? kfree+0x22b/0x6d0 [ 115.985324][ T8620] pci_disable_device+0x130/0x270 [ 115.985341][ T8620] usb_hcd_pci_remove+0x1ed/0x300 [ 115.985367][ T8620] pci_device_remove+0xb2/0x1d0 [ 115.985382][ T8620] ? __pfx_pci_device_remove+0x10/0x10 [ 115.985397][ T8620] device_remove+0xcb/0x180 [ 115.985434][ T8620] device_release_driver_internal+0x441/0x610 [ 115.985454][ T8620] pci_stop_bus_device+0x120/0x160 [ 115.985474][ T8620] pci_stop_and_remove_bus_device+0x58/0xa0 [ 115.985492][ T8620] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 115.985513][ T8620] remove_store+0x123/0x140 [ 115.985532][ T8620] ? __pfx_remove_store+0x10/0x10 [ 115.985550][ T8620] ? find_held_lock+0x2b/0x80 [ 115.985563][ T8620] ? sysfs_file_kobj+0xe4/0x290 [ 115.985579][ T8620] ? sysfs_file_kobj+0xe4/0x290 [ 115.985594][ T8620] ? __pfx_remove_store+0x10/0x10 [ 115.985629][ T8620] dev_attr_store+0x58/0x80 [ 115.985657][ T8620] ? __pfx_dev_attr_store+0x10/0x10 [ 115.985673][ T8620] sysfs_kf_write+0xf2/0x150 [ 115.985689][ T8620] kernfs_fop_write_iter+0x3e0/0x5f0 [ 115.985702][ T8620] ? __pfx_sysfs_kf_write+0x10/0x10 [ 115.985719][ T8620] vfs_write+0x6af/0x1050 [ 115.985732][ T8620] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 115.985746][ T8620] ? __pfx_vfs_write+0x10/0x10 [ 115.985765][ T8620] ? find_held_lock+0x2b/0x80 [ 115.985789][ T8620] ksys_write+0x12a/0x250 [ 115.985800][ T8620] ? __pfx_ksys_write+0x10/0x10 [ 115.985816][ T8620] do_syscall_64+0x123/0x790 [ 115.985829][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.985842][ T8620] RIP: 0033:0x7fa30cd9f559 [ 115.985853][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.985865][ T8620] RSP: 002b:00007fa30aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.985879][ T8620] RAX: ffffffffffffffda RBX: 00007fa30d025fa0 RCX: 00007fa30cd9f559 [ 115.985887][ T8620] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000004 [ 115.985894][ T8620] RBP: 00007fa30ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 115.985902][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.985909][ T8620] R13: 00007fa30d026038 R14: 00007fa30d025fa0 R15: 00007ffe1033f128 [ 115.985926][ T8620] [ 115.985967][ T8620] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 116.009186][ T8622] FAULT_INJECTION: forcing a failure. [ 116.009186][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 116.009216][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.6.763 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 116.009244][ T8622] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 116.009253][ T8622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.009264][ T8622] Call Trace: [ 116.009269][ T8622] [ 116.009275][ T8622] dump_stack_lvl+0x100/0x190 [ 116.009300][ T8622] should_fail_ex.cold+0x5/0xa [ 116.009320][ T8622] should_failslab+0xc2/0x120 [ 116.009333][ T8622] __kmalloc_noprof+0xfc/0x840 [ 116.009352][ T8622] ? __register_sysctl_table+0xac/0x1650 [ 116.009374][ T8622] __register_sysctl_table+0xac/0x1650 [ 116.009394][ T8622] ? lock_acquire+0x1d1/0x380 [ 116.009412][ T8622] ? __pfx___register_sysctl_table+0x10/0x10 [ 116.009431][ T8622] ? is_module_address+0x5f/0xf0 [ 116.009443][ T8622] ? is_module_address+0x5f/0xf0 [ 116.009458][ T8622] register_net_sysctl_sz+0x325/0x420 [ 116.009489][ T8622] ? __asan_memcpy+0x3c/0x60 [ 116.009509][ T8622] sysctl_core_net_init+0xe6/0x290 [ 116.009540][ T8622] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 116.009567][ T8622] ops_init+0x1e2/0x5f0 [ 116.009589][ T8622] setup_net+0x118/0x3a0 [ 116.009603][ T8622] ? __pfx_setup_net+0x10/0x10 [ 116.009618][ T8622] ? bpf_lsm_namespace_init+0x9/0x10 [ 116.009634][ T8622] copy_net_ns+0x340/0x7a0 [ 116.009651][ T8622] create_new_namespaces+0x3ea/0xac0 [ 116.009671][ T8622] unshare_nsproxy_namespaces+0xf6/0x210 [ 116.009689][ T8622] ksys_unshare+0x44f/0x980 [ 116.009705][ T8622] ? __pfx_ksys_unshare+0x10/0x10 [ 116.009727][ T8622] __x64_sys_unshare+0x31/0x40 [ 116.009742][ T8622] do_syscall_64+0x123/0x790 [ 116.009758][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.009777][ T8622] RIP: 0033:0x7fa30cd9f559 [ 116.009793][ T8622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.009808][ T8622] RSP: 002b:00007fa30afd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 116.009820][ T8622] RAX: ffffffffffffffda RBX: 00007fa30d026090 RCX: 00007fa30cd9f559 [ 116.009828][ T8622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 116.009835][ T8622] RBP: 00007fa30ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 116.009842][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.009849][ T8622] R13: 00007fa30d026128 R14: 00007fa30d026090 R15: 00007ffe1033f128 [ 116.009868][ T8622] [ 116.040943][ T7978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 116.061192][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 116.203445][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.220507][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 116.220985][ T29] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.221816][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.223467][ T29] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.223488][ T29] usb 7-1: Product: syz [ 116.223502][ T29] usb 7-1: Manufacturer: syz [ 116.223516][ T29] usb 7-1: SerialNumber: syz [ 116.225897][ T29] usb 7-1: config 0 descriptor?? [ 116.229831][ T8613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.230782][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 116.230795][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 116.383199][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 116.383217][ T42] audit: type=1400 audit(116.304:720): avc: denied { append } for pid=8646 comm="syz.5.771" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.392001][ T8647] loop5: detected capacity change from 0 to 7 [ 116.397517][ T8647] Dev loop5: unable to read RDB block 7 [ 116.397556][ T8647] loop5: unable to read partition table [ 116.397698][ T8647] loop5: partition table beyond EOD, truncated [ 116.401056][ T8647] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.428027][ T8649] overlayfs: invalid origin (0000) [ 116.530863][ T5797] Bluetooth: hci1: command 0x0419 tx timeout [ 116.542711][ T5865] usb 7-1: USB disconnect, device number 15 [ 116.601237][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.634940][ T8663] CacheFiles: Failed to register: -95 [ 116.644342][ T8662] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 116.834831][ T42] audit: type=1400 audit(116.754:721): avc: denied { mounton } for pid=8667 comm="syz.6.780" path="/bus" dev="autofs" ino=27104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 116.834916][ T8668] overlay: filesystem on ./file1 not supported [ 116.893944][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 116.894041][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 116.965032][ T8677] batman_adv: Routing algorithm '' is not supported [ 116.966992][ T42] audit: type=1400 audit(116.884:722): avc: denied { map } for pid=8675 comm="syz.6.783" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.002456][ T42] audit: type=1400 audit(116.924:723): avc: denied { create } for pid=8685 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.003569][ T5791] svc: failed to register nfsdv3 RPC service (errno 5). [ 117.003596][ T5791] failed to unregister tcp with rpcbind [ 117.048318][ T42] audit: type=1400 audit(116.964:724): avc: denied { connect } for pid=8689 comm="syz.5.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.049527][ T42] audit: type=1400 audit(116.964:725): avc: denied { write } for pid=8689 comm="syz.5.786" path="socket:[26252]" dev="sockfs" ino=26252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.119328][ T42] audit: type=1400 audit(117.034:726): avc: denied { create } for pid=8695 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.207927][ T8705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.789'. [ 117.207958][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.789'. [ 117.227242][ T8707] i2c i2c-0: new_device: Extra parameters [ 117.240803][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.453510][ T42] audit: type=1400 audit(117.374:727): avc: denied { setattr } for pid=8714 comm="syz.5.795" name="HCI" dev="sockfs" ino=26280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.758476][ T5797] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 118.147248][ T8743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 118.166937][ T8743] netlink: 14 bytes leftover after parsing attributes in process `syz.2.803'. [ 118.191834][ T8743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.195522][ T8743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.204634][ T8743] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 118.206890][ T8743] bond0 (unregistering): Released all slaves [ 118.282410][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.311523][ T8752] netlink: 'syz.2.806': attribute type 63 has an invalid length. [ 118.311545][ T8752] netlink: 5 bytes leftover after parsing attributes in process `syz.2.806'. [ 118.311578][ T8752] gretap0: entered allmulticast mode [ 118.312685][ T8752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.444338][ T42] audit: type=1400 audit(118.364:728): avc: denied { write } for pid=8757 comm="syz.2.808" name="/" dev="9p" ino=71827791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.480560][ T41] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 118.521701][ T42] audit: type=1400 audit(118.444:729): avc: denied { write accept } for pid=8759 comm="syz.0.809" path="socket:[26329]" dev="sockfs" ino=26329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.631244][ T41] usb 10-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 118.632253][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.632277][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.632297][ T41] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.632330][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.638368][ T41] usb 10-1: config 0 descriptor?? [ 118.698693][ T8768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.717674][ T8770] ip_tables: iptables: counters copy to user failed while replacing table [ 118.908728][ T8788] ucma_write: process 689 (syz.2.818) changed security contexts after opening file descriptor, this is not allowed. [ 119.049912][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.054096][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.068260][ T41] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 23/24 [ 119.078889][ T41] plantronics 0003:047F:FFFF.000B: parse failed [ 119.078937][ T41] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 119.130999][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 119.131041][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.825'. [ 119.253708][ T8820] netlink: 'syz.6.826': attribute type 3 has an invalid length. [ 119.253729][ T8820] netlink: 1308 bytes leftover after parsing attributes in process `syz.6.826'. [ 119.274184][ T8820] bond1: entered promiscuous mode [ 119.274426][ T8820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.285390][ T8748] CIFS: Witness protocol support is experimental [ 119.285428][ T8748] CIFS mount error: No usable UNC path provided in device string! [ 119.285428][ T8748] [ 119.285662][ T8748] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 119.294455][ T8748] xt_NFQUEUE: number of total queues is 0 [ 119.296861][ T41] usb 10-1: USB disconnect, device number 3 [ 120.328670][ T5797] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 120.761305][ T6006] net_ratelimit: 3 callbacks suppressed [ 120.761323][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.762858][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.403384][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.411448][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.828242][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 121.828260][ T42] audit: type=1400 audit(121.744:735): avc: denied { lock } for pid=8874 comm="syz.5.841" path="socket:[26604]" dev="sockfs" ino=26604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.855729][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.855819][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.855895][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.855969][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856044][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856117][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856191][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856263][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856363][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856439][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856513][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856592][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856671][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856746][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856822][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856894][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.856965][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857035][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857104][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857174][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857243][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857313][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857376][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857437][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857497][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857561][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857626][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857687][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857755][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857825][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857887][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.857957][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.858028][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 121.860668][ T8878] xt_IDLETIMER: label is empty or not nul-terminated [ 121.964839][ T8885] ip_tables: iptables: counters copy to user failed while replacing table [ 121.965708][ T8885] smc: net device lo applied user defined pnetid SYZ0 [ 121.965931][ T8885] smc: smcd device lo applied user defined pnetid SYZ0 [ 122.021755][ T42] audit: type=1400 audit(121.944:736): avc: denied { read } for pid=8888 comm="syz.6.845" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 122.302731][ T8897] program syz.0.848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.450137][ T42] audit: type=1400 audit(122.364:737): avc: denied { mount } for pid=8901 comm="syz.0.850" name="/" dev="rpc_pipefs" ino=29031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 122.451865][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.493339][ T42] audit: type=1400 audit(122.414:738): avc: denied { unmount } for pid=5791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 122.559221][ T8909] bond2: option downdelay: invalid value (18446744073709551615) [ 122.559248][ T8909] bond2: option downdelay: allowed values 0 - 2147483647 [ 122.563689][ T8909] bond2 (unregistering): Released all slaves [ 122.594361][ T57] hid (null): invalid report_size 26653 [ 122.594390][ T57] hid (null): unknown global tag 0xd [ 122.596405][ T57] hid-generic 0005:0008:003F.000C: unexpected long global item [ 122.596738][ T57] hid-generic 0005:0008:003F.000C: probe with driver hid-generic failed with error -22 [ 122.678034][ T42] audit: type=1400 audit(122.594:739): avc: denied { read } for pid=8922 comm="syz.2.857" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.480740][ T6006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.561602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.561791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.561996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.642694][ T8995] overlay: filesystem on ./bus is read-only [ 123.650096][ T8999] program syz.6.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.672761][ T9002] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 123.672864][ T9002] device-mapper: table: 248:3: multipath: invalid number of paths (-EINVAL) [ 123.672884][ T9002] device-mapper: ioctl: error adding target to table [ 123.697999][ T9007] __nla_validate_parse: 3 callbacks suppressed [ 123.698017][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 123.698031][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 123.715224][ T9015] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 123.729456][ T42] audit: type=1400 audit(123.644:740): avc: denied { write } for pid=9009 comm="syz.5.867" name="/" dev="9p" ino=71827791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.769317][ T42] audit: type=1400 audit(123.684:741): avc: denied { load_policy } for pid=9018 comm="syz.6.869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.769895][ T9019] SELinux: policydb version 0 does not match my version range 15-35 [ 123.770061][ T9019] SELinux: failed to load policy [ 123.793380][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793400][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793410][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793419][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793428][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793438][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793447][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793457][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793467][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.793476][ T9019] tc action pedit unable to extract header offset for header type (0x5) [ 123.972028][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 124.022483][ T9038] netlink: 68 bytes leftover after parsing attributes in process `syz.2.875'. [ 124.097008][ T42] audit: type=1400 audit(124.014:742): avc: denied { write } for pid=9039 comm="syz.6.876" name="functions" dev="configfs" ino=13327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.185854][ T9052] Failure starting scanning (-16) [ 124.229150][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 124.296098][ T9066] input: syz0 as /devices/virtual/input/input18 [ 124.355517][ T42] audit: type=1400 audit(124.274:743): avc: denied { write } for pid=9068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.355863][ T42] audit: type=1400 audit(124.274:744): avc: denied { create } for pid=9068 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.374171][ T9069] selinux_netlink_send: 25 callbacks suppressed [ 124.374190][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9069 comm=syz.5.887 [ 124.600645][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.606792][ T9111] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 124.855327][ T9135] comedi comedi3: bad chanlist[0]=0x8000001f chan=31 range length=1 [ 124.882904][ T9133] smpboot: CPU 1 is now offline [ 125.004493][ T9133] smpboot: CPU 3 is now offline [ 125.187032][ T9158] CIFS: iocharset name too long [ 125.188011][ T9158] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“�ë) failed with errno=-22 [ 125.246942][ T9157] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 125.278151][ T9162] netlink: 64 bytes leftover after parsing attributes in process `syz.0.907'. [ 125.309507][ T9154] syzkaller1: entered promiscuous mode [ 125.309528][ T9154] syzkaller1: entered allmulticast mode [ 125.368919][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 125.368943][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.907'. [ 125.369352][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 125.369367][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.907'. [ 125.509065][ T5797] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 125.510336][ T5797] Bluetooth: hci0: unexpected event for opcode 0x203e [ 125.565282][ T9183] netlink: 'syz.5.917': attribute type 10 has an invalid length. [ 125.577569][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.591082][ T9183] team0: Port device netdevsim1 added [ 125.872902][ T9200] net_ratelimit: 4 callbacks suppressed [ 125.872918][ T9200] ip_tables: iptables: counters copy to user failed while replacing table [ 125.892548][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.957967][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.921'. [ 126.460114][ T8981] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.460132][ T8981] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 126.476077][ T5865] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 126.533332][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.614421][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.624762][ T5865] usb 5-1: not running at top speed; connect to a high speed hub [ 126.624788][ T5865] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 126.625933][ T5865] usb 5-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.625961][ T5865] usb 5-1: config 1 interface 0 has no altsetting 0 [ 126.628704][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.628723][ T5865] usb 5-1: Product: syz [ 126.628731][ T5865] usb 5-1: Manufacturer: syz [ 126.628742][ T5865] usb 5-1: SerialNumber: syz [ 127.072828][ T5865] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 127.085732][ T5865] usb 5-1: USB disconnect, device number 7 [ 127.278826][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 127.278840][ T42] audit: type=1400 audit(127.194:766): avc: denied { mount } for pid=9270 comm="syz.5.949" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.296026][ T9272] netlink: set zone limit has 8 unknown bytes [ 127.485364][ T9276] fuse: Bad value for 'fd' [ 127.641627][ T8978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.800692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.828279][ T9290] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 128.038124][ T42] audit: type=1400 audit(127.954:767): avc: denied { write } for pid=9300 comm="syz.6.953" name="set_event" dev="tracefs" ino=3307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 128.112270][ T9302] ptrace attach of "/syz-executor exec"[8046] was attempted by ""[9302] [ 128.170030][ T9304] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.191836][ T42] audit: type=1400 audit(128.114:768): avc: denied { getopt } for pid=9303 comm="syz.2.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.248385][ T9315] ip_tables: iptables: counters copy to user failed while replacing table [ 128.375519][ T9333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.375534][ T9333] IPv6: NLM_F_CREATE should be set when creating new route [ 128.376179][ T9334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.413383][ T9325] IPv6: sit1: Disabled Multicast RS [ 128.414344][ T9325] sit1: entered allmulticast mode [ 128.436721][ T9337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.436752][ T9337] block device autoloading is deprecated and will be removed. [ 128.451299][ T8978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.481137][ T9337] md: invalid raid superblock magic on ram10 [ 128.481155][ T9337] md: ram10 does not have a valid v0.0 superblock, not importing! [ 128.481215][ T9337] md: md_import_device returned -22 [ 128.573208][ T9344] tmpfs: Bad value for 'mpol' [ 128.600676][ T5797] Bluetooth: hci2: command 0x040f tx timeout [ 128.601264][ T8981] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 128.601278][ T8981] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 128.780435][ T9351] [U] ¥ [ 128.780459][ T9351] [U] [ 128.780476][ T9351] [U] [ 128.780497][ T9351] [U] [ 128.780610][ T9351] [U] [ 128.780628][ T9351] [U] [ 128.780644][ T9351] [U] [ 128.780661][ T9351] [U] [ 128.780679][ T9351] [U] [ 128.780696][ T9351] [U] [ 128.780712][ T9351] [U] [ 128.780728][ T9351] [U] [ 128.780751][ T9351] [U] [ 128.780767][ T9351] [U] [ 128.780784][ T9351] [U] [ 128.780800][ T9351] [U] [ 128.780821][ T9351] [U] [ 128.780838][ T9351] [U] [ 128.780854][ T9351] [U] [ 128.780870][ T9351] [U] [ 128.780893][ T9351] [U] [ 128.780910][ T9351] [U] [ 128.780926][ T9351] [U] [ 128.780943][ T9351] [U] [ 128.780963][ T9351] [U] [ 128.780980][ T9351] [U] [ 128.780996][ T9351] [U] [ 128.781012][ T9351] [U] [ 128.781035][ T9351] [U] [ 128.781051][ T9351] [U] [ 128.781068][ T9351] [U] [ 128.781084][ T9351] [U] [ 128.781101][ T9351] [U] [ 128.781117][ T9351] [U] [ 128.781134][ T9351] [U] [ 128.781150][ T9351] [U] [ 128.781172][ T9351] [U] [ 128.781188][ T9351] [U] [ 128.781205][ T9351] [U] [ 128.781221][ T9351] [U] [ 128.781238][ T9351] [U] [ 128.781255][ T9351] [U] [ 128.781271][ T9351] [U] [ 128.781287][ T9351] [U] [ 128.781309][ T9351] [U] [ 128.781340][ T9351] [U] [ 128.781358][ T9351] [U] [ 128.781375][ T9351] [U] [ 128.781424][ T9351] [U] [ 128.781442][ T9351] [U] [ 128.781459][ T9351] [U] [ 128.781475][ T9351] [U] [ 128.781503][ T9351] [U] [ 128.781519][ T9351] [U] [ 128.781535][ T9351] [U] [ 128.781552][ T9351] [U] [ 128.781569][ T9351] [U] [ 128.781586][ T9351] [U] [ 128.781602][ T9351] [U] [ 128.781618][ T9351] [U] [ 128.781640][ T9351] [U] [ 128.781656][ T9351] [U] [ 128.781673][ T9351] [U] [ 128.781689][ T9351] [U] [ 128.781706][ T9351] [U] [ 128.781722][ T9351] [U] [ 128.781739][ T9351] [U] [ 128.781755][ T9351] [U] [ 128.781777][ T9351] [U] [ 128.781793][ T9351] [U] [ 128.781810][ T9351] [U] [ 128.781826][ T9351] [U] [ 128.781843][ T9351] [U] [ 128.781859][ T9351] [U] [ 128.781875][ T9351] [U] [ 128.781892][ T9351] [U] [ 128.783229][ T9351] [U] [ 128.783250][ T9351] [U] [ 128.783266][ T9351] [U] [ 128.783283][ T9351] [U] [ 128.783301][ T9351] [U] [ 128.783317][ T9351] [U] [ 128.783334][ T9351] [U] [ 128.783350][ T9351] [U] [ 128.783373][ T9351] [U] [ 128.783390][ T9351] [U] [ 128.783406][ T9351] [U] [ 128.783422][ T9351] [U] [ 128.783440][ T9351] [U] [ 128.783456][ T9351] [U] [ 128.783473][ T9351] [U] [ 128.783495][ T9351] [U] [ 128.783518][ T9351] [U] [ 128.783534][ T9351] [U] [ 128.783551][ T9351] [U] [ 128.783567][ T9351] [U] [ 128.783585][ T9351] [U] [ 128.783601][ T9351] [U] [ 128.783617][ T9351] [U] [ 128.783634][ T9351] [U] [ 128.783656][ T9351] [U] [ 128.783672][ T9351] [U] [ 128.783689][ T9351] [U] [ 128.783705][ T9351] [U] [ 128.783723][ T9351] [U] [ 128.783739][ T9351] [U] [ 128.783756][ T9351] [U] [ 128.783772][ T9351] [U] [ 128.783794][ T9351] [U] [ 128.783811][ T9351] [U] [ 128.783827][ T9351] [U] [ 128.783843][ T9351] [U] [ 128.783861][ T9351] [U] [ 128.783877][ T9351] [U] [ 128.783894][ T9351] [U] [ 128.783910][ T9351] [U] [ 128.783932][ T9351] [U] [ 128.783949][ T9351] [U] [ 128.783965][ T9351] [U] [ 128.783981][ T9351] [U] [ 128.783999][ T9351] [U] [ 128.784015][ T9351] [U] [ 128.784032][ T9351] [U] [ 128.784048][ T9351] [U] [ 128.784070][ T9351] [U] [ 128.784086][ T9351] [U] [ 128.784103][ T9351] [U] [ 128.788043][ T9351] [U] [ 128.788064][ T9351] [U] [ 128.788081][ T9351] [U] [ 128.788098][ T9351] [U] [ 128.788115][ T9351] [U] [ 128.788132][ T9351] [U] [ 128.788148][ T9351] [U] [ 128.788165][ T9351] [U] [ 128.788181][ T9351] [U] [ 128.788198][ T9351] [U] [ 128.788215][ T9351] [U] [ 128.788232][ T9351] [U] [ 128.788248][ T9351] [U] [ 128.788265][ T9351] [U] [ 128.788282][ T9351] [U] [ 128.788324][ T9351] [U] [ 128.788342][ T9351] [U] [ 128.788360][ T9351] [U] [ 128.788376][ T9351] [U] [ 128.788393][ T9351] [U] [ 128.788409][ T9351] [U] [ 128.788427][ T9351] [U] [ 128.788443][ T9351] [U] [ 128.788460][ T9351] [U] [ 128.788476][ T9351] [U] [ 128.788498][ T9351] [U] [ 128.788515][ T9351] [U] [ 128.788531][ T9351] [U] [ 128.788548][ T9351] [U] [ 128.789794][ T9351] [U] [ 128.789815][ T9351] [U] [ 128.789831][ T9351] [U] [ 128.789848][ T9351] [U] [ 128.789866][ T9351] [U] [ 128.789882][ T9351] [U] [ 128.789899][ T9351] [U] [ 128.789915][ T9351] [U] [ 128.789933][ T9351] [U] [ 128.789949][ T9351] [U] [ 128.789965][ T9351] [U] [ 128.789982][ T9351] [U] [ 128.789999][ T9351] [U] [ 128.790016][ T9351] [U] [ 128.790032][ T9351] [U] [ 128.790048][ T9351] [U] [ 128.790066][ T9351] [U] [ 128.790082][ T9351] [U] [ 128.790098][ T9351] [U] [ 128.790115][ T9351] [U] [ 128.790132][ T9351] [U] [ 128.790148][ T9351] [U] [ 128.790165][ T9351] [U] [ 128.790194][ T9351] [U] [ 128.790235][ T9351] [U] [ 128.790253][ T9351] [U] [ 128.790269][ T9351] [U] [ 128.790285][ T9351] [U] [ 128.790303][ T9351] [U] [ 128.790319][ T9351] [U] [ 128.790336][ T9351] [U] [ 128.790352][ T9351] [U] [ 128.790369][ T9351] [U] [ 128.790386][ T9351] [U] [ 128.790412][ T9351] [U] [ 128.790431][ T9351] [U] [ 128.792774][ T9351] [U] [ 128.792794][ T9351] [U] [ 128.792812][ T9351] [U] [ 128.792830][ T9351] [U] [ 128.792848][ T9351] [U] [ 128.792866][ T9351] [U] [ 128.792884][ T9351] [U] [ 128.792901][ T9351] [U] [ 128.792919][ T9351] [U] [ 128.792937][ T9351] [U] [ 128.792954][ T9351] [U] [ 128.792972][ T9351] [U] [ 128.792991][ T9351] [U] [ 128.793008][ T9351] [U] [ 128.793025][ T9351] [U] [ 128.793043][ T9351] [U] [ 128.793061][ T9351] [U] [ 128.793079][ T9351] [U] [ 128.793113][ T9351] [U] [ 128.793132][ T9351] [U] [ 128.793228][ T9351] [U] [ 128.793247][ T9351] [U] [ 128.793264][ T9351] [U] [ 128.793282][ T9351] [U] [ 128.793301][ T9351] [U] [ 128.793318][ T9351] [U] [ 128.793335][ T9351] [U] [ 128.793353][ T9351] [U] [ 128.793371][ T9351] [U] [ 128.793389][ T9351] [U] [ 128.793407][ T9351] [U] [ 128.793424][ T9351] [U] [ 128.793442][ T9351] [U] [ 128.793460][ T9351] [U] [ 128.793478][ T9351] [U] [ 128.793499][ T9351] [U] [ 128.793518][ T9351] [U] [ 128.793536][ T9351] [U] [ 128.793553][ T9351] [U] [ 128.793571][ T9351] [U] [ 128.793589][ T9351] [U] [ 128.793607][ T9351] [U] [ 128.793624][ T9351] [U] [ 128.793642][ T9351] [U] [ 128.793660][ T9351] [U] [ 128.793678][ T9351] [U] [ 128.793695][ T9351] [U] [ 128.793713][ T9351] [U] [ 128.793731][ T9351] [U] [ 128.793749][ T9351] [U] [ 128.793766][ T9351] [U] [ 128.793784][ T9351] [U] [ 128.793802][ T9351] [U] [ 128.793820][ T9351] [U] [ 128.793837][ T9351] [U] [ 128.793854][ T9351] [U] [ 128.793873][ T9351] [U] [ 128.793891][ T9351] [U] [ 128.793908][ T9351] [U] [ 128.793925][ T9351] [U] [ 128.793944][ T9351] [U] [ 128.793962][ T9351] [U] [ 128.793979][ T9351] [U] [ 128.794789][ T9350] [U] [ 128.983636][ T9357] __nla_validate_parse: 9 callbacks suppressed [ 128.983649][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.977'. [ 129.002528][ T9366] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 129.141803][ T42] audit: type=1400 audit(129.064:769): avc: denied { bind } for pid=9369 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.246797][ T9378] zonefs (loop0) ERROR: Not a zoned block device [ 129.252414][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 129.252487][ T9378] tipc: Resetting bearer [ 129.268333][ T9378] tipc: Disabling bearer [ 129.268804][ T9382] netlink: 'syz.6.986': attribute type 2 has an invalid length. [ 129.270388][ T9381] Cannot find add_set index 65532 as target [ 129.616219][ T42] audit: type=1400 audit(129.534:770): avc: denied { create } for pid=9395 comm="syz.6.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.647246][ T42] audit: type=1400 audit(129.564:771): avc: denied { accept } for pid=9395 comm="syz.6.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.706276][ T9399] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 129.869159][ T42] audit: type=1400 audit(129.784:772): avc: denied { accept } for pid=9404 comm="syz.6.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.118426][ T9420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.998'. [ 130.123249][ T42] audit: type=1400 audit(130.034:773): avc: denied { read } for pid=9419 comm="syz.0.998" path="socket:[32543]" dev="sockfs" ino=32543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.241078][ T8979] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 130.281452][ T9432] FAULT_INJECTION: forcing a failure. [ 130.281452][ T9432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.281512][ T9432] CPU: 2 UID: 0 PID: 9432 Comm: syz.5.1003 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 130.281532][ T9432] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 130.281538][ T9432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.281545][ T9432] Call Trace: [ 130.281562][ T9432] [ 130.281567][ T9432] dump_stack_lvl+0x100/0x190 [ 130.281706][ T9432] should_fail_ex.cold+0x5/0xa [ 130.281740][ T9432] should_fail_alloc_page+0xeb/0x140 [ 130.281784][ T9432] prepare_alloc_pages+0x1f0/0x5b0 [ 130.281809][ T9432] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 130.281843][ T9432] ? lock_acquire+0x1d1/0x380 [ 130.281884][ T9432] ? is_bpf_text_address+0x25/0x1a0 [ 130.281910][ T9432] ? find_held_lock+0x2b/0x80 [ 130.281935][ T9432] ? __lock_acquire+0x5c0/0x1f40 [ 130.281963][ T9432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.281991][ T9432] ? kernel_text_address+0x8d/0x100 [ 130.282013][ T9432] ? __kernel_text_address+0xd/0x30 [ 130.282038][ T9432] ? do_raw_spin_lock+0x128/0x260 [ 130.282057][ T9432] ? find_held_lock+0x2b/0x80 [ 130.282076][ T9432] ? stack_depot_save_flags+0x49a/0xa10 [ 130.282138][ T9432] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.282228][ T9432] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.282257][ T9432] ? stack_depot_save_flags+0x49a/0xa10 [ 130.282287][ T9432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.282319][ T9432] ? policy_nodemask+0xed/0x5e0 [ 130.282343][ T9432] alloc_pages_mpol+0x201/0x560 [ 130.282364][ T9432] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 130.282408][ T9432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.282437][ T9432] alloc_pages_noprof+0x1a/0x160 [ 130.282461][ T9432] get_free_pages_noprof+0x10/0xb0 [ 130.282492][ T9432] __kasan_populate_vmalloc+0xa0/0x210 [ 130.282525][ T9432] alloc_vmap_area+0x963/0x2bc0 [ 130.282562][ T9432] ? kasan_save_track+0x14/0x30 [ 130.282579][ T9432] ? __kasan_kmalloc+0xaa/0xb0 [ 130.282606][ T9432] ? __pfx_alloc_vmap_area+0x10/0x10 [ 130.282633][ T9432] ? unwind_get_return_address+0x59/0xa0 [ 130.282665][ T9432] ? __get_vm_area_node+0x124/0x350 [ 130.282698][ T9432] __get_vm_area_node+0x1ed/0x350 [ 130.282734][ T9432] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 130.282755][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.282782][ T9432] ? __lock_acquire+0x5c0/0x1f40 [ 130.282810][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.282841][ T9432] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.282862][ T9432] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.282886][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.282910][ T9432] __vmalloc_node_noprof+0xad/0xf0 [ 130.282929][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.282957][ T9432] vrealloc_node_align_noprof+0x281/0x790 [ 130.282982][ T9432] ? __pfx_vrealloc_node_align_noprof+0x10/0x10 [ 130.283002][ T9432] ? __pfx___might_resched+0x10/0x10 [ 130.283033][ T9432] __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.283058][ T9432] ? rcu_is_watching+0x13/0xc0 [ 130.283078][ T9432] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 130.283106][ T9432] ? kfree+0x1e5/0x6d0 [ 130.283134][ T9432] ? __pfx___bpf_patch_insn_data+0x10/0x10 [ 130.283159][ T9432] ? __asan_memcpy+0x3c/0x60 [ 130.283184][ T9432] ? bpf_jit_add_poke_descriptor+0x35b/0x420 [ 130.283211][ T9432] bpf_do_misc_fixups+0x7f21/0xca80 [ 130.283246][ T9432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.283276][ T9432] ? __pfx_bpf_do_misc_fixups+0x10/0x10 [ 130.283300][ T9432] ? bpf_convert_ctx_accesses+0x11fe/0x2f30 [ 130.283336][ T9432] ? __pfx_bpf_convert_ctx_accesses+0x10/0x10 [ 130.283364][ T9432] ? bpf_opt_remove_nops+0x1d5/0x230 [ 130.283399][ T9432] bpf_check+0x404d/0xa150 [ 130.283448][ T9432] ? __pfx_bpf_check+0x10/0x10 [ 130.283478][ T9432] ? find_held_lock+0x2b/0x80 [ 130.283497][ T9432] ? bpf_prog_load+0x1b60/0x2ba0 [ 130.283527][ T9432] ? __asan_memset+0x23/0x50 [ 130.283557][ T9432] ? bpf_prog_load+0x1c1f/0x2ba0 [ 130.283582][ T9432] bpf_prog_load+0x1c1f/0x2ba0 [ 130.283608][ T9432] ? avc_has_perm_noaudit+0x11e/0x470 [ 130.283649][ T9432] ? __pfx_bpf_prog_load+0x10/0x10 [ 130.283701][ T9432] __sys_bpf+0x146f/0x4b60 [ 130.283735][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 130.283762][ T9432] ? find_held_lock+0x2b/0x80 [ 130.283780][ T9432] ? futex_wake+0x4ea/0x5e0 [ 130.283804][ T9432] ? futex_wake+0x4ea/0x5e0 [ 130.283843][ T9432] ? percpu_counter_add_batch+0xb9/0x230 [ 130.283869][ T9432] ? errseq_sample+0x51/0x70 [ 130.283889][ T9432] ? file_init_path+0x48e/0x670 [ 130.283926][ T9432] ? __x64_sys_futex+0x34f/0x4d0 [ 130.283946][ T9432] ? __x64_sys_futex+0x358/0x4d0 [ 130.283968][ T9432] ? __sys_socket+0xac/0x260 [ 130.284054][ T9432] ? xfd_validate_state+0x129/0x190 [ 130.284096][ T9432] ? __x64_sys_bpf+0xce/0x140 [ 130.284113][ T9432] __x64_sys_bpf+0xce/0x140 [ 130.284132][ T9432] ? do_syscall_64+0xae/0x790 [ 130.284152][ T9432] do_syscall_64+0x123/0x790 [ 130.284173][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.284192][ T9432] RIP: 0033:0x7f5bc719f559 [ 130.284210][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.284228][ T9432] RSP: 002b:00007f5bc7ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.284249][ T9432] RAX: ffffffffffffffda RBX: 00007f5bc7425fa0 RCX: 00007f5bc719f559 [ 130.284263][ T9432] RDX: 0000000000000090 RSI: 00002000000027c0 RDI: 0000000000000005 [ 130.284275][ T9432] RBP: 00007f5bc7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.284310][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.284322][ T9432] R13: 00007f5bc7426038 R14: 00007f5bc7425fa0 R15: 00007fff737d0188 [ 130.284349][ T9432] [ 130.284703][ T9432] syz.5.1003: vmalloc error: size 5200, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.284861][ T9432] CPU: 2 UID: 0 PID: 9432 Comm: syz.5.1003 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 130.284884][ T9432] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 130.284889][ T9432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.284897][ T9432] Call Trace: [ 130.284902][ T9432] [ 130.284907][ T9432] dump_stack_lvl+0x100/0x190 [ 130.284929][ T9432] warn_alloc.cold+0x9e/0xb2 [ 130.284956][ T9432] ? __pfx_warn_alloc+0x10/0x10 [ 130.284972][ T9432] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.284993][ T9432] ? __get_vm_area_node+0x2f0/0x350 [ 130.285016][ T9432] ? __get_vm_area_node+0x22b/0x350 [ 130.285039][ T9432] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 130.285053][ T9432] ? __lock_acquire+0x5c0/0x1f40 [ 130.285072][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.285093][ T9432] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.285107][ T9432] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.285122][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.285137][ T9432] __vmalloc_node_noprof+0xad/0xf0 [ 130.285149][ T9432] ? __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.285167][ T9432] vrealloc_node_align_noprof+0x281/0x790 [ 130.285182][ T9432] ? __pfx_vrealloc_node_align_noprof+0x10/0x10 [ 130.285195][ T9432] ? __pfx___might_resched+0x10/0x10 [ 130.285213][ T9432] __bpf_patch_insn_data+0xbd8/0x11a0 [ 130.285229][ T9432] ? rcu_is_watching+0x13/0xc0 [ 130.285242][ T9432] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 130.285259][ T9432] ? kfree+0x1e5/0x6d0 [ 130.285276][ T9432] ? __pfx___bpf_patch_insn_data+0x10/0x10 [ 130.285292][ T9432] ? __asan_memcpy+0x3c/0x60 [ 130.285309][ T9432] ? bpf_jit_add_poke_descriptor+0x35b/0x420 [ 130.285327][ T9432] bpf_do_misc_fixups+0x7f21/0xca80 [ 130.285349][ T9432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.285368][ T9432] ? __pfx_bpf_do_misc_fixups+0x10/0x10 [ 130.285390][ T9432] ? bpf_convert_ctx_accesses+0x11fe/0x2f30 [ 130.285414][ T9432] ? __pfx_bpf_convert_ctx_accesses+0x10/0x10 [ 130.285434][ T9432] ? bpf_opt_remove_nops+0x1d5/0x230 [ 130.285453][ T9432] bpf_check+0x404d/0xa150 [ 130.285482][ T9432] ? __pfx_bpf_check+0x10/0x10 [ 130.285503][ T9432] ? find_held_lock+0x2b/0x80 [ 130.285515][ T9432] ? bpf_prog_load+0x1b60/0x2ba0 [ 130.285536][ T9432] ? __asan_memset+0x23/0x50 [ 130.285556][ T9432] ? bpf_prog_load+0x1c1f/0x2ba0 [ 130.285574][ T9432] bpf_prog_load+0x1c1f/0x2ba0 [ 130.285595][ T9432] ? avc_has_perm_noaudit+0x11e/0x470 [ 130.285613][ T9432] ? __pfx_bpf_prog_load+0x10/0x10 [ 130.285646][ T9432] __sys_bpf+0x146f/0x4b60 [ 130.285669][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 130.285687][ T9432] ? find_held_lock+0x2b/0x80 [ 130.285699][ T9432] ? futex_wake+0x4ea/0x5e0 [ 130.285716][ T9432] ? futex_wake+0x4ea/0x5e0 [ 130.285742][ T9432] ? percpu_counter_add_batch+0xb9/0x230 [ 130.285759][ T9432] ? errseq_sample+0x51/0x70 [ 130.285772][ T9432] ? file_init_path+0x48e/0x670 [ 130.285796][ T9432] ? __x64_sys_futex+0x34f/0x4d0 [ 130.285808][ T9432] ? __x64_sys_futex+0x358/0x4d0 [ 130.285822][ T9432] ? __sys_socket+0xac/0x260 [ 130.285840][ T9432] ? xfd_validate_state+0x129/0x190 [ 130.285857][ T9432] ? __x64_sys_bpf+0xce/0x140 [ 130.285867][ T9432] __x64_sys_bpf+0xce/0x140 [ 130.285878][ T9432] ? do_syscall_64+0xae/0x790 [ 130.285890][ T9432] do_syscall_64+0x123/0x790 [ 130.285902][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.285914][ T9432] RIP: 0033:0x7f5bc719f559 [ 130.285924][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.285956][ T9432] RSP: 002b:00007f5bc7ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.285969][ T9432] RAX: ffffffffffffffda RBX: 00007f5bc7425fa0 RCX: 00007f5bc719f559 [ 130.285977][ T9432] RDX: 0000000000000090 RSI: 00002000000027c0 RDI: 0000000000000005 [ 130.285984][ T9432] RBP: 00007f5bc7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 130.285992][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.285999][ T9432] R13: 00007f5bc7426038 R14: 00007f5bc7425fa0 R15: 00007fff737d0188 [ 130.286014][ T9432] [ 130.286087][ T9432] Mem-Info: [ 130.286094][ T9432] active_anon:16041 inactive_anon:0 isolated_anon:0 [ 130.286094][ T9432] active_file:3099 inactive_file:37328 isolated_file:0 [ 130.286094][ T9432] unevictable:1000 dirty:189 writeback:0 [ 130.286094][ T9432] slab_reclaimable:9616 slab_unreclaimable:74113 [ 130.286094][ T9432] mapped:25592 shmem:1559 pagetables:1695 [ 130.286094][ T9432] sec_pagetables:303 bounce:0 [ 130.286094][ T9432] kernel_misc_reclaimable:0 [ 130.286094][ T9432] free:413492 free_pcp:19805 free_cma:0 [ 130.286125][ T9432] Node 0 active_anon:63752kB inactive_anon:0kB active_file:11696kB inactive_file:146516kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:101660kB dirty:736kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17632kB pagetables:6484kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 130.286158][ T9432] Node 1 active_anon:412kB inactive_anon:0kB active_file:700kB inactive_file:2796kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:708kB dirty:20kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:296kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 130.286190][ T9432] Node 0 DMA free:15208kB boost:0kB min:356kB low:444kB high:532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 130.286225][ T9432] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 130.286246][ T9432] Node 0 DMA32 free:136752kB boost:0kB min:28712kB low:35888kB high:43064kB reserved_highatomic:0kB free_highatomic:0kB active_anon:63752kB inactive_anon:0kB active_file:11696kB inactive_file:146516kB unevictable:2000kB writepending:736kB zspages:0kB present:2080628kB managed:1230960kB mlocked:0kB bounce:0kB free_pcp:74300kB local_pcp:28264kB free_cma:0kB [ 130.286282][ T9432] lowmem_reserve[]: 0 0 0 0 0 [ 130.286302][ T9432] Node 1 Normal free:1502008kB boost:0kB min:38508kB low:48132kB high:57756kB reserved_highatomic:0kB free_highatomic:0kB active_anon:412kB inactive_anon:0kB active_file:700kB inactive_file:2796kB unevictable:2000kB writepending:20kB zspages:0kB present:1966080kB managed:1650808kB mlocked:0kB bounce:0kB free_pcp:4900kB local_pcp:2332kB free_cma:0kB [ 130.286335][ T9432] lowmem_reserve[]: 0 0 0 0 0 [ 130.286354][ T9432] Node 0 DMA: 4*4kB (UM) 3*8kB (U) 6*16kB (UM) 7*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 1*4096kB (U) = 15208kB [ 130.286454][ T9432] Node 0 DMA32: 2324*4kB (UME) 516*8kB (UME) 260*16kB (UME) 276*32kB (UME) 168*64kB (UME) 148*128kB (UME) 49*256kB (ME) 23*512kB (UM) 7*1024kB (M) 14*2048kB (UM) 5*4096kB (U) = 136752kB [ 130.286551][ T9432] Node 1 Normal: 122*4kB (UM) 48*8kB (UM) 81*16kB (UME) 80*32kB (UME) 57*64kB (UME) 39*128kB (UME) 29*256kB (UME) 23*512kB (UME) 13*1024kB (UM) 13*2048kB (UME) 349*4096kB (UM) = 1502008kB [ 130.286650][ T9432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.286659][ T9432] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.286668][ T9432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.286677][ T9432] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.286686][ T9432] 41982 total pagecache pages [ 130.286690][ T9432] 0 pages in swap cache [ 130.286694][ T9432] Free swap = 124996kB [ 130.286698][ T9432] Total swap = 124996kB [ 130.286702][ T9432] 1015675 pages RAM [ 130.286706][ T9432] 0 pages HighMem/MovableOnly [ 130.286710][ T9432] 291393 pages reserved [ 130.286714][ T9432] 0 pages cma reserved [ 130.411023][ T8979] usb 7-1: Using ep0 maxpacket: 8 [ 130.413663][ T8979] usb 7-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 130.417616][ T8979] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.417632][ T8979] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.417647][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.417662][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 130.417677][ T8979] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.423254][ T8979] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 130.423270][ T8979] usb 7-1: Manufacturer: syz [ 130.423279][ T8979] usb 7-1: SerialNumber: syz [ 130.444257][ T8979] usb 7-1: config 0 descriptor?? [ 130.445444][ T9409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.456371][ T8979] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 130.661105][ T42] audit: type=1400 audit(130.574:774): avc: denied { append } for pid=9408 comm="syz.2.993" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.661151][ T42] audit: type=1400 audit(130.574:775): avc: denied { ioctl } for pid=9408 comm="syz.2.993" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.762467][ T5797] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.768008][ T8981] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 130.768029][ T8981] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 130.884007][ T8977] usb 7-1: USB disconnect, device number 16 [ 130.925737][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 130.925788][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 130.926619][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 130.999847][ T9450] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 131.548702][ T9471] mmap: syz.2.1016 (9471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.648122][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.811073][ T8977] net_ratelimit: 13 callbacks suppressed [ 131.811087][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.600788][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.851097][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.080659][ T8981] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 133.080685][ T8981] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 133.080960][ T5797] Bluetooth: hci1: command 0x0419 tx timeout [ 133.286473][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 133.286485][ T42] audit: type=1400 audit(133.204:780): avc: denied { write } for pid=9497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.314372][ T42] audit: type=1400 audit(133.234:781): avc: denied { write } for pid=9503 comm="syz.5.1027" name="subsystems" dev="configfs" ino=1524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.374170][ T9506] CIFS: Attempting to mount //127.0.0.1/share [ 133.392814][ T9506] CIFS: VFS: smbdirect_connect_resolve_addr:99 rdma_resolve_addr() failed -ENODEV [ 133.392834][ T9506] CIFS: VFS: smbdirect_connect_sync:905 smbdirect_connect(127.0.0.1:5445) failed -ENODEV [ 133.392958][ T9506] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 133.393830][ T9506] CIFS: VFS: smbdirect_connect_resolve_addr:99 rdma_resolve_addr() failed -ENODEV [ 133.393843][ T9506] CIFS: VFS: smbdirect_connect_sync:905 smbdirect_connect(127.0.0.1:445) failed -ENODEV [ 133.393855][ T9506] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 133.393995][ T9506] CIFS: VFS: cifs_mount failed w/return code = -2 [ 133.424153][ T42] audit: type=1400 audit(133.344:782): avc: denied { write } for pid=9521 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.588551][ T42] audit: type=1400 audit(133.504:783): avc: denied { write } for pid=9533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.602891][ T9541] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 133.695776][ T42] audit: type=1400 audit(133.614:784): avc: denied { write } for pid=9546 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.702108][ T8981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.750140][ T9555] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 133.752233][ T42] audit: type=1400 audit(133.664:785): avc: denied { relabelto } for pid=9554 comm="syz.5.1042" name="file0" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 133.752734][ T42] audit: type=1400 audit(133.664:786): avc: denied { associate } for pid=9554 comm="syz.5.1042" name="file0" dev="tmpfs" ino=788 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0" [ 133.754099][ T42] audit: type=1400 audit(133.664:787): avc: denied { read } for pid=9554 comm="syz.5.1042" dev="nsfs" ino=4026532869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.754299][ T42] audit: type=1400 audit(133.684:788): avc: denied { open } for pid=9554 comm="syz.5.1042" path="net:[4026532869]" dev="nsfs" ino=4026532869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.755319][ T42] audit: type=1400 audit(133.684:789): avc: denied { accept } for pid=9554 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.811252][ T9556] bpf: Bad value for 'uid' [ 133.853231][ T8981] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 133.855721][ T8981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.855736][ T8981] usb 5-1: Product: syz [ 133.855744][ T8981] usb 5-1: Manufacturer: syz [ 133.855751][ T8981] usb 5-1: SerialNumber: syz [ 133.891033][ T9553] kvm [9552]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x5 [ 133.891333][ T9553] kvm [9552]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x5 [ 133.914228][ T9553] kvm [9552]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x5 [ 133.917156][ T8981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.942444][ T9553] kvm [9552]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x5 [ 133.943104][ T9553] kvm [9552]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x5 [ 133.953703][ T8980] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 133.968680][ T9553] kvm_intel: kvm [9552]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x5 [ 134.092984][ T9568] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 134.145818][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1049'. [ 134.145992][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1049'. [ 134.146649][ T9572] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 134.146676][ T9572] SELinux: failed to load policy [ 134.150259][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 134.150272][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 134.170357][ T8977] usb 5-1: USB disconnect, device number 8 [ 134.183139][ T9574] gretap1: entered promiscuous mode [ 134.206190][ T9575] gretap1: entered promiscuous mode [ 134.235458][ T9573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9573 comm=syz.6.1049 [ 134.246646][ T9573] bond2 (unregistering): Released all slaves [ 134.526697][ T9604] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 134.875281][ T9631] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 134.875295][ T9631] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.1065'. [ 134.932326][ T8981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.013908][ T8980] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 135.014075][ T8980] ath9k_htc: Failed to initialize the device [ 135.020233][ T8977] usb 5-1: ath9k_htc: USB layer deinitialized [ 135.441354][ T9673] overlay: ./file0 is not a directory [ 135.598243][ T9688] netlink: 'syz.6.1087': attribute type 1 has an invalid length. [ 135.598264][ T9688] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1087'. [ 135.598314][ T9688] netlink: 'syz.6.1087': attribute type 1 has an invalid length. [ 135.598333][ T9688] netlink: 'syz.6.1087': attribute type 2 has an invalid length. [ 135.641603][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.648199][ T9692] FAULT_INJECTION: forcing a failure. [ 135.648199][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 135.648221][ T9692] CPU: 2 UID: 0 PID: 9692 Comm: syz.2.1090 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 135.648239][ T9692] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 135.648244][ T9692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.648251][ T9692] Call Trace: [ 135.648255][ T9692] [ 135.648281][ T9692] dump_stack_lvl+0x100/0x190 [ 135.648308][ T9692] should_fail_ex.cold+0x5/0xa [ 135.648341][ T9692] should_failslab+0xc2/0x120 [ 135.648356][ T9692] __kmalloc_cache_noprof+0x91/0x6d0 [ 135.648372][ T9692] ? pty_common_install+0x10e/0xb30 [ 135.648419][ T9692] pty_common_install+0x10e/0xb30 [ 135.648438][ T9692] ? __pfx_pty_unix98_install+0x10/0x10 [ 135.648456][ T9692] tty_init_dev.part.0+0x9e/0x470 [ 135.648471][ T9692] tty_init_dev+0x60/0x80 [ 135.648483][ T9692] ? __pfx_ptmx_open+0x10/0x10 [ 135.648498][ T9692] ptmx_open+0x128/0x360 [ 135.648514][ T9692] ? __pfx_ptmx_open+0x10/0x10 [ 135.648529][ T9692] chrdev_open+0x234/0x6a0 [ 135.648544][ T9692] ? __pfx_chrdev_open+0x10/0x10 [ 135.648558][ T9692] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 135.648579][ T9692] do_dentry_open+0x674/0x1470 [ 135.648591][ T9692] ? __pfx_chrdev_open+0x10/0x10 [ 135.648606][ T9692] vfs_open_consume+0xcc/0x460 [ 135.648623][ T9692] path_openat+0x1547/0x23f0 [ 135.648640][ T9692] ? __pfx_path_openat+0x10/0x10 [ 135.648658][ T9692] do_file_open+0x20e/0x430 [ 135.648673][ T9692] ? __pfx_do_file_open+0x10/0x10 [ 135.648698][ T9692] ? _raw_spin_unlock+0x28/0x50 [ 135.648715][ T9692] ? alloc_fd+0x471/0x7a0 [ 135.648734][ T9692] do_sys_openat2+0x163/0x1d0 [ 135.648749][ T9692] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.648770][ T9692] __x64_sys_openat+0x12d/0x210 [ 135.648785][ T9692] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.648807][ T9692] do_syscall_64+0x123/0x790 [ 135.648819][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.648832][ T9692] RIP: 0033:0x7ff5b319f559 [ 135.648841][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.648853][ T9692] RSP: 002b:00007ff5b4100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.648865][ T9692] RAX: ffffffffffffffda RBX: 00007ff5b3425fa0 RCX: 00007ff5b319f559 [ 135.648872][ T9692] RDX: 00000000000a0402 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 135.648879][ T9692] RBP: 00007ff5b3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.648886][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.648893][ T9692] R13: 00007ff5b3426038 R14: 00007ff5b3425fa0 R15: 00007ffea92c0e58 [ 135.648909][ T9692] [ 135.649465][ T9694] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 135.649482][ T9694] CIFS: Attempting to mount //::1/share [ 135.752729][ T9699] overlay: filesystem on ./file1 not supported [ 135.759001][ T9699] overlay: filesystem on ./file1 not supported [ 135.874010][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 135.874407][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 135.874690][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 135.874946][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 135.961110][ T8980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.469264][ T9694] CIFS: VFS: Error connecting to socket. Aborting operation. [ 136.469296][ T9694] CIFS: VFS: cifs_mount failed w/return code = -4 [ 136.608355][ T9738] xt_LOG: prefix is not null-terminated [ 136.617571][ T8977] wacom 0003:056A:003F.000D: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 136.624473][ T9738] IPv6: sit1: Disabled Multicast RS [ 136.659483][ T9739] fido_id[9739]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.762009][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.957895][ T9763] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 137.010649][ T8980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.137973][ T9776] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 137.137994][ T9776] overlayfs: overlapping lowerdir path [ 137.213775][ T9782] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 137.345370][ T9793] x_tables: duplicate underflow at hook 1 [ 137.402937][ T9800] Bluetooth: hci0: too big key_count value 62977 [ 137.447266][ T99] IPVS: starting estimator thread 0... [ 137.454476][ T9796] netlink: 'syz.5.1123': attribute type 2 has an invalid length. [ 137.466344][ T9793] null_blk: disk my_nullb created [ 137.563006][ T9805] IPVS: using max 42 ests per chain, 100800 per kthread [ 137.567263][ T9809] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9809 comm=syz.6.1128 [ 137.567281][ T9809] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9809 comm=syz.6.1128 [ 137.618869][ T9809] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 138.071131][ T8979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.362176][ T42] kauditd_printk_skb: 187 callbacks suppressed [ 138.362189][ T42] audit: type=1400 audit(138.284:977): avc: denied { create } for pid=9850 comm="syz.2.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 138.508813][ T42] audit: type=1400 audit(138.424:978): avc: denied { setopt } for pid=9857 comm="syz.2.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.509078][ T9859] batadv_slave_1: entered promiscuous mode [ 138.519352][ T9859] batadv_slave_1: left promiscuous mode [ 138.591685][ T42] audit: type=1400 audit(138.514:979): avc: denied { setopt } for pid=9861 comm="syz.6.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.592509][ T42] audit: type=1400 audit(138.514:980): avc: denied { getopt } for pid=9861 comm="syz.6.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.629425][ T42] audit: type=1400 audit(138.544:981): avc: denied { ioctl } for pid=9861 comm="syz.6.1149" path="socket:[36159]" dev="sockfs" ino=36159 ioctlcmd=0x800442d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.893265][ T42] audit: type=1400 audit(138.814:982): avc: denied { read append } for pid=9866 comm="syz.6.1150" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.893300][ T42] audit: type=1400 audit(138.814:983): avc: denied { open } for pid=9866 comm="syz.6.1150" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.980371][ T42] audit: type=1400 audit(138.894:984): avc: denied { read write } for pid=9876 comm="syz.5.1152" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.988509][ T42] audit: type=1400 audit(138.904:985): avc: denied { ioctl open } for pid=9876 comm="syz.5.1152" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 139.019344][ T9877] bond2: entered promiscuous mode [ 139.019705][ T9877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.082056][ T7978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.088968][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.090108][ T8980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.308474][ T9899] __nla_validate_parse: 132 callbacks suppressed [ 139.308495][ T9899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1157'. [ 139.506565][ T42] audit: type=1400 audit(139.424:986): avc: denied { write } for pid=9916 comm="syz.5.1162" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.724874][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 139.810991][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.812054][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.814739][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.970512][ T8980] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 140.130841][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.133257][ T8980] usb 10-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 140.134487][ T8980] usb 10-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 140.134524][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.134544][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.134563][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 140.134582][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 140.134601][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 140.134620][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 140.134639][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 140.134658][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 140.134677][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 140.134696][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 140.134715][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 140.134734][ T8980] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 30768, setting to 1024 [ 140.134755][ T8980] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.134773][ T8980] usb 10-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 140.136974][ T8980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.136992][ T8980] usb 10-1: Product: syz [ 140.137004][ T8980] usb 10-1: Manufacturer: syz [ 140.137017][ T8980] usb 10-1: SerialNumber: syz [ 140.142604][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.142728][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.143529][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.143611][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.143753][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.143873][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.144042][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.144134][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.144283][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.144402][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.146273][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.146395][ T9932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 140.148657][ T8980] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 140.150037][ T8980] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 140.157685][ T8980] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 140.162389][ T8980] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 140.164292][ T8980] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 140.364175][ T9960] ip_tables: iptables: counters copy to user failed while replacing table [ 140.415618][ T856] usb 10-1: USB disconnect, device number 4 [ 140.568586][ T856] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 140.577624][ T856] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 140.578444][ T856] keyspan 10-1:1.0: device disconnected [ 140.710732][ T8980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.831926][ T9988] loop4: detected capacity change from 0 to 2640 [ 140.860544][ T8980] usb 5-1: device descriptor read/64, error -71 [ 140.861225][ T9988] buffer_io_error: 14 callbacks suppressed [ 140.861240][ T9988] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 140.863249][ T9988] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 140.864763][ T7575] Buffer I/O error on dev loop4, logical block 3, async page read [ 140.869854][ T9988] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 140.869948][ T9988] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 141.022703][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 141.037906][ T9993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1182'. [ 141.110529][ T8980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.241327][ T8980] usb 5-1: device descriptor read/64, error -71 [ 141.353752][ T8980] usb usb5-port1: attempt power cycle [ 141.546123][T10024] Bluetooth: hci0: Frame reassembly failed (-90) [ 141.700655][ T8980] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.731191][ T8980] usb 5-1: device descriptor read/8, error -71 [ 141.815156][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.819341][T10031] kvm: MONITOR instruction emulated as NOP! [ 141.820366][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.824780][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.833642][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.834351][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.864154][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.864714][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.864998][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.865749][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.868644][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.980545][ T8980] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.004606][ T8980] usb 5-1: device descriptor read/8, error -71 [ 142.013415][T10041] gfs2: error -5 reading superblock [ 142.110853][ T8980] usb usb5-port1: unable to enumerate USB device [ 142.201093][ T8981] net_ratelimit: 1 callbacks suppressed [ 142.201113][ T8981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.235087][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.247854][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.270656][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.349787][ T8980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.426506][T10033] infiniband rxe0: set active [ 142.426615][ T5865] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.426668][T10033] infiniband rxe0: added rxe_eth0 [ 142.438185][T10033] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 142.438218][T10033] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 142.438256][T10033] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 142.450121][T10033] RDS/IB: rxe0: added [ 142.450198][T10033] smc: adding ib device rxe0 with port count 1 [ 142.450212][T10033] smc: ib device rxe0 port 1 has no pnetid [ 142.450254][ T5865] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.452546][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.538816][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.618852][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.694243][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.771118][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.850674][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.863544][T10033] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.066535][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.066682][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.066743][T10033] bridge_slave_0: entered allmulticast mode [ 143.067514][T10033] bridge_slave_0: entered promiscuous mode [ 143.071747][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.071791][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.071855][T10033] bridge_slave_1: entered allmulticast mode [ 143.072745][T10033] bridge_slave_1: entered promiscuous mode [ 143.104544][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.107020][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.122601][T10033] team0: Port device team_slave_0 added [ 143.124688][T10033] team0: Port device team_slave_1 added [ 143.145611][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.145640][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.145663][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.150103][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.150119][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.150141][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.189590][T10033] hsr_slave_0: entered promiscuous mode [ 143.190877][T10033] hsr_slave_1: entered promiscuous mode [ 143.191236][T10033] debugfs: 'hsr0' already exists in 'hsr' [ 143.191262][T10033] Cannot create hsr debugfs directory [ 143.240659][ T8981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.328640][T10033] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 143.331437][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.332015][T10033] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 143.334881][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.335312][T10033] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 143.342490][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.343218][T10033] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 143.347235][T10033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.369662][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.369756][T10033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.369875][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.369921][T10033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.409410][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.411687][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.420071][T10055] ceph: No mds server is up or the cluster is laggy [ 143.425406][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.428581][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.440889][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.445579][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.445629][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.449904][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.449949][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.560556][ T5141] Bluetooth: hci0: command 0x1003 tx timeout [ 143.560581][ T5797] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.619033][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 143.619052][ T42] audit: type=1400 audit(143.534:1017): avc: denied { map } for pid=10080 comm="syz.0.1206" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.619173][ T42] audit: type=1400 audit(143.534:1018): avc: denied { read write } for pid=10080 comm="syz.0.1206" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.734239][ T42] audit: type=1400 audit(143.654:1019): avc: denied { ioctl } for pid=10093 comm="syz.0.1208" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.809784][ T42] audit: type=1400 audit(143.724:1020): avc: denied { map } for pid=10097 comm="syz.0.1209" path="/269/dev/sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.834590][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.834687][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1210'. [ 143.864975][T10104] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 143.882374][ T5797] Bluetooth: hci3: command tx timeout [ 143.994971][ T42] audit: type=1400 audit(143.914:1021): avc: denied { mount } for pid=10120 comm="syz.0.1216" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 143.997986][T10121] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 144.017625][T10121] pci 0000:00:04.0: PCI bridge to [bus 01] [ 144.017781][T10121] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 144.017879][T10121] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 144.019479][T10121] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 144.019903][T10121] pci 0000:00:04.0: enabling Extended Tags [ 144.068334][T10121] pci 0000:00:04.0: Adding to iommu group 4 [ 144.075467][T10033] veth0_vlan: entered promiscuous mode [ 144.084614][T10033] veth1_vlan: entered promiscuous mode [ 144.106055][T10121] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 144.114643][T10121] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 144.115429][T10033] veth0_macvtap: entered promiscuous mode [ 144.127229][T10033] veth1_macvtap: entered promiscuous mode [ 144.134965][T10121] pci 0000:00:1d.0: Adding to iommu group 8 [ 144.144174][T10121] pci 0000:00:04.0: PCI bridge to [bus 01] [ 144.147137][T10121] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 144.147183][T10121] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 144.147294][T10121] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 144.147313][T10121] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 144.147333][T10121] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 144.147349][T10121] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 144.147524][T10121] pci 0000:00:04.0: PCI bridge to [bus 01] [ 144.147973][T10121] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 144.149363][T10121] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 144.155725][ T42] audit: type=1400 audit(144.074:1022): avc: denied { setopt } for pid=10123 comm="syz.5.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.182713][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.185793][T10121] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 144.190129][T10121] ================================================================== [ 144.190137][T10121] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 144.190221][T10121] Read of size 1 at addr ffff8880240f9480 by task syz.0.1216/10121 [ 144.190230][T10121] [ 144.190239][T10121] CPU: 2 UID: 0 PID: 10121 Comm: syz.0.1216 Tainted: G L Y syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 144.190258][T10121] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 144.190264][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.190272][T10121] Call Trace: [ 144.190286][T10121] [ 144.190291][T10121] dump_stack_lvl+0x100/0x190 [ 144.190351][T10121] print_report+0x13d/0x4b0 [ 144.190383][T10121] ? __virt_addr_valid+0x239/0x430 [ 144.190437][T10121] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 144.190456][T10121] kasan_report+0xdf/0x1c0 [ 144.190478][T10121] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 144.190498][T10121] acpi_ns_get_attached_object+0x148/0x1b0 ** replaying previous printk message ** [ 144.190517][T10121] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 144.190536][T10121] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 144.190552][T10121] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 144.190571][T10121] ? acpi_ds_create_operand+0x267/0xc20 [ 144.190585][T10121] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 144.190603][T10121] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 144.190622][T10121] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 144.190639][T10121] ? __asan_memset+0x23/0x50 [ 144.190654][T10121] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 144.190670][T10121] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 144.190684][T10121] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 144.190697][T10121] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 144.190711][T10121] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 144.190726][T10121] acpi_ds_exec_end_op+0xb78/0x1e60 [ 144.190739][T10121] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 144.190752][T10121] acpi_ps_parse_loop+0x5e1/0x26e0 [ 144.190767][T10121] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 144.190780][T10121] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 144.190798][T10121] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 144.190814][T10121] ? acpi_ut_create_thread_state+0x6d/0x170 [ 144.190829][T10121] acpi_ps_parse_aml+0x81e/0x1120 [ 144.190844][T10121] acpi_ps_execute_method+0x5c4/0xe90 [ 144.190861][T10121] acpi_ns_evaluate+0x640/0x1670 [ 144.190882][T10121] acpi_ut_evaluate_object+0xf7/0x610 [ 144.190900][T10121] acpi_rs_get_prt_method_data+0xa0/0x150 [ 144.190918][T10121] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 144.190936][T10121] ? acpi_ut_status_exit+0x111/0x1c0 [ 144.190952][T10121] ? acpi_rs_validate_parameters+0x104/0x210 [ 144.190971][T10121] acpi_get_irq_routing_table+0xb8/0x140 [ 144.190990][T10121] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 144.191010][T10121] ? do_raw_spin_lock+0x128/0x260 [ 144.191022][T10121] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 144.191042][T10121] ? mark_held_locks+0x40/0x70 [ 144.191058][T10121] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 144.191075][T10121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.191141][T10121] ? pci_conf1_read+0x138/0x240 [ 144.191162][T10121] acpi_pci_irq_lookup+0x8e/0x6b0 [ 144.191180][T10121] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 144.191198][T10121] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 144.191214][T10121] ? stack_depot_save_flags+0x27/0xa10 [ 144.191254][T10121] ? kasan_save_stack+0x30/0x50 [ 144.191273][T10121] ? kasan_save_track+0x14/0x30 [ 144.191283][T10121] ? __kasan_kmalloc+0xaa/0xb0 [ 144.191303][T10121] acpi_pci_irq_enable+0x1f5/0x6f0 [ 144.191321][T10121] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 144.191340][T10121] ? __pfx_pci_enable_resources+0x10/0x10 [ 144.191358][T10121] ? __pfx___pci_set_power_state+0x10/0x10 [ 144.191374][T10121] ? lock_acquire+0x1d1/0x380 [ 144.191389][T10121] ? kernfs_root+0x23/0x2a0 [ 144.191418][T10121] pcibios_enable_device+0xb6/0xe0 [ 144.191437][T10121] do_pci_enable_device+0x21f/0x4a0 [ 144.191454][T10121] ? __pfx_do_pci_enable_device+0x10/0x10 [ 144.191471][T10121] ? pci_update_current_state+0x102/0x240 [ 144.191486][T10121] ? __pfx_pci_update_current_state+0x10/0x10 [ 144.191503][T10121] ? rcu_is_watching+0x13/0xc0 [ 144.191519][T10121] pci_enable_device_flags+0x27c/0x370 [ 144.191539][T10121] ? __pfx_pcie_portdrv_probe+0x10/0x10 [ 144.191551][T10121] pcie_portdrv_probe+0x167/0x1250 [ 144.191565][T10121] ? __pfx_rpm_resume+0x10/0x10 [ 144.191595][T10121] ? do_raw_spin_lock+0x128/0x260 [ 144.191607][T10121] ? __pfx_pcie_portdrv_probe+0x10/0x10 [ 144.191621][T10121] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.191639][T10121] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.191658][T10121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.191675][T10121] ? __pfx_pcie_portdrv_probe+0x10/0x10 [ 144.191688][T10121] local_pci_probe+0xdd/0x1b0 [ 144.191703][T10121] pci_call_probe+0x176/0x800 [ 144.191719][T10121] ? pci_match_device+0x147/0x7d0 [ 144.191732][T10121] ? __pfx_pci_call_probe+0x10/0x10 [ 144.191749][T10121] ? __pfx_pci_match_device+0x10/0x10 [ 144.191762][T10121] ? pci_find_host_bridge+0x3c/0x80 [ 144.191780][T10121] pci_device_probe+0x25b/0x400 [ 144.191794][T10121] ? __pfx_pci_device_probe+0x10/0x10 [ 144.191811][T10121] ? sysfs_create_link+0x68/0xc0 [ 144.191827][T10121] ? __pfx_pci_device_probe+0x10/0x10 [ 144.191842][T10121] really_probe+0x241/0xa60 [ 144.191856][T10121] __driver_probe_device+0x210/0x460 [ 144.191869][T10121] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.191891][T10121] driver_probe_device+0x4a/0x140 [ 144.191904][T10121] __device_attach_driver+0x1df/0x320 [ 144.191919][T10121] ? __pfx___device_attach_driver+0x10/0x10 [ 144.191933][T10121] bus_for_each_drv+0x159/0x1e0 [ 144.191959][T10121] ? __pfx_bus_for_each_drv+0x10/0x10 [ 144.191977][T10121] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.191996][T10121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.192015][T10121] __device_attach+0x1e4/0x4c0 [ 144.192028][T10121] ? __pfx___device_attach+0x10/0x10 [ 144.192042][T10121] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.192055][T10121] device_initial_probe+0xaf/0xf0 [ 144.192070][T10121] pci_bus_add_device+0xc5/0x100 [ 144.192082][T10121] pci_bus_add_devices+0x9a/0x1f0 [ 144.192093][T10121] pci_rescan_bus+0x2a/0x40 [ 144.192107][T10121] rescan_store+0xfb/0x130 [ 144.192121][T10121] ? __pfx_rescan_store+0x10/0x10 [ 144.192135][T10121] ? sysfs_file_kobj+0xe4/0x290 [ 144.192149][T10121] ? __pfx_rescan_store+0x10/0x10 [ 144.192162][T10121] bus_attr_store+0x74/0xb0 [ 144.192178][T10121] ? __pfx_bus_attr_store+0x10/0x10 [ 144.192194][T10121] sysfs_kf_write+0xf2/0x150 [ 144.192208][T10121] kernfs_fop_write_iter+0x3e0/0x5f0 [ 144.192244][T10121] ? __pfx_sysfs_kf_write+0x10/0x10 [ 144.192261][T10121] vfs_write+0x6af/0x1050 [ 144.192273][T10121] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 144.192287][T10121] ? __pfx_vfs_write+0x10/0x10 [ 144.192305][T10121] ? find_held_lock+0x2b/0x80 [ 144.192323][T10121] ksys_write+0x12a/0x250 [ 144.192333][T10121] ? __pfx_ksys_write+0x10/0x10 [ 144.192346][T10121] do_syscall_64+0x123/0x790 [ 144.192359][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.192371][T10121] RIP: 0033:0x7fe62159f559 [ 144.192381][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.192392][T10121] RSP: 002b:00007fe61f7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.192404][T10121] RAX: ffffffffffffffda RBX: 00007fe621825fa0 RCX: 00007fe62159f559 [ 144.192413][T10121] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 144.192422][T10121] RBP: 00007fe621636b20 R08: 0000000000000000 R09: 0000000000000000 [ 144.192429][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.192436][T10121] R13: 00007fe621826038 R14: 00007fe621825fa0 R15: 00007ffc5c1bce38 [ 144.192447][T10121] [ 144.192452][T10121] [ 144.192454][T10121] Allocated by task 1: [ 144.192460][T10121] kasan_save_stack+0x30/0x50 [ 144.192479][T10121] kasan_save_track+0x14/0x30 [ 144.192487][T10121] __kasan_slab_alloc+0x89/0x90 [ 144.192497][T10121] kmem_cache_alloc_noprof+0x269/0x6a0 [ 144.192513][T10121] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 144.192524][T10121] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 144.192536][T10121] acpi_ds_build_internal_object+0x173/0x790 [ 144.192547][T10121] acpi_ds_create_node+0xe3/0x280 [ 144.192557][T10121] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 144.192569][T10121] acpi_ps_parse_loop+0x5e1/0x26e0 [ 144.192582][T10121] acpi_ps_parse_aml+0x81e/0x1120 [ 144.192594][T10121] acpi_ps_execute_table+0x393/0x500 [ 144.192608][T10121] acpi_ns_execute_table+0x596/0x970 [ 144.192624][T10121] acpi_ns_parse_table+0xcb/0x160 [ 144.192640][T10121] acpi_ns_load_table+0xc9/0x490 [ 144.192655][T10121] acpi_tb_load_namespace+0x2b0/0x8f0 [ 144.192666][T10121] acpi_load_tables+0x89/0x160 [ 144.192713][T10121] acpi_init+0x146/0x840 [ 144.192729][T10121] do_one_initcall+0x11c/0x6f0 [ 144.192743][T10121] kernel_init_freeable+0x6ea/0x7b0 [ 144.192767][T10121] kernel_init+0x21/0x1e0 [ 144.192779][T10121] ret_from_fork+0x730/0xd60 [ 144.192802][T10121] ret_from_fork_asm+0x1a/0x30 [ 144.192815][T10121] [ 144.192818][T10121] Freed by task 8620: [ 144.192824][T10121] kasan_save_stack+0x30/0x50 [ 144.192841][T10121] kasan_save_track+0x14/0x30 [ 144.192850][T10121] kasan_save_free_info+0x3b/0x70 [ 144.192864][T10121] __kasan_slab_free+0x5f/0x80 [ 144.192878][T10121] kmem_cache_free+0x127/0x6c0 [ 144.192892][T10121] acpi_os_release_object+0x1c/0x30 [ 144.192907][T10121] acpi_ut_delete_object_desc+0xea/0x130 [ 144.192918][T10121] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 144.192934][T10121] acpi_ut_update_object_reference+0x5f9/0x800 [ 144.192950][T10121] acpi_ut_remove_reference+0x192/0x1d0 [ 144.192965][T10121] acpi_rs_get_prt_method_data+0xcd/0x150 [ 144.192982][T10121] acpi_get_irq_routing_table+0xb8/0x140 [ 144.192998][T10121] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 144.193015][T10121] acpi_pci_irq_lookup+0x8e/0x6b0 [ 144.193030][T10121] acpi_pci_irq_disable+0x1a8/0x360 [ 144.193046][T10121] pcibios_disable_device+0x89/0xb0 [ 144.193063][T10121] do_pci_disable_device+0x9f/0x100 [ 144.193077][T10121] pci_disable_device+0x130/0x270 [ 144.193092][T10121] usb_hcd_pci_remove+0x1ed/0x300 [ 144.193127][T10121] pci_device_remove+0xb2/0x1d0 [ 144.193140][T10121] device_remove+0xcb/0x180 [ 144.193151][T10121] device_release_driver_internal+0x441/0x610 [ 144.193166][T10121] pci_stop_bus_device+0x120/0x160 [ 144.193180][T10121] pci_stop_and_remove_bus_device+0x58/0xa0 [ 144.193195][T10121] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 144.193211][T10121] remove_store+0x123/0x140 [ 144.193227][T10121] dev_attr_store+0x58/0x80 [ 144.193241][T10121] sysfs_kf_write+0xf2/0x150 [ 144.193254][T10121] kernfs_fop_write_iter+0x3e0/0x5f0 [ 144.193265][T10121] vfs_write+0x6af/0x1050 [ 144.193273][T10121] ksys_write+0x12a/0x250 [ 144.193282][T10121] do_syscall_64+0x123/0x790 [ 144.193292][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.193302][T10121] [ 144.193305][T10121] The buggy address belongs to the object at ffff8880240f9478 [ 144.193305][T10121] which belongs to the cache Acpi-Operand of size 72 [ 144.193315][T10121] The buggy address is located 8 bytes inside of [ 144.193315][T10121] freed 72-byte region [ffff8880240f9478, ffff8880240f94c0) [ 144.193326][T10121] [ 144.193329][T10121] The buggy address belongs to the physical page: [ 144.193333][T10121] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880240f9f08 pfn:0x240f9 [ 144.193344][T10121] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 144.193355][T10121] page_type: f5(slab) [ 144.193365][T10121] raw: 00fff00000000200 ffff88801d44da40 ffffea0000905250 ffffea0000904a90 [ 144.193375][T10121] raw: ffff8880240f9f08 0000000200270006 00000000f5000000 0000000000000000 [ 144.193382][T10121] page dumped because: kasan: bad access detected [ 144.193387][T10121] page_owner tracks the page as allocated [ 144.193391][T10121] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3133105727 [ 144.193409][T10121] post_alloc_hook+0xfd/0x120 [ 144.193422][T10121] get_page_from_freelist+0x1113/0x35e0 [ 144.193436][T10121] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 144.193451][T10121] new_slab+0xb1/0x6d0 [ 144.193463][T10121] refill_objects+0xe3/0x410 [ 144.193477][T10121] __pcs_replace_empty_main+0x35e/0x650 [ 144.193491][T10121] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 144.193507][T10121] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 144.193518][T10121] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 144.193530][T10121] acpi_ds_create_operand+0x6be/0xc20 [ 144.193541][T10121] acpi_ds_eval_data_object_operands+0x125/0x640 [ 144.193552][T10121] acpi_ds_exec_end_op+0xe41/0x1e60 [ 144.193563][T10121] acpi_ps_parse_loop+0x5e1/0x26e0 [ 144.193575][T10121] acpi_ps_parse_aml+0x81e/0x1120 [ 144.193588][T10121] acpi_ps_execute_table+0x393/0x500 [ 144.193602][T10121] acpi_ns_execute_table+0x596/0x970 [ 144.193618][T10121] page_owner free stack trace missing [ 144.193621][T10121] [ 144.193624][T10121] Memory state around the buggy address: [ 144.193629][T10121] ffff8880240f9380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 144.193637][T10121] ffff8880240f9400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 144.193644][T10121] >ffff8880240f9480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 144.193650][T10121] ^ [ 144.193656][T10121] ffff8880240f9500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 144.193663][T10121] ffff8880240f9580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 144.193669][T10121] ================================================================== [ 144.209122][ T42] audit: type=1400 audit(144.124:1023): avc: denied { write } for pid=5725 comm="syz-executor" path="pipe:[3814]" dev="pipefs" ino=3814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 144.233054][T10121] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.695397][T10121] CPU: 0 UID: 0 PID: 10121 Comm: syz.0.1216 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 144.699075][T10121] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 144.701327][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.704622][T10121] Call Trace: [ 144.705748][T10121] [ 144.706698][T10121] dump_stack_lvl+0x100/0x190 [ 144.708203][T10121] vpanic+0x2dc/0x6f8 [ 144.709688][T10121] panic+0xd1/0xe0 [ 144.711206][T10121] ? __pfx_panic+0x10/0x10 [ 144.713004][T10121] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 144.714980][T10121] ? preempt_schedule+0x57/0xd0 [ 144.716839][T10121] check_panic_on_warn.cold+0x19/0x34 [ 144.718995][T10121] end_report.part.0+0x3a/0x90 [ 144.720943][T10121] kasan_report.cold+0xe/0x18 [ 144.722844][T10121] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 144.725249][T10121] acpi_ns_get_attached_object+0x148/0x1b0 [ 144.727605][T10121] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 144.729997][T10121] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 144.731609][T10121] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 144.734177][T10121] ? acpi_ds_create_operand+0x267/0xc20 [ 144.736387][T10121] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 144.738599][T10121] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 144.741041][T10121] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 144.742710][T10121] ? __asan_memset+0x23/0x50 [ 144.744602][T10121] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 144.747094][T10121] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 144.749408][T10121] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 144.751508][T10121] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 144.753780][T10121] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 144.755851][T10121] acpi_ds_exec_end_op+0xb78/0x1e60 [ 144.757945][T10121] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 144.760119][T10121] acpi_ps_parse_loop+0x5e1/0x26e0 [ 144.761759][T10121] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 144.763788][T10121] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 144.765877][T10121] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 144.767734][T10121] ? acpi_ut_create_thread_state+0x6d/0x170 [ 144.770085][T10121] acpi_ps_parse_aml+0x81e/0x1120 [ 144.771900][T10121] acpi_ps_execute_method+0x5c4/0xe90 [ 144.773589][T10121] acpi_ns_evaluate+0x640/0x1670 [ 144.775529][T10121] acpi_ut_evaluate_object+0xf7/0x610 [ 144.777349][T10121] acpi_rs_get_prt_method_data+0xa0/0x150 [ 144.778919][T10121] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 144.781181][T10121] ? acpi_ut_status_exit+0x111/0x1c0 [ 144.783024][T10121] ? acpi_rs_validate_parameters+0x104/0x210 [ 144.785063][T10121] acpi_get_irq_routing_table+0xb8/0x140 [ 144.787323][T10121] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 144.789374][T10121] ? do_raw_spin_lock+0x128/0x260 [ 144.791138][T10121] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 144.793287][T10121] ? mark_held_locks+0x40/0x70 [ 144.794772][T10121] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 144.797133][T10121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.799152][T10121] ? pci_conf1_read+0x138/0x240 [ 144.800756][T10121] acpi_pci_irq_lookup+0x8e/0x6b0 [ 144.802784][T10121] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 144.804786][T10121] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 144.806804][T10121] ? stack_depot_save_flags+0x27/0xa10 [ 144.808943][T10121] ? kasan_save_stack+0x30/0x50 [ 144.810684][T10121] ? kasan_save_track+0x14/0x30 [ 144.812359][T10121] ? __kasan_kmalloc+0xaa/0xb0 [ 144.814277][T10121] acpi_pci_irq_enable+0x1f5/0x6f0 [ 144.816344][T10121] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 144.818596][T10121] ? __pfx_pci_enable_resources+0x10/0x10 [ 144.820889][T10121] ? __pfx___pci_set_power_state+0x10/0x10 [ 144.822914][T10121] ? lock_acquire+0x1d1/0x380 [ 144.824580][T10121] ? kernfs_root+0x23/0x2a0 [ 144.826325][T10121] pcibios_enable_device+0xb6/0xe0 [ 144.828358][T10121] do_pci_enable_device+0x21f/0x4a0 [ 144.830434][T10121] ? __pfx_do_pci_enable_device+0x10/0x10 [ 144.832710][T10121] ? pci_update_current_state+0x102/0x240 [ 144.834987][T10121] ? __pfx_pci_update_current_state+0x10/0x10 [ 144.837399][T10121] ? rcu_is_watching+0x13/0xc0 [ 144.839255][T10121] pci_enable_device_flags+0x27c/0x370 [ 144.841114][T10121] ? __pfx_pcie_portdrv_probe+0x10/0x10 [ 144.843218][T10121] pcie_portdrv_probe+0x167/0x1250 [ 144.845272][T10121] ? __pfx_rpm_resume+0x10/0x10 [ 144.847152][T10121] ? do_raw_spin_lock+0x128/0x260 [ 144.849091][T10121] ? __pfx_pcie_portdrv_probe+0x10/0x10 [ 144.851270][T10121] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.853614][T10121] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.855703][T10121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.858074][T10121] ? __pfx_pcie_portdrv_probe+0x10/0x10 [ 144.859892][T10121] local_pci_probe+0xdd/0x1b0 [ 144.861811][T10121] pci_call_probe+0x176/0x800 [ 144.863637][T10121] ? pci_match_device+0x147/0x7d0 [ 144.865606][T10121] ? __pfx_pci_call_probe+0x10/0x10 [ 144.867704][T10121] ? __pfx_pci_match_device+0x10/0x10 [ 144.869885][T10121] ? pci_find_host_bridge+0x3c/0x80 [ 144.871987][T10121] pci_device_probe+0x25b/0x400 [ 144.873629][T10121] ? __pfx_pci_device_probe+0x10/0x10 [ 144.875689][T10121] ? sysfs_create_link+0x68/0xc0 [ 144.877710][T10121] ? __pfx_pci_device_probe+0x10/0x10 [ 144.879861][T10121] really_probe+0x241/0xa60 [ 144.881658][T10121] __driver_probe_device+0x210/0x460 [ 144.883411][T10121] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 144.885753][T10121] driver_probe_device+0x4a/0x140 [ 144.887796][T10121] __device_attach_driver+0x1df/0x320 [ 144.889918][T10121] ? __pfx___device_attach_driver+0x10/0x10 [ 144.892234][T10121] bus_for_each_drv+0x159/0x1e0 [ 144.894152][T10121] ? __pfx_bus_for_each_drv+0x10/0x10 [ 144.895825][T10121] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.897926][T10121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.900270][T10121] __device_attach+0x1e4/0x4c0 [ 144.901956][T10121] ? __pfx___device_attach+0x10/0x10 [ 144.903916][T10121] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.906003][T10121] device_initial_probe+0xaf/0xf0 [ 144.908032][T10121] pci_bus_add_device+0xc5/0x100 [ 144.909626][T10121] pci_bus_add_devices+0x9a/0x1f0 [ 144.911465][T10121] pci_rescan_bus+0x2a/0x40 [ 144.913312][T10121] rescan_store+0xfb/0x130 [ 144.915120][T10121] ? __pfx_rescan_store+0x10/0x10 [ 144.917133][T10121] ? sysfs_file_kobj+0xe4/0x290 [ 144.919081][T10121] ? __pfx_rescan_store+0x10/0x10 [ 144.921102][T10121] bus_attr_store+0x74/0xb0 [ 144.922768][T10121] ? __pfx_bus_attr_store+0x10/0x10 [ 144.924610][T10121] sysfs_kf_write+0xf2/0x150 [ 144.926494][T10121] kernfs_fop_write_iter+0x3e0/0x5f0 [ 144.928630][T10121] ? __pfx_sysfs_kf_write+0x10/0x10 [ 144.930709][T10121] vfs_write+0x6af/0x1050 [ 144.932419][T10121] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 144.934327][T10121] ? __pfx_vfs_write+0x10/0x10 [ 144.936287][T10121] ? find_held_lock+0x2b/0x80 [ 144.938181][T10121] ksys_write+0x12a/0x250 [ 144.939917][T10121] ? __pfx_ksys_write+0x10/0x10 [ 144.941872][T10121] do_syscall_64+0x123/0x790 [ 144.943720][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.946076][T10121] RIP: 0033:0x7fe62159f559 [ 144.947875][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.955394][T10121] RSP: 002b:00007fe61f7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.958387][T10121] RAX: ffffffffffffffda RBX: 00007fe621825fa0 RCX: 00007fe62159f559 [ 144.961402][T10121] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 144.964518][T10121] RBP: 00007fe621636b20 R08: 0000000000000000 R09: 0000000000000000 [ 144.967669][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.970831][T10121] R13: 00007fe621826038 R14: 00007fe621825fa0 R15: 00007ffc5c1bce38 [ 144.973964][T10121] [ 144.975828][T10121] Kernel Offset: disabled [ 144.977201][T10121] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:23:21 Registers: info registers vcpu 0 CPU#0 RAX=ffff888045362580 RBX=ffff88802ced8a00 RCX=1ffff11008a6c5e2 RDX=dffffc0000000000 RSI=ffffffff81cdfc57 RDI=ffff888045362f10 RBP=ffff888045362580 RSP=ffffc9000648fa90 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88802ced8a2c R13=1ffff92000c91f58 R14=ffff88802ced8ad8 R15=0000000000000001 RIP=ffffffff81cdfc7b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555593ec3500 ffffffff 00c00000 GS =0000 ffff8880d448e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39e7f5 CR3=0000000044fb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30db5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1033f616 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1033f616 00007ffe1033f61c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30ce3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30ce37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30ce372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30ce37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30cff9600 00007fa30cff95e0 00007fa30cff95e8 00007fa30cff9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30db5d020 00007fa30cff95c0 00007fa30cff95d0 00007fa30cff9610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa30cff95f8 00007fa30cff95c8 00007fa30cff9600 00007fa30cff95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88802069a580 RSI=ffffffff81b85e9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88806a1243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b85e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d458e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe05ef30a90 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ffffffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00302e315f5855 4e494c455342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000068637461 6d00343674617473 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63657073656c6966 5f6e6f6368746170 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000016b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000438 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe05f0c7b20 00007fe05f0c8050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88801e768c00 RCX=0000000000000001 RDX=ffff88801e768bd8 RSI=ffff88801e768bd8 RDI=0000000000000020 RBP=0000000000000007 RSP=ffffc900006483d8 R8 =0000000000000000 R9 =0000000000000002 R10=0000000000000002 R11=0000000000000001 R12=ffff88801e768000 R13=0000000000020000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81e93ae8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d468e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa30afd3e40 CR3=0000000038b01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000008000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1bd326 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c1bd326 00007ffc5c1bd32c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe62163714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe621637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6216372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe621637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff888020ac2580 RSI=ffffffff81b85e9e RDI=0000000000000001 RBP=0000000000000003 RSP=ffffc90000197df8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88806a3243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=0000000000000000 RIP=ffffffff81b85e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d478e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555c559d5178 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0eeca00 Opmask01=0000000000000001 Opmask02=00000000013f003d Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c00313d72 656b720066666964 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0087642f3d326d01 825e2f2c2f3d316d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0f0e0d 0c0b0a0908070605 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb863413d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c559d1560 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2028282828282828 2820202018201818 2018181818181810 20003b7c2629280a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2022222222222222 2220202012201212 2012121212121210 2000317626232200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000