last executing test programs: 2m11.829973625s ago: executing program 3 (id=1086): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) io_setup(0x4, &(0x7f00000000c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xa, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m10.118455711s ago: executing program 3 (id=1091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000013c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001440), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001480), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001500), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000001580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000001340)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)}, 0x4c) 2m9.221546849s ago: executing program 3 (id=1094): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) msgget$private(0x0, 0x1) 2m8.017348952s ago: executing program 3 (id=1097): mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2m7.881573834s ago: executing program 3 (id=1098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000013c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001440), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001480), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001500), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000001580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000001340)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)}, 0x4c) 2m7.323108208s ago: executing program 3 (id=1101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000013c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001440), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001480), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001500), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000001580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000001340)="2b1c52ac82e71ea05b0c5e", 0x0, 0xb20c, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001380)="dd"}, 0x4c) 2m7.205603731s ago: executing program 32 (id=1101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000013c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001440), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001480), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001500), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000001580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000001340)="2b1c52ac82e71ea05b0c5e", 0x0, 0xb20c, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001380)="dd"}, 0x4c) 13.72011329s ago: executing program 0 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000000540), 0x800001d, 0x1c) 9.873772044s ago: executing program 0 (id=1428): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 9.647679614s ago: executing program 4 (id=1429): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 9.645253568s ago: executing program 1 (id=1431): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000dc0), 0xffffff6a) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x3fffffffffffce3, 0x700000000000000, 0x0) socketpair(0x1, 0x5, 0x739b, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e40)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getrandom(&(0x7f00000004c0)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x4000800) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 9.306342383s ago: executing program 1 (id=1432): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r8 = epoll_create1(0x0) r9 = syz_open_dev$media(&(0x7f0000000000), 0x103, 0x108002) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000080)={0x2}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd700000000000020000000866e891000300", @ANYRES32=r7, @ANYBLOB='\b\x00&\x00l\t\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 9.135211183s ago: executing program 1 (id=1433): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x601, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000980)=""/152, &(0x7f0000000000)=0x98) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec\x00', 0x16e) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="14f77000fedb04f235cb000049d32601679fbde665b54e63184cb9"], 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000940)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 6.643270793s ago: executing program 1 (id=1434): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) connect(r8, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) 6.245409844s ago: executing program 1 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000000540), 0x800001d, 0x1c) 6.244612549s ago: executing program 0 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000540), 0x800001d, 0x1c) 5.016784928s ago: executing program 0 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, 0x0, 0x0, 0x1c) 4.882472606s ago: executing program 4 (id=1440): setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[], 0x14}}, 0x14000081) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[], 0x68}}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000010c0)='./proc\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000001180)='6', 0x1) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000011c0)={{0x2, 0x4e21, @local}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @private=0xa010102}, 'sit0\x00'}) 4.796940983s ago: executing program 2 (id=1441): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 4.531174592s ago: executing program 4 (id=1442): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x478201, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x1, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r1, 0xc138fd02, &(0x7f0000000080)="0400000000000000e4700c9eafb8") ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/current_tracer\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='blk', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/trace_options\x00', 0x1, 0x0) write(r4, &(0x7f0000000500), 0x0) close(r4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000580), 0x1000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000340)={&(0x7f00000002c0)=[r2, 0x0, r5, r6, r7, r8, 0x0], &(0x7f0000000300)=[0x8, 0x2, 0x4b6, 0x6], 0x6, 0x7, 0x1}) 3.500267351s ago: executing program 4 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000000540), 0x800001d, 0x1c) 3.487035447s ago: executing program 2 (id=1444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x17, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000a80)=""/4101}, 0x94) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2.991907399s ago: executing program 2 (id=1445): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x3d59, &(0x7f0000000780)={0x0, 0x76dd, 0x40, 0x1, 0x23}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) mmap$IORING_OFF_SQES(0x0, 0x80000001, 0x100000e, 0x12, r0, 0x10000000) r1 = memfd_create(&(0x7f0000000980)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6%y\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00$p!\xeb9\x96\xbeqs\x1cn\x14j\x19YH\x04j\xe5E\xeb\xf9\xa1[', 0x0) r2 = dup(r1) r3 = fanotify_init(0x20, 0x1000) fanotify_mark(r3, 0x1, 0x32, r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = gettid() unshare(0x22020400) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000900)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000bc0), 0x75f, 0xa8182) r6 = memfd_create(&(0x7f0000000c00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001b00)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88000}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000001f00)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.812390655s ago: executing program 4 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f000000bc00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000540), 0x800001d, 0x1c) 2.724280332s ago: executing program 2 (id=1448): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 2.29859741s ago: executing program 0 (id=1449): socket$inet6_sctp(0xa, 0x801, 0x84) sched_setattr(0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000700), 0x2) r1 = memfd_create(&(0x7f0000000a00)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1d8) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000380)=0x4) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000bc0)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0x1cfd, &(0x7f0000000c40)={0x0, 0x800, 0x10000, 0x1, 0x91}, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000d80)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2200, 0x8) mknodat$loop(r6, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 834.80681ms ago: executing program 0 (id=1450): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000dc0), 0xffffff6a) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x3fffffffffffce3, 0x700000000000000, 0x0) socketpair(0x1, 0x5, 0x739b, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e40)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getrandom(&(0x7f00000004c0)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x4000800) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 833.602365ms ago: executing program 4 (id=1458): syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) getpid() r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d97", 0x8f) 319.316623ms ago: executing program 2 (id=1451): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r1, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4", 0x91) 0s ago: executing program 1 (id=1452): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000400)="ffffffffffffff030000ffffffffffffffffffffffffffff0030bb0b590133408dfc219d9b3480f09daae239f9b12b2922f5a767f3c8d84d82a954d92e5e46b5a1c4eb5a3f9ea538e1f1ac92e201b93b2739c35b306f842f2ee20abd17a64ccddccbbfac46f06cf3a8b7dd12c0e5fea9b41a940b4119e3bf01010000000000005bdcc620cc0f5efe4da6ef2629877bf3dbdc03473ef8baa34ee83d472e4fdf1ab844cb38b58b645fa8e780d6200f40b9efca6d111a1307ff0b1bafe598f9fee55e18db7c6ccca178bad39eef902059f6f78d9ae69f3947c21cb49d7f2337fd8b106f89b4f0bb67e35e798fe65dfcde141076b0340faf5d", 0xf7, 0x10) r2 = syz_io_uring_setup(0x141c, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000640)='./mysys\x00', 0x0, r5) syz_io_uring_modify_offsets$generic(0x0, r3, 0x2c, 0x10000) syz_io_uring_submit$UBLK(0x0, r3, r4, 0x0) io_uring_enter(r2, 0x20, 0x20, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) kernel console output (not intermixed with test programs): C0] sr 2:0:0:0: [sr0] tag#1 CDB: Release(6) [ 238.239628][ C0] sr 2:0:0:0: [sr0] tag#1 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 238.239638][ C0] sr 2:0:0:0: [sr0] tag#1 CDB[10]: 41 [ 239.220620][ T1163] IPVS: starting estimator thread 0... [ 239.304333][ T9389] IPVS: using max 43 ests per chain, 103200 per kthread [ 240.954415][ T9412] tipc: Started in network mode [ 240.954447][ T9412] tipc: Node identity 76fc459ac3e9, cluster identity 4711 [ 240.954623][ T9412] tipc: Enabled bearer , priority 0 [ 240.975007][ T9412] syzkaller0: entered promiscuous mode [ 240.975028][ T9412] syzkaller0: entered allmulticast mode [ 240.995363][ T9412] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 241.356977][ T9415] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 241.360724][ T9416] tipc: Resetting bearer [ 241.428556][ T9411] tipc: Resetting bearer [ 241.506013][ T9411] tipc: Disabling bearer [ 243.183821][ T9426] nbd: socks must be embedded in a SOCK_ITEM attr [ 243.184945][ T9426] block nbd0: shutting down sockets [ 245.145702][ T9464] tmpfs: Using encoding : utf8-12.1.0 [ 250.663754][ T9533] tmpfs: Using encoding : utf8-12.1.0 [ 250.894062][ T9541] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 250.894341][ T9541] netlink: 17 bytes leftover after parsing attributes in process `syz.2.696'. [ 250.895823][ T9541] FAULT_INJECTION: forcing a failure. [ 250.895823][ T9541] name failslab, interval 1, probability 0, space 0, times 0 [ 250.895852][ T9541] CPU: 3 UID: 0 PID: 9541 Comm: syz.2.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.895878][ T9541] Tainted: [L]=SOFTLOCKUP [ 250.895885][ T9541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.895897][ T9541] Call Trace: [ 250.895903][ T9541] [ 250.895911][ T9541] dump_stack_lvl+0x100/0x190 [ 250.895945][ T9541] should_fail_ex.cold+0x5/0xa [ 250.895972][ T9541] should_failslab+0xc2/0x120 [ 250.896001][ T9541] kmem_cache_alloc_noprof+0x92/0x6a0 [ 250.896026][ T9541] ? fib_trie_unmerge+0x246/0xc00 [ 250.896062][ T9541] fib_trie_unmerge+0x246/0xc00 [ 250.896098][ T9541] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 250.896130][ T9541] ? lock_acquire+0x1d1/0x380 [ 250.896163][ T9541] fib_unmerge+0xee/0x510 [ 250.896180][ T9541] ? fib_nl2rule_locked+0x3ef/0x740 [ 250.896213][ T9541] fib4_rule_configure+0xaba/0x1160 [ 250.896245][ T9541] ? fib_nl2rule_locked+0x3fe/0x740 [ 250.896278][ T9541] fib_newrule+0x3c3/0x1e50 [ 250.896316][ T9541] ? __pfx_fib_newrule+0x10/0x10 [ 250.896366][ T9541] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 250.896391][ T9541] ? find_held_lock+0x2b/0x80 [ 250.896413][ T9541] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 250.896435][ T9541] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 250.896480][ T9541] ? __pfx_fib_nl_newrule+0x10/0x10 [ 250.896508][ T9541] rtnetlink_rcv_msg+0x95e/0xe90 [ 250.896535][ T9541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.896564][ T9541] ? __lock_acquire+0x5c0/0x1f40 [ 250.896599][ T9541] netlink_rcv_skb+0x159/0x420 [ 250.896622][ T9541] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.896652][ T9541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.896685][ T9541] ? netlink_deliver_tap+0x1ae/0xb50 [ 250.896713][ T9541] netlink_unicast+0x668/0x950 [ 250.896739][ T9541] ? __pfx_netlink_unicast+0x10/0x10 [ 250.896770][ T9541] netlink_sendmsg+0x9ac/0x10c0 [ 250.896799][ T9541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.896830][ T9541] ? apparmor_socket_sendmsg+0x165/0x280 [ 250.896862][ T9541] ? ____sys_sendmsg+0xa99/0xc30 [ 250.896888][ T9541] ____sys_sendmsg+0xa99/0xc30 [ 250.896914][ T9541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.896940][ T9541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.896982][ T9541] ___sys_sendmsg+0x190/0x1e0 [ 250.897012][ T9541] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.897042][ T9541] ? futex_wait+0x11e/0x370 [ 250.897081][ T9541] ? find_held_lock+0x2b/0x80 [ 250.897124][ T9541] __sys_sendmsg+0x160/0x210 [ 250.897147][ T9541] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.897186][ T9541] __do_fast_syscall_32+0x14b/0x8c0 [ 250.897213][ T9541] do_fast_syscall_32+0x32/0x70 [ 250.897240][ T9541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.897266][ T9541] RIP: 0023:0xf7fa3fbc [ 250.897283][ T9541] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 250.897302][ T9541] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 250.897322][ T9541] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000640 [ 250.897335][ T9541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.897346][ T9541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.897357][ T9541] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 250.897369][ T9541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.897397][ T9541] [ 252.495648][ T9567] Invalid ELF header magic: != ELF [ 254.722011][ T9612] syz.0.717 (pid 9612) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 254.737089][ T9612] ip6gre1: entered allmulticast mode [ 254.738937][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.296593][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.296623][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.976321][ T9640] gadgetfs: bound to dummy_udc driver [ 256.002929][ T9643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.715'. [ 256.003070][ T9640] FAULT_INJECTION: forcing a failure. [ 256.003070][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 256.003090][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.1.714 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.003106][ T9640] Tainted: [L]=SOFTLOCKUP [ 256.003110][ T9640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.003117][ T9640] Call Trace: [ 256.003121][ T9640] [ 256.003126][ T9640] dump_stack_lvl+0x100/0x190 [ 256.003145][ T9640] should_fail_ex.cold+0x5/0xa [ 256.003161][ T9640] should_failslab+0xc2/0x120 [ 256.003179][ T9640] kmem_cache_alloc_noprof+0x92/0x6a0 [ 256.003193][ T9640] ? __anon_vma_prepare+0xa9/0x690 [ 256.003207][ T9640] __anon_vma_prepare+0xa9/0x690 [ 256.003218][ T9640] ? __pfx_mprotect_fixup+0x10/0x10 [ 256.003240][ T9640] __vmf_anon_prepare+0x11f/0x250 [ 256.003257][ T9640] do_anonymous_page+0x47d/0x2050 [ 256.003275][ T9640] ? find_held_lock+0x2b/0x80 [ 256.003291][ T9640] ? __pfx_do_anonymous_page+0x10/0x10 [ 256.003308][ T9640] ? rcu_read_unlock+0x2d/0xb0 [ 256.003319][ T9640] ? rcu_read_unlock+0x2d/0xb0 [ 256.003334][ T9640] __handle_mm_fault+0x1ff3/0x2f60 [ 256.003355][ T9640] ? lock_vma_under_rcu+0x11d/0x590 [ 256.003371][ T9640] ? __pfx___handle_mm_fault+0x10/0x10 [ 256.003391][ T9640] ? lock_vma_under_rcu+0x17c/0x590 [ 256.003415][ T9640] handle_mm_fault+0x363/0xa20 [ 256.003435][ T9640] do_user_addr_fault+0x59c/0x12f0 [ 256.003453][ T9640] exc_page_fault+0x6f/0xd0 [ 256.003471][ T9640] asm_exc_page_fault+0x26/0x30 [ 256.003482][ T9640] RIP: 0023:0xf7118e90 [ 256.003491][ T9640] Code: 00 83 ec 04 8d 83 2e 1d e5 ff 50 56 55 e8 48 21 03 00 8b 83 20 67 00 00 83 c4 10 83 e8 01 39 f0 0f 82 b4 00 00 00 8b 44 24 04 <89> 75 08 89 75 0c 89 45 10 83 c4 1c 89 e8 5b 5e 5f 5d c3 2e 8d 74 [ 256.003501][ T9640] RSP: 002b:00000000f53d5270 EFLAGS: 00010286 [ 256.003511][ T9640] RAX: 0000000000001000 RBX: 00000000f73adff4 RCX: 0000000000000000 [ 256.003518][ T9640] RDX: 00000000f5200000 RSI: 0000000000021000 RDI: 0000000000100000 [ 256.003526][ T9640] RBP: 00000000f5200000 R08: 0000000000000000 R09: 0000000000000000 [ 256.003532][ T9640] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 256.003539][ T9640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.003554][ T9640] [ 256.003682][ T9640] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 256.025447][ T5873] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 256.025616][ T5873] wiimote 0005:057E:0306.0004: New device registered (Wiimote 1) [ 257.041439][ T9662] FAULT_INJECTION: forcing a failure. [ 257.041439][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 257.041460][ T9662] CPU: 3 UID: 0 PID: 9662 Comm: syz.0.720 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.041475][ T9662] Tainted: [L]=SOFTLOCKUP [ 257.041480][ T9662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.041487][ T9662] Call Trace: [ 257.041491][ T9662] [ 257.041496][ T9662] dump_stack_lvl+0x100/0x190 [ 257.041515][ T9662] should_fail_ex.cold+0x5/0xa [ 257.041531][ T9662] should_failslab+0xc2/0x120 [ 257.041548][ T9662] __kmalloc_node_noprof+0xff/0x870 [ 257.041563][ T9662] ? __pfx___up_read+0x10/0x10 [ 257.041576][ T9662] ? crypto_create_tfm_node+0x8d/0x3b0 [ 257.041591][ T9662] crypto_create_tfm_node+0x8d/0x3b0 [ 257.041602][ T9662] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 257.041621][ T9662] crypto_spawn_tfm2+0x62/0xc0 [ 257.041637][ T9662] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 257.041654][ T9662] crypto_sig_init_tfm+0xba/0xf0 [ 257.041668][ T9662] crypto_create_tfm_node+0x171/0x3b0 [ 257.041680][ T9662] crypto_alloc_tfm_node+0x102/0x260 [ 257.041693][ T9662] public_key_verify_signature+0x21b/0x910 [ 257.041709][ T9662] ? __pfx_public_key_verify_signature+0x10/0x10 [ 257.041729][ T9662] ? asymmetric_key_generate_id+0x7e/0x180 [ 257.041743][ T9662] x509_check_for_self_signed+0x325/0x510 [ 257.041759][ T9662] x509_cert_parse+0x60c/0x910 [ 257.041774][ T9662] x509_key_preparse+0x65/0x9c0 [ 257.041791][ T9662] asymmetric_key_preparse+0xce/0x1d0 [ 257.041801][ T9662] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 257.041813][ T9662] __key_create_or_update+0x3f6/0xe10 [ 257.041832][ T9662] ? __pfx___key_create_or_update+0x10/0x10 [ 257.041849][ T9662] ? lookup_user_key+0x477/0x13e0 [ 257.041864][ T9662] ? __pfx_lookup_user_key+0x10/0x10 [ 257.041898][ T9662] key_create_or_update+0x42/0x60 [ 257.041917][ T9662] __do_sys_add_key+0x2e8/0x460 [ 257.041930][ T9662] ? __might_fault+0xc5/0x140 [ 257.041941][ T9662] ? __pfx___do_sys_add_key+0x10/0x10 [ 257.041960][ T9662] __do_fast_syscall_32+0x14b/0x8c0 [ 257.041975][ T9662] do_fast_syscall_32+0x32/0x70 [ 257.041988][ T9662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.042002][ T9662] RIP: 0023:0xf7f38fbc [ 257.042011][ T9662] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 257.042022][ T9662] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 257.042033][ T9662] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 257.042040][ T9662] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 257.042046][ T9662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.042053][ T9662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.042060][ T9662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.042074][ T9662] [ 257.303327][ T5873] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) (1) [ 257.332282][ T5873] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input13 [ 257.346971][ T5873] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input14 [ 257.373430][ T5873] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input12 [ 257.874238][ T2329] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 258.049531][ T2329] usb 7-1: unable to get BOS descriptor or descriptor too short [ 258.065072][ T2329] usb 7-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00 [ 258.065108][ T2329] usb 7-1: no configurations [ 258.065119][ T2329] usb 7-1: can't read configurations, error -22 [ 258.249319][ T9642] wiimote 0005:057E:0306.0004: Device removed [ 258.984258][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.375553][ T9700] Invalid ELF header magic: != ELF [ 259.707646][ T43] kauditd_printk_skb: 84 callbacks suppressed [ 259.707666][ T43] audit: type=1800 audit(1792957343.733:576): pid=9708 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.728" name="bus" dev="tmpfs" ino=953 res=0 errno=-22 [ 259.816507][ T9710] hub 5-0:1.0: USB hub found [ 259.817200][ T9710] hub 5-0:1.0: 1 port detected [ 259.903750][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 259.916812][ T9713] af_packet: tpacket_rcv: packet too big, clamped from 2595 to 4294967272. macoff=96 [ 263.335849][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'. [ 263.402970][ T1163] IPVS: starting estimator thread 0... [ 263.494733][ T9766] IPVS: using max 26 ests per chain, 62400 per kthread [ 267.257376][ T9802] Set syz1 is full, maxelem 65536 reached [ 268.094305][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.366269][ T9851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'. [ 268.380176][ T5904] wiimote 0005:057E:0306.0005: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 268.380449][ T5904] wiimote 0005:057E:0306.0005: New device registered (Wiimote 1) [ 268.791485][ C1] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 268.791526][ C1] sr 2:0:0:0: [sr0] tag#20 CDB: Release(6) [ 268.791543][ C1] sr 2:0:0:0: [sr0] tag#20 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 268.791559][ C1] sr 2:0:0:0: [sr0] tag#20 CDB[10]: 41 [ 269.094626][ T1349] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 269.252175][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 269.252835][ T1349] usb 6-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00 [ 269.252855][ T1349] usb 6-1: no configurations [ 269.252861][ T1349] usb 6-1: can't read configurations, error -22 [ 269.335601][ T9850] wiimote 0005:057E:0306.0005: Device removed [ 269.454335][ T5904] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1) (1) [ 269.475573][ T5904] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input16 [ 269.486677][ T5904] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input17 [ 269.495716][ T5904] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input15 [ 272.024228][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 272.174943][ T24] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 272.175888][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.175909][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.175924][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.175959][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 272.175980][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 272.177353][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.177371][ T24] usb 7-1: Product: syz [ 272.177380][ T24] usb 7-1: Manufacturer: syz [ 272.185465][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 272.185481][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 272.190637][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 272.190653][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 272.603993][ T9920] file system registered [ 272.835428][ C1] cdc_wdm 7-1:1.0: Unexpected error -71 [ 272.835706][ T5857] usb 7-1: USB disconnect, device number 9 [ 272.836213][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.836276][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.836284][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 275.531171][ C2] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 275.531198][ C2] sr 2:0:0:0: [sr0] tag#11 CDB: Release(6) [ 275.531216][ C2] sr 2:0:0:0: [sr0] tag#11 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 275.531225][ C2] sr 2:0:0:0: [sr0] tag#11 CDB[10]: 41 [ 276.416412][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 282.925405][ T67] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 285.384255][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.873029][T10279] syzkaller0: entered promiscuous mode [ 290.873043][T10279] syzkaller0: entered allmulticast mode [ 290.899855][T10279] 0: reclassify loop, rule prio 0, protocol 700 [ 296.761614][T10363] syz.1.847: attempt to access beyond end of device [ 296.761614][T10363] ram3: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 296.788539][T10363] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 296.788557][T10363] device-mapper: ioctl: error adding target to table [ 298.240474][T10414] 0x000000000001-0x000000010001 : "" [ 298.256347][T10414] ftl_cs: FTL header not found. [ 298.727782][T10431] ublk_ctrl_add_dev: invalid recovery flags 10 [ 303.408024][T10511] trusted_key: encrypted_key: insufficient parameters specified [ 316.738101][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.738132][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.018255][T10643] syz.0.895 (10643) used greatest stack depth: 19800 bytes left [ 317.211100][T10721] input: syz1 as /devices/virtual/input/input18 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x9e000) [ 317.451552][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 317.451565][ T1128] ata1: failed to read log page 10h (errno=-5) [ 317.451576][ T1128] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 317.451586][ T1128] ata1.00: irq_stat 0x41000000 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x199000) [ 317.451596][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 317.451602][ T1128] ata1.00: cmd 60/f0:70:7e:49:01/04:00:00:00:00/40 tag 14 ncq dma 647168 in [ 317.451602][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 317.451631][ T1128] ata1.00: status: { DRDY } [ 317.451639][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 317.451645][ T1128] ata1.00: cmd 60/80:78:ee:4e:01/05:00:00:00:00/40 tag 15 ncq dma 720896 in [ 317.451645][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 317.451674][ T1128] ata1.00: status: { DRDY } [ 317.452657][ T1128] ata1.00: configured for UDMA/100 [ 317.452930][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 317.452955][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 317.452974][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 317.453002][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 49 7e 00 04 f0 00 [ 317.453019][ T1128] I/O error, dev sda, sector 84350 op 0x0:(READ) flags 0x80700 phys_seg 60 prio class 2 [ 317.454911][ T1128] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 317.454936][ T1128] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 317.454953][ T1128] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 317.454971][ T1128] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 4e ee 00 05 80 00 [ 317.454982][ T1128] I/O error, dev sda, sector 85742 op 0x0:(READ) flags 0x80700 phys_seg 130 prio class 2 [ 317.462572][ T1128] ata1: EH complete [ 317.616106][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 317.616120][ T1128] ata1: failed to read log page 10h (errno=-5) [ 317.616129][ T1128] ata1.00: NCQ disabled due to excessive errors [ 317.616136][ T1128] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 317.616146][ T1128] ata1.00: irq_stat 0x41000008 [ 317.616155][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 317.616161][ T1128] ata1.00: cmd 60/c8:f0:ee:58:01/0c:00:00:00:00/40 tag 30 ncq dma 1675264 in [ 317.616161][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 317.616190][ T1128] ata1.00: status: { DRDY } [ 317.616197][ T1128] ata1.00: error: { ABRT } [ 317.623834][ T1128] ata1.00: configured for UDMA/100 [ 317.629552][ T1128] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 317.629578][ T1128] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 317.629596][ T1128] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 317.629615][ T1128] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 58 ee 00 0c c8 00 [ 317.629627][ T1128] I/O error, dev sda, sector 88302 op 0x0:(READ) flags 0x80700 phys_seg 122 prio class 2 [ 317.629839][ T1128] ata1: EH complete [ 318.179991][ T1128] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 318.180008][ T1128] ata1.00: irq_stat 0x40000000 [ 318.180017][ T1128] ata1.00: failed command: READ DMA EXT [ 318.180024][ T1128] ata1.00: cmd 25/00:e8:ee:1b:01/00:17:00:00:00/e0 tag 8 dma 3133440 in [ 318.180024][ T1128] res 41/04:e8:ee:1b:01/00:17:00:00:00/e0 Emask 0x1 (device error) [ 318.180077][ T1128] ata1.00: status: { DRDY ERR } [ 318.180086][ T1128] ata1.00: error: { ABRT } [ 318.180674][ T1128] ata1.00: configured for UDMA/100 [ 318.180780][ T1128] sd 0:0:0:0: [sda] tag#8 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 318.180813][ T1128] sd 0:0:0:0: [sda] tag#8 Sense Key : Aborted Command [current] [ 318.180839][ T1128] sd 0:0:0:0: [sda] tag#8 Add. Sense: No additional sense information [ 318.180869][ T1128] sd 0:0:0:0: [sda] tag#8 CDB: Read(10) 28 00 00 01 1b ee 00 17 e8 00 [ 318.180889][ T1128] I/O error, dev sda, sector 72686 op 0x0:(READ) flags 0x80700 phys_seg 143 prio class 2 [ 318.183046][ T1128] ata1: EH complete [ 319.501969][T10670] syz.1.898 (10670) used greatest stack depth: 19264 bytes left [ 320.267351][T10704] syz.0.911 (10704) used greatest stack depth: 18216 bytes left [ 321.214363][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.777977][T10783] syzkaller0: entered promiscuous mode [ 321.777991][T10783] syzkaller0: entered allmulticast mode [ 321.805834][T10783] 0: reclassify loop, rule prio 0, protocol 700 [ 321.917297][T10788] ublk_ctrl_add_dev: invalid recovery flags 10 [ 326.223079][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 328.254197][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 332.454219][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 334.800601][T11021] veth3: entered promiscuous mode [ 334.800614][T11021] veth3: entered allmulticast mode [ 334.889469][T11024] warning: `syz.1.961' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 340.716816][T11104] hub 5-0:1.0: USB hub found [ 340.717082][T11104] hub 5-0:1.0: 1 port detected [ 343.310660][T11138] device-mapper: table: 248:1: integrity: Device lookup failed (-EBUSY) [ 343.310675][T11138] device-mapper: ioctl: error adding target to table [ 345.174747][T11162] block2mtd: error: cannot open device /dev/ram0 [ 345.182598][T11162] ubi0: attaching mtd1 [ 345.186953][T11162] ubi0: scanning is finished [ 345.187000][T11162] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 345.388902][T11162] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 348.241067][T11214] FAULT_INJECTION: forcing a failure. [ 348.241067][T11214] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 348.241160][T11214] CPU: 3 UID: 0 PID: 11214 Comm: syz.0.1009 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.241188][T11214] Tainted: [L]=SOFTLOCKUP [ 348.241193][T11214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.241200][T11214] Call Trace: [ 348.241204][T11214] [ 348.241210][T11214] dump_stack_lvl+0x100/0x190 [ 348.241259][T11214] should_fail_ex.cold+0x5/0xa [ 348.241278][T11214] ? prepare_alloc_pages+0x16d/0x5b0 [ 348.241338][T11214] should_fail_alloc_page+0xeb/0x140 [ 348.241365][T11214] prepare_alloc_pages+0x1f0/0x5b0 [ 348.241384][T11214] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 348.241398][T11214] ? do_raw_spin_unlock+0x145/0x1e0 [ 348.241423][T11214] ? rcu_is_watching+0x13/0xc0 [ 348.241448][T11214] ? __lock_acquire+0x5c0/0x1f40 [ 348.241466][T11214] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 348.241484][T11214] ? lock_acquire+0x1d1/0x380 [ 348.241501][T11214] ? do_raw_spin_lock+0x128/0x260 [ 348.241514][T11214] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.241527][T11214] ? find_held_lock+0x2b/0x80 [ 348.241546][T11214] ? __lock_acquire+0x5c0/0x1f40 [ 348.241564][T11214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.241584][T11214] ? policy_nodemask+0xed/0x4f0 [ 348.241602][T11214] alloc_pages_mpol+0x201/0x560 [ 348.241620][T11214] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 348.241641][T11214] folio_alloc_mpol_noprof+0x36/0x260 [ 348.241655][T11214] shmem_alloc_folio+0x135/0x160 [ 348.241677][T11214] shmem_alloc_and_add_folio+0x371/0xd40 [ 348.241697][T11214] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 348.241715][T11214] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 348.241755][T11214] shmem_get_folio_gfp+0x758/0x1af0 [ 348.241779][T11214] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 348.241805][T11214] ? filemap_map_pages+0x1155/0x2020 [ 348.241845][T11214] shmem_fault+0x1fb/0xa30 [ 348.241874][T11214] ? __pfx_shmem_fault+0x10/0x10 [ 348.241901][T11214] ? __pte_offset_map+0x9a/0x470 [ 348.241927][T11214] ? __pfx_filemap_map_pages+0x10/0x10 [ 348.241951][T11214] ? find_held_lock+0x2b/0x80 [ 348.241967][T11214] ? __pfx_filemap_map_pages+0x10/0x10 [ 348.241980][T11214] __do_fault+0x10b/0x440 [ 348.241994][T11214] do_fault+0xb3f/0x1890 [ 348.242010][T11214] ? __pfx_do_fault+0x10/0x10 [ 348.242023][T11214] ? rcu_read_unlock+0x2d/0xb0 [ 348.242033][T11214] ? rcu_read_unlock+0x2d/0xb0 [ 348.242046][T11214] __handle_mm_fault+0x150b/0x2f60 [ 348.242067][T11214] ? __pfx___handle_mm_fault+0x10/0x10 [ 348.242083][T11214] ? pte_offset_map_lock+0x174/0x320 [ 348.242097][T11214] ? find_held_lock+0x2b/0x80 [ 348.242110][T11214] ? find_held_lock+0x2b/0x80 [ 348.242123][T11214] ? follow_page_pte+0x536/0x1050 [ 348.242145][T11214] handle_mm_fault+0x363/0xa20 [ 348.242165][T11214] __get_user_pages+0x8a9/0x2c20 [ 348.242182][T11214] ? __pfx_mt_find+0x10/0x10 [ 348.242280][T11214] ? __pfx___get_user_pages+0x10/0x10 [ 348.242300][T11214] populate_vma_page_range+0x267/0x3f0 [ 348.242316][T11214] ? __pfx_populate_vma_page_range+0x10/0x10 [ 348.242331][T11214] ? __pfx_find_vma_intersection+0x10/0x10 [ 348.242349][T11214] __mm_populate+0x107/0x3a0 [ 348.242365][T11214] ? __pfx___mm_populate+0x10/0x10 [ 348.242380][T11214] ? up_write+0x2dc/0x5b0 [ 348.242394][T11214] vm_mmap_pgoff+0x441/0x470 [ 348.242409][T11214] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 348.242430][T11214] ksys_mmap_pgoff+0xe4/0x610 [ 348.242444][T11214] ? find_held_lock+0x2b/0x80 [ 348.242458][T11214] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 348.242476][T11214] __do_fast_syscall_32+0x14b/0x8c0 [ 348.242490][T11214] do_fast_syscall_32+0x32/0x70 [ 348.242501][T11214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.242516][T11214] RIP: 0023:0xf7f38fbc [ 348.242526][T11214] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 348.242536][T11214] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 348.242547][T11214] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 348.242554][T11214] RDX: 0000000006ebbeea RSI: 0000000000008031 RDI: 00000000ffffffff [ 348.242560][T11214] RBP: 0000000028f43000 R08: 0000000000000000 R09: 0000000000000000 [ 348.242567][T11214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.242573][T11214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.242588][T11214] [ 348.898605][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 350.904205][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 351.382937][T11280] rxe_eth0 speed is unknown, defaulting to 1000 [ 353.086518][T11285] syz.2.1025: attempt to access beyond end of device [ 353.086518][T11285] ram5: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 353.103944][T11285] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 353.103967][T11285] device-mapper: ioctl: error adding target to table [ 353.378786][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 353.380942][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 355.064287][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 356.678325][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 357.578076][T11391] hub 5-0:1.0: USB hub found [ 357.578233][T11391] hub 5-0:1.0: 1 port detected [ 358.732771][T11409] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.639801][T11407] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.254528][T11462] hub 5-0:1.0: USB hub found [ 361.255869][T11462] hub 5-0:1.0: 1 port detected [ 361.446680][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 361.470797][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 361.512619][T11472] Console: switching to colour dummy device 80x25 [ 363.275708][T11509] netlink: 'syz.2.1063': attribute type 21 has an invalid length. [ 363.275729][T11509] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1063'. [ 363.275963][T11509] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 363.275976][T11509] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1063'. [ 364.643750][T11527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.650929][T11527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.302684][T11535] netlink: 'syz.2.1071': attribute type 4 has an invalid length. [ 365.302705][T11535] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 365.302717][T11535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1071'. [ 365.461358][T11539] syzkaller0: entered promiscuous mode [ 365.461378][T11539] syzkaller0: entered allmulticast mode [ 366.165862][ T43] audit: type=1326 audit(1792957450.193:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.166259][ T43] audit: type=1326 audit(1792957450.193:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.169665][ T43] audit: type=1326 audit(1792957450.193:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.169691][ T43] audit: type=1326 audit(1792957450.193:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.169711][ T43] audit: type=1326 audit(1792957450.193:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.173307][ T43] audit: type=1326 audit(1792957450.193:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 366.173799][ T43] audit: type=1326 audit(1792957450.193:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.174185][ T43] audit: type=1326 audit(1792957450.193:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.190609][ T43] audit: type=1326 audit(1792957450.213:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.190636][ T43] audit: type=1326 audit(1792957450.213:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11545 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 366.964719][T11555] rxe_eth0 speed is unknown, defaulting to 1000 [ 366.987120][T11556] device-mapper: table: 248:3: writecache: Origin data device lookup failed (-EBUSY) [ 366.987137][T11556] device-mapper: ioctl: error adding target to table [ 368.952334][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 375.055977][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 375.140493][T11642] bridge0: port 3(syz_tun) entered disabled state [ 375.149666][T11642] syz_tun (unregistering): left allmulticast mode [ 375.149681][T11642] syz_tun (unregistering): left promiscuous mode [ 375.149723][T11642] bridge0: port 3(syz_tun) entered disabled state [ 375.162716][ T232] smbdirect: ib_dev[syz1] removed [ 375.180627][ T24] infiniband syz1: ib_query_port failed (-19) [ 375.257561][T11650] Bluetooth: hci0: unsupported parameter 5134 [ 375.257583][T11650] Bluetooth: hci0: unsupported parameter 8192 [ 375.257622][T11650] Bluetooth: hci0: unsupported parameter 5134 [ 375.257634][T11650] Bluetooth: hci0: unsupported parameter 8192 [ 375.863649][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.872337][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.873063][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.874022][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.883741][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.065753][T11657] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.337366][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.337505][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.337632][T11657] bridge_slave_0: entered allmulticast mode [ 376.338855][T11657] bridge_slave_0: entered promiscuous mode [ 376.352396][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.352530][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.352636][T11657] bridge_slave_1: entered allmulticast mode [ 376.353919][T11657] bridge_slave_1: entered promiscuous mode [ 376.371927][T11657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.373901][T11657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.385255][T11657] team0: Port device team_slave_0 added [ 376.386712][T11657] team0: Port device team_slave_1 added [ 376.398363][T11657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.398377][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.398398][T11657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.399382][T11657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.399392][T11657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.399412][T11657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.430829][T11657] hsr_slave_0: entered promiscuous mode [ 376.431546][T11657] hsr_slave_1: entered promiscuous mode [ 376.432027][T11657] debugfs: 'hsr0' already exists in 'hsr' [ 376.432045][T11657] Cannot create hsr debugfs directory [ 376.538648][T11657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.546652][T11657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.548773][T11657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.552305][T11657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.553065][T11657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.557394][T11657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.558128][T11657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.562071][T11657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.587401][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.587453][T11657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.587566][T11657] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.587610][T11657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.618145][T11657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.623772][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.624162][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.639981][T11657] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.643932][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.643977][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.647771][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.647852][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.909766][T11657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.097011][T11657] veth0_vlan: entered promiscuous mode [ 377.103873][T11657] veth1_vlan: entered promiscuous mode [ 377.128993][T11657] veth0_macvtap: entered promiscuous mode [ 377.131386][T11657] veth1_macvtap: entered promiscuous mode [ 377.147704][T11657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.151625][T11657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.175376][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.200422][ T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.200441][ T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.212395][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.212413][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.215398][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.215422][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.215439][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.970199][ T67] Bluetooth: hci2: command tx timeout [ 378.186772][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.014215][ T67] Bluetooth: hci2: command tx timeout [ 380.712091][T11727] FAULT_INJECTION: forcing a failure. [ 380.712091][T11727] name failslab, interval 1, probability 0, space 0, times 0 [ 380.712125][T11727] CPU: 3 UID: 0 PID: 11727 Comm: syz.2.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.712152][T11727] Tainted: [L]=SOFTLOCKUP [ 380.712160][T11727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.712171][T11727] Call Trace: [ 380.712178][T11727] [ 380.712185][T11727] dump_stack_lvl+0x100/0x190 [ 380.712218][T11727] should_fail_ex.cold+0x5/0xa [ 380.712246][T11727] should_failslab+0xc2/0x120 [ 380.712276][T11727] kmem_cache_alloc_noprof+0x92/0x6a0 [ 380.712301][T11727] ? __pfx___might_resched+0x10/0x10 [ 380.712346][T11727] ? configfs_new_dirent+0x312/0x570 [ 380.712424][T11727] ? configfs_new_dirent+0x52/0x570 [ 380.712455][T11727] configfs_new_dirent+0x52/0x570 [ 380.712478][T11727] ? __pfx_down_write_nested+0x10/0x10 [ 380.712505][T11727] configfs_make_dirent+0x36/0x1a0 [ 380.712533][T11727] configfs_create_file+0xfe/0x180 [ 380.712557][T11727] configfs_attach_item.part.0+0x147/0x4f0 [ 380.712590][T11727] configfs_attach_group+0x63/0x440 [ 380.712622][T11727] create_default_group+0x75/0x180 [ 380.712649][T11727] configfs_attach_group+0x212/0x440 [ 380.712680][T11727] configfs_mkdir+0x657/0xd40 [ 380.712713][T11727] ? __pfx_configfs_mkdir+0x10/0x10 [ 380.712760][T11727] vfs_mkdir+0x367/0x850 [ 380.712797][T11727] filename_mkdirat+0x48b/0x5e0 [ 380.712831][T11727] ? __pfx_filename_mkdirat+0x10/0x10 [ 380.712862][T11727] ? strncpy_from_user+0x19d/0x2d0 [ 380.712914][T11727] ? do_getname+0x191/0x390 [ 380.712938][T11727] __ia32_sys_mkdirat+0x88/0xc0 [ 380.712969][T11727] __do_fast_syscall_32+0x14b/0x8c0 [ 380.712993][T11727] ? lockdep_hardirqs_on+0x7d/0x110 [ 380.713025][T11727] do_fast_syscall_32+0x32/0x70 [ 380.713043][T11727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.713066][T11727] RIP: 0023:0xf7fa3fbc [ 380.713081][T11727] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 380.713110][T11727] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 380.713121][T11727] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800006c0 [ 380.713129][T11727] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 380.713135][T11727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.713141][T11727] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 380.713147][T11727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.713162][T11727] [ 380.717837][T11724] ublk0: read batch cmd buffer failed [ 380.718369][T11724] ublk0: read batch cmd buffer failed [ 380.876695][T11724] ublk0: read batch cmd buffer failed [ 380.876784][T11724] ublk0: read batch cmd buffer failed [ 381.367414][T11737] syzkaller0: entered promiscuous mode [ 381.367429][T11737] syzkaller0: entered allmulticast mode [ 382.095689][ T67] Bluetooth: hci2: command tx timeout [ 384.174291][ T67] Bluetooth: hci2: command tx timeout [ 384.258242][T11796] rxe_eth0 speed is unknown, defaulting to 1000 [ 386.114560][ T43] audit: type=1326 audit(1792957472.136:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.114624][ T43] audit: type=1326 audit(1792957472.146:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.116984][ T43] audit: type=1326 audit(1792957472.146:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.117716][ T43] audit: type=1326 audit(1792957472.146:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.118390][ T43] audit: type=1326 audit(1792957472.146:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.164252][ T43] audit: type=1326 audit(1792957472.166:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71277ab code=0x7ffc0000 [ 386.164297][ T43] audit: type=1326 audit(1792957472.186:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.164333][ T43] audit: type=1326 audit(1792957472.186:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.175114][T11834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.194535][ T43] audit: type=1326 audit(1792957472.226:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.194565][ T43] audit: type=1326 audit(1792957472.226:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.0.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38fbc code=0x7ffc0000 [ 386.404191][ T5878] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 386.555096][ T5878] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 386.556316][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 386.556332][ T5878] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 386.558716][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.558730][ T5878] usb 5-1: Product: syz [ 386.558738][ T5878] usb 5-1: Manufacturer: syz [ 386.558746][ T5878] usb 5-1: SerialNumber: syz [ 386.584701][ T5878] usb 5-1: USB2VGA dongle found at address 9 [ 386.588953][ T5878] usb 5-1: Allocated 8 output buffers [ 386.739210][T11845] overlay: filesystem on ./file0 not supported [ 387.430297][T11861] rxe_eth0 speed is unknown, defaulting to 1000 [ 387.700521][T11871] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1136' resets device [ 388.272457][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1138'. [ 389.105893][T11888] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.105984][T11888] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.113938][T11888] hsr_slave_0: left promiscuous mode [ 389.122707][T11888] hsr_slave_1: left promiscuous mode [ 389.764218][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 389.924964][ T24] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 389.926155][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 389.926169][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 389.932805][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.932818][ T24] usb 7-1: Product: syz [ 389.932825][ T24] usb 7-1: Manufacturer: syz [ 389.932832][ T24] usb 7-1: SerialNumber: syz [ 389.953840][ T24] usb 7-1: USB2VGA dongle found at address 10 [ 389.958010][ T24] usb 7-1: Allocated 8 output buffers [ 390.327318][ T5873] corsair-cpro 0003:1B1C:0C10.0006: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 390.391879][ T5873] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -71 [ 390.494685][T11926] fido_id[11926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.571351][T11933] batman_adv: batadv0: Adding interface: netdevsim0 [ 390.571362][T11933] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.571379][T11933] batman_adv: batadv0: Interface activated: netdevsim0 [ 390.660174][T11937] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1148' resets device [ 390.661344][T11932] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 391.237483][T11932] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 391.244024][T11932] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 391.247456][T11932] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 391.258781][T11932] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 391.311024][T11945] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 391.311051][T11945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 391.331475][T11945] vhci_hcd vhci_hcd.0: Device attached [ 391.506376][ T5877] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 391.566591][ T5877] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 392.128227][T11932] pci 0000:00:01.0: Adding to iommu group 1 [ 392.133950][T11932] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 392.133976][T11932] pci 0000:00:01.0: vgaarb: bridge control possible [ 392.133985][T11932] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 392.151613][T11932] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 392.163317][T11932] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 392.171789][T11932] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 392.201739][T11932] [drm] Found bochs VGA, ID 0xb0c5. [ 392.201754][T11932] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 392.233479][T11932] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 392.395658][T11932] Console: switching to colour frame buffer device 160x50 [ 392.438022][T11932] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 392.473305][T11947] vhci_hcd: connection reset by peer [ 392.486457][ T13] vhci_hcd vhci_hcd.2: stop threads [ 392.487845][ T13] vhci_hcd vhci_hcd.2: release socket [ 392.489240][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 392.788544][ T1128] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 392.788584][ T1128] ata1.00: irq_stat 0x40000000 [ 392.788618][ T1128] ata1.00: failed command: READ DMA EXT [ 392.791470][ T1128] ata1.00: cmd 25/00:40:f6:23:01/00:05:00:00:00/e0 tag 30 dma 688128 in [ 392.791470][ T1128] res 41/04:40:f6:23:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 392.791528][ T1128] ata1.00: status: { DRDY ERR } [ 392.792192][ T1128] ata1.00: error: { ABRT } [ 392.798134][ T1128] ata1.00: configured for UDMA/100 [ 392.800149][ T1128] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 392.800560][ T1128] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 392.800625][ T1128] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 392.800967][ T1128] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 23 f6 00 05 40 00 [ 392.801060][ T1128] I/O error, dev sda, sector 74742 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 392.801793][ T1128] ata1: EH complete [ 392.951902][T11954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 392.951955][T11954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 392.955745][T11954] hsr_slave_0: left promiscuous mode [ 392.957575][T11954] hsr_slave_1: left promiscuous mode [ 393.241000][T11959] evm: overlay not supported [ 393.421625][T11964] FAULT_INJECTION: forcing a failure. [ 393.421625][T11964] name failslab, interval 1, probability 0, space 0, times 0 [ 393.421656][T11964] CPU: 1 UID: 0 PID: 11964 Comm: syz.1.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.421673][T11964] Tainted: [L]=SOFTLOCKUP [ 393.421677][T11964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.421684][T11964] Call Trace: [ 393.421688][T11964] [ 393.421693][T11964] dump_stack_lvl+0x100/0x190 [ 393.421804][T11964] should_fail_ex.cold+0x5/0xa [ 393.421821][T11964] should_failslab+0xc2/0x120 [ 393.421863][T11964] __kmalloc_cache_noprof+0x91/0x6d0 [ 393.421881][T11964] ? find_held_lock+0x2b/0x80 [ 393.421926][T11964] ? rpc_mkpipe_data+0x49/0x460 [ 393.422000][T11964] ? __pfx_sunrpc_init_net+0x10/0x10 [ 393.422017][T11964] rpc_mkpipe_data+0x49/0x460 [ 393.422031][T11964] ? __pfx_sunrpc_init_net+0x10/0x10 [ 393.422045][T11964] rpc_pipefs_init_net+0x5b/0x140 [ 393.422060][T11964] sunrpc_init_net+0xb7/0x1b0 [ 393.422075][T11964] ops_init+0x1e2/0x5f0 [ 393.422135][T11964] setup_net+0x118/0x3a0 [ 393.422150][T11964] ? __pfx_setup_net+0x10/0x10 [ 393.422165][T11964] ? bpf_lsm_namespace_init+0x9/0x10 [ 393.422193][T11964] copy_net_ns+0x340/0x7a0 [ 393.422210][T11964] create_new_namespaces+0x3ea/0xac0 [ 393.422239][T11964] unshare_nsproxy_namespaces+0xf6/0x210 [ 393.422259][T11964] ksys_unshare+0x44f/0x980 [ 393.422270][T11964] ? __pfx_ksys_unshare+0x10/0x10 [ 393.422282][T11964] ? __might_fault+0xc5/0x140 [ 393.422300][T11964] __ia32_sys_unshare+0x30/0x40 [ 393.422311][T11964] __do_fast_syscall_32+0x14b/0x8c0 [ 393.422365][T11964] do_fast_syscall_32+0x32/0x70 [ 393.422377][T11964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.422393][T11964] RIP: 0023:0xf7f25fbc [ 393.422403][T11964] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 393.422414][T11964] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 393.422425][T11964] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 393.422432][T11964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.422438][T11964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.422444][T11964] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 393.422450][T11964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.422464][T11964] [ 393.536586][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.618721][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.618833][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.100190][T11975] Console: switching to colour dummy device 80x25 [ 395.749153][ T43] kauditd_printk_skb: 169 callbacks suppressed [ 395.749166][ T43] audit: type=1326 audit(1792957481.776:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.749336][ T43] audit: type=1326 audit(1792957481.776:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.750182][ T43] audit: type=1326 audit(1792957481.776:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.750205][ T43] audit: type=1326 audit(1792957481.776:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.750225][ T43] audit: type=1326 audit(1792957481.776:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.750529][ T43] audit: type=1326 audit(1792957481.776:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.751273][ T43] audit: type=1326 audit(1792957481.776:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.751784][ T43] audit: type=1326 audit(1792957481.776:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.755315][ T43] audit: type=1326 audit(1792957481.786:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 395.755446][ T43] audit: type=1326 audit(1792957481.786:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.4.1163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 396.314325][ T5934] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 396.464398][ T5934] usb 9-1: Using ep0 maxpacket: 8 [ 396.479378][T12015] IPVS: set_ctl: invalid protocol: 41 100.1.1.5:20003 [ 396.481534][ T5934] usb 9-1: unable to get BOS descriptor or descriptor too short [ 396.481572][ T5934] usb 9-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 396.482540][ T5934] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 396.482567][ T5934] usb 9-1: can't read configurations, error -71 [ 396.644767][ T5877] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 400.179467][T12066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.189327][T12066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.201595][T12067] team0 (unregistering): Port device team_slave_0 removed [ 400.203753][T12067] team0 (unregistering): Port device team_slave_1 removed [ 403.180528][T12068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.602272][T12124] gadgetfs: bound to dummy_udc driver [ 403.659840][T12127] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 403.669139][T12126] IPVS: stopping master sync thread 12127 ... [ 405.015830][T12144] FAULT_INJECTION: forcing a failure. [ 405.015830][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 405.015864][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.4.1190 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.015894][T12144] Tainted: [L]=SOFTLOCKUP [ 405.015902][T12144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.015914][T12144] Call Trace: [ 405.015922][T12144] [ 405.015930][T12144] dump_stack_lvl+0x100/0x190 [ 405.015961][T12144] should_fail_ex.cold+0x5/0xa [ 405.015987][T12144] should_failslab+0xc2/0x120 [ 405.016015][T12144] __kvmalloc_node_noprof+0x113/0x9b0 [ 405.016040][T12144] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 405.016066][T12144] ? ceph_msg_new2+0x370/0x4f0 [ 405.016112][T12144] ceph_msg_new2+0x370/0x4f0 [ 405.016142][T12144] msgpool_alloc+0xa8/0x200 [ 405.016193][T12144] ? __pfx_msgpool_alloc+0x10/0x10 [ 405.016223][T12144] ? __pfx_msgpool_alloc+0x10/0x10 [ 405.016250][T12144] mempool_init_node+0x2f7/0x6f0 [ 405.016287][T12144] ? __pfx_msgpool_free+0x10/0x10 [ 405.016315][T12144] mempool_create_node_noprof+0xe9/0x1b0 [ 405.016339][T12144] ? __pfx_msgpool_alloc+0x10/0x10 [ 405.016372][T12144] ceph_msgpool_init+0xdc/0x1d0 [ 405.016404][T12144] ceph_osdc_init+0x4f1/0xa00 [ 405.016433][T12144] ceph_create_client+0x281/0x370 [ 405.016457][T12144] ceph_get_tree+0x1a4/0x1fd0 [ 405.016513][T12144] ? bpf_lsm_capable+0x9/0x10 [ 405.016551][T12144] ? security_capable+0x80/0x260 [ 405.016586][T12144] vfs_get_tree+0x92/0x320 [ 405.016617][T12144] path_mount+0x7d0/0x2850 [ 405.016651][T12144] ? __pfx_path_mount+0x10/0x10 [ 405.016670][T12144] ? lockdep_hardirqs_on+0x7d/0x110 [ 405.016705][T12144] ? putname+0xb1/0x110 [ 405.016738][T12144] ? kmem_cache_free+0x127/0x6c0 [ 405.016768][T12144] ? __ia32_sys_mount+0x292/0x310 [ 405.016787][T12144] __ia32_sys_mount+0x292/0x310 [ 405.016808][T12144] ? __pfx___ia32_sys_mount+0x10/0x10 [ 405.016837][T12144] __do_fast_syscall_32+0x14b/0x8c0 [ 405.016858][T12144] ? lockdep_hardirqs_on+0x7d/0x110 [ 405.016888][T12144] do_fast_syscall_32+0x32/0x70 [ 405.016908][T12144] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.016931][T12144] RIP: 0023:0xf746efbc [ 405.016947][T12144] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 405.016966][T12144] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 405.016986][T12144] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 0000000080000600 [ 405.016999][T12144] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.017010][T12144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.017021][T12144] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 405.017032][T12144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.017058][T12144] [ 405.850856][T12152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.084731][ T50] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 406.141719][T12158] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 406.141747][T12158] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.143269][T12158] vhci_hcd vhci_hcd.0: Device attached [ 406.234236][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 406.244592][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 406.244840][ T50] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 406.249414][ T50] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 406.249428][ T50] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 406.249586][ T50] usb 6-1: config 14 has no interface number 0 [ 406.249619][ T50] usb 6-1: config 14 has no interface number 1 [ 406.250545][ T50] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 406.250726][ T50] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 406.250941][ T50] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 406.251569][ T50] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 406.251769][ T50] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 406.252133][ T50] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.252234][ T50] usb 6-1: config 14 interface 57 has no altsetting 0 [ 406.252245][ T50] usb 6-1: config 14 interface 228 has no altsetting 0 [ 406.271784][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.272039][ T50] usb 6-1: Product: syz [ 406.272607][ T50] usb 6-1: Manufacturer: syz [ 406.272615][ T50] usb 6-1: SerialNumber: syz [ 406.337415][ T2329] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 406.406644][ T2329] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 406.994577][ T50] legousbtower 6-1:14.57: interrupt endpoints not found [ 407.214225][T12159] vhci_hcd: connection reset by peer [ 407.214578][ T13] vhci_hcd vhci_hcd.4: stop threads [ 407.214592][ T13] vhci_hcd vhci_hcd.4: release socket [ 407.215099][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 407.377672][ T50] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 407.455201][ T50] legousbtower 6-1:14.228: LEGO USB Tower #-158 now attached to major 180 minor 2 [ 407.619846][T12171] Bluetooth: ISO socket layer initialized [ 407.623116][ T5153] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 407.627286][ T5153] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 409.088992][ T3411] usb 6-1: USB disconnect, device number 10 [ 409.096693][ T3411] legousbtower 6-1:14.228: LEGO USB Tower #-158 now disconnected [ 409.473993][T12207] rxe_eth0 speed is unknown, defaulting to 1000 [ 410.077100][T12216] rxe_eth0 speed is unknown, defaulting to 1000 [ 410.450379][T12226] syzkaller0: entered promiscuous mode [ 410.450401][T12226] syzkaller0: entered allmulticast mode [ 410.614781][T12233] netlink: 'syz.4.1209': attribute type 5 has an invalid length. [ 410.614794][T12233] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1209'. [ 410.733030][T12211] program syz.1.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.803776][T12233] kAFS: No cell specified [ 411.544958][ T2329] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 412.033874][ T5153] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 412.957953][T12280] comedi comedi3: board detection failed [ 413.514863][T12285] rxe_eth0 speed is unknown, defaulting to 1000 [ 413.632504][T12289] random: crng reseeded on system resumption [ 416.783447][T12340] bridge0: port 3(syz_tun) entered blocking state [ 416.783533][T12340] bridge0: port 3(syz_tun) entered disabled state [ 416.783623][T12340] syz_tun: entered allmulticast mode [ 416.785424][T12340] syz_tun: entered promiscuous mode [ 416.785698][T12340] bridge0: port 3(syz_tun) entered blocking state [ 416.785741][T12340] bridge0: port 3(syz_tun) entered forwarding state [ 416.802582][T12340] bridge0: port 3(syz_tun) entered disabled state [ 416.802725][T12340] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.804618][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.865633][T12342] netlink: 'syz.0.1235': attribute type 11 has an invalid length. [ 416.865648][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1235'. [ 418.633663][T12367] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 418.652752][T12367] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 418.653152][T12367] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 418.653560][T12367] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 418.657201][T12367] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 418.676433][T12367] pci 0000:00:01.0: Adding to iommu group 1 [ 418.691441][T12367] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 418.691454][T12367] pci 0000:00:01.0: vgaarb: bridge control possible [ 418.691461][T12367] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 418.702338][T12367] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 418.702672][T12367] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 418.707146][T12367] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 418.728444][T12367] [drm] Found bochs VGA, ID 0xb0c5. [ 418.728456][T12367] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 418.765305][T12367] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 419.470733][T12367] Console: switching to colour frame buffer device 160x50 [ 419.499444][T12367] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 423.332335][T12432] overlayfs: overlapping lowerdir path [ 424.890568][T12443] program syz.2.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.379004][T12460] syz.1.1252: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.379124][T12460] CPU: 3 UID: 0 PID: 12460 Comm: syz.1.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.379147][T12460] Tainted: [L]=SOFTLOCKUP [ 425.379153][T12460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.379162][T12460] Call Trace: [ 425.379169][T12460] [ 425.379176][T12460] dump_stack_lvl+0x100/0x190 [ 425.379344][T12460] ? do_replace+0x1c6/0x490 [ 425.379428][T12460] warn_alloc.cold+0x9e/0xb2 [ 425.379442][T12460] ? __pfx_warn_alloc+0x10/0x10 [ 425.379489][T12460] ? do_replace+0x1c6/0x490 [ 425.379507][T12460] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 425.379531][T12460] ? __lock_acquire+0x5c0/0x1f40 [ 425.379557][T12460] ? do_replace+0x1c6/0x490 [ 425.379575][T12460] ? do_raw_spin_lock+0x128/0x260 [ 425.379590][T12460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.379609][T12460] ? __lock_acquire+0x5c0/0x1f40 [ 425.379628][T12460] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 425.379686][T12460] ? do_replace+0x1c6/0x490 [ 425.379703][T12460] __vmalloc_node_noprof+0xad/0xf0 [ 425.379720][T12460] ? do_replace+0x1c6/0x490 [ 425.379739][T12460] __vmalloc_noprof+0xa3/0x120 [ 425.379756][T12460] ? __pfx___vmalloc_noprof+0x10/0x10 [ 425.379778][T12460] do_replace+0x1c6/0x490 [ 425.379797][T12460] ? __pfx_do_replace+0x10/0x10 [ 425.379821][T12460] ? register_lock_class+0x3f/0x7b0 [ 425.379836][T12460] compat_do_replace+0x589/0x7a0 [ 425.379854][T12460] ? __pfx_compat_do_replace+0x10/0x10 [ 425.379874][T12460] ? hook_capable+0x1bc/0x500 [ 425.379932][T12460] ? bpf_lsm_capable+0x9/0x10 [ 425.379961][T12460] ? security_capable+0x80/0x260 [ 425.379985][T12460] do_ebt_set_ctl+0x3f4/0x4a0 [ 425.380010][T12460] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 425.380030][T12460] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 425.380083][T12460] ? nf_sockopt_find.isra.0+0x222/0x290 [ 425.380102][T12460] nf_setsockopt+0x8d/0xf0 [ 425.380120][T12460] ip_setsockopt+0xcb/0xf0 [ 425.380136][T12460] tcp_setsockopt+0xa7/0x100 [ 425.380156][T12460] smc_setsockopt+0x1b6/0xad0 [ 425.380179][T12460] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 425.380204][T12460] ? __pfx_smc_setsockopt+0x10/0x10 [ 425.380221][T12460] ? aa_sock_opt_perm+0x114/0x1e0 [ 425.380236][T12460] ? __pfx_smc_setsockopt+0x10/0x10 [ 425.380253][T12460] do_sock_setsockopt+0xf3/0x1d0 [ 425.380270][T12460] __sys_setsockopt+0x119/0x190 [ 425.380286][T12460] __ia32_sys_setsockopt+0xbc/0x160 [ 425.380301][T12460] ? __might_fault+0x111/0x140 [ 425.380317][T12460] __do_fast_syscall_32+0x14b/0x8c0 [ 425.380337][T12460] do_fast_syscall_32+0x32/0x70 [ 425.380358][T12460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.380383][T12460] RIP: 0023:0xf7f25fbc [ 425.380399][T12460] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 425.380416][T12460] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 425.380434][T12460] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 425.380447][T12460] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 425.380457][T12460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.380466][T12460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 425.380475][T12460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.380491][T12460] [ 425.544823][T12460] Mem-Info: [ 425.544834][T12460] active_anon:16207 inactive_anon:4829 isolated_anon:0 [ 425.544834][T12460] active_file:8563 inactive_file:14844 isolated_file:0 [ 425.544834][T12460] unevictable:2024 dirty:530 writeback:0 [ 425.544834][T12460] slab_reclaimable:6492 slab_unreclaimable:63655 [ 425.544834][T12460] mapped:26206 shmem:17831 pagetables:1502 [ 425.544834][T12460] sec_pagetables:311 bounce:0 [ 425.544834][T12460] kernel_misc_reclaimable:0 [ 425.544834][T12460] free:27204 free_pcp:14623 free_cma:0 [ 425.544863][T12460] Node 0 active_anon:384kB inactive_anon:20kB active_file:100kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:12kB writeback:0kB shmem:120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1528kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 425.544893][T12460] Node 1 active_anon:64444kB inactive_anon:19296kB active_file:34152kB inactive_file:59292kB unevictable:8096kB isolated(anon):0kB isolated(file):0kB mapped:104800kB dirty:2108kB writeback:0kB shmem:71204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7368kB pagetables:4480kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 425.544922][T12460] Node 0 DMA free:2612kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:36kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.544954][T12460] lowmem_reserve[]: 0 256 256 256 256 [ 425.544974][T12460] Node 0 DMA32 free:16264kB boost:2048kB min:13604kB low:16492kB high:19380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:384kB inactive_anon:20kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:12kB zspages:68kB present:1032196kB managed:263108kB mlocked:0kB bounce:0kB free_pcp:5528kB local_pcp:2956kB free_cma:0kB [ 425.545010][T12460] lowmem_reserve[]: 0 0 0 0 0 [ 425.545029][T12460] Node 1 DMA32 free:89940kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:64444kB inactive_anon:19296kB active_file:34152kB inactive_file:59292kB unevictable:8096kB writepending:2108kB zspages:2404kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:52964kB local_pcp:21992kB free_cma:0kB [ 425.545061][T12460] lowmem_reserve[]: 0 0 0 0 0 [ 425.545079][T12460] Node 0 DMA: 57*4kB (UE) 18*8kB (UE) 8*16kB (UE) 40*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2612kB [ 425.545173][T12460] Node 0 DMA32: 6*4kB (UME) 26*8kB (UME) 16*16kB (ME) 111*32kB (UME) 55*64kB (UME) 10*128kB (UME) 1*256kB (M) 8*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 16264kB [ 425.545256][T12460] Node 1 DMA32: 49*4kB (UE) 294*8kB (UE) 88*16kB (UME) 141*32kB (UME) 128*64kB (UME) 135*128kB (UME) 54*256kB (UME) 24*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 4*4096kB (UM) = 89748kB [ 425.545394][T12460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.545410][T12460] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 425.545425][T12460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.545442][T12460] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 425.545456][T12460] 42236 total pagecache pages [ 425.545463][T12460] 1000 pages in swap cache [ 425.545470][T12460] Free swap = 109752kB [ 425.545476][T12460] Total swap = 124996kB [ 425.545482][T12460] 524155 pages RAM [ 425.545487][T12460] 0 pages HighMem/MovableOnly [ 425.545490][T12460] 217486 pages reserved [ 425.545496][T12460] 0 pages cma reserved [ 427.492174][T12480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 428.038290][T12484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.046484][T12484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.029361][T12485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.114160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 431.458467][T12516] Console: switching to colour dummy device 80x25 [ 431.855838][T12522] ublk2: read batch cmd buffer failed [ 431.856566][T12522] ublk2: read batch cmd buffer failed [ 431.931285][T12522] ublk2: read batch cmd buffer failed [ 431.931803][T12522] ublk2: read batch cmd buffer failed [ 432.338899][T12519] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 432.377806][T12519] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 432.381548][T12519] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 432.382042][T12519] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 432.410946][T12519] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 432.503673][T12519] pci 0000:00:01.0: Adding to iommu group 1 [ 432.556860][T12519] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 432.556882][T12519] pci 0000:00:01.0: vgaarb: bridge control possible [ 432.556893][T12519] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 432.592106][T12519] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 432.592425][T12519] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 432.627353][T12519] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 432.700017][T12519] [drm] Found bochs VGA, ID 0xb0c5. [ 432.700064][T12519] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 432.797472][T12519] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 433.495704][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.496184][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.496708][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.503971][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.505409][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.506454][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.507230][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.507936][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.508526][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.509523][T12534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 433.672758][T12519] Console: switching to colour frame buffer device 160x50 [ 433.719946][T12519] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 434.838488][T12541] null_blk: nullb1: using native zone append [ 435.148882][T12541] null_blk: disk nullb1 created [ 436.305392][T12563] gadgetfs: bound to dummy_udc driver [ 436.379193][T12570] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 436.386468][T12563] IPVS: stopping master sync thread 12570 ... [ 437.729872][T12582] program syz.4.1277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.617742][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.887539][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 439.887551][ T43] audit: type=1326 audit(1792957527.917:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.890395][ T43] audit: type=1326 audit(1792957527.917:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.893501][ T43] audit: type=1326 audit(1792957527.917:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.897336][ T43] audit: type=1326 audit(1792957527.927:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.897444][ T43] audit: type=1326 audit(1792957527.927:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.897613][ T43] audit: type=1326 audit(1792957527.927:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.897659][ T43] audit: type=1326 audit(1792957527.927:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.900302][ T43] audit: type=1326 audit(1792957527.927:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.900327][ T43] audit: type=1326 audit(1792957527.927:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 439.900451][ T43] audit: type=1326 audit(1792957527.927:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.1.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7f25fbc code=0x7ffc0000 [ 440.245206][T12641] bridge0: port 3(netdevsim0) entered disabled state [ 440.245388][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.245459][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.095156][T12656] comedi comedi3: board detection failed [ 443.165747][ T5934] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 443.374215][ T5934] usb 9-1: Using ep0 maxpacket: 8 [ 443.876340][T12689] batman_adv: batadv0: Adding interface: veth0 [ 443.876456][T12689] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.876475][T12689] batman_adv: batadv0: Interface activated: veth0 [ 443.899972][T12689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.899990][T12689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.902838][ T5934] usb 9-1: unable to get BOS descriptor or descriptor too short [ 443.902863][ T5934] usb 9-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 443.904190][ T5934] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 443.904207][ T5934] usb 9-1: can't read configurations, error -71 [ 443.906741][T12689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.906758][T12689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.932005][T12689] batman_adv: batadv0: Interface deactivated: veth0 [ 443.932019][T12689] batman_adv: batadv0: Removing interface: veth0 [ 444.250925][T12695] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 444.272237][T12695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.291390][T12695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 444.296219][T12698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1295'. [ 444.305587][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 444.437763][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 445.420637][T12720] syz.2.1303: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.420703][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.2.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.420729][T12720] Tainted: [L]=SOFTLOCKUP [ 445.420737][T12720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.420749][T12720] Call Trace: [ 445.420757][T12720] [ 445.420765][T12720] dump_stack_lvl+0x100/0x190 [ 445.420938][T12720] ? do_replace+0x1c6/0x490 [ 445.421051][T12720] warn_alloc.cold+0x9e/0xb2 [ 445.421073][T12720] ? __pfx_warn_alloc+0x10/0x10 [ 445.421124][T12720] ? lockdep_hardirqs_on+0x7d/0x110 [ 445.421220][T12720] ? do_replace+0x1c6/0x490 [ 445.421246][T12720] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 445.421304][T12720] ? __lock_acquire+0x5c0/0x1f40 [ 445.421347][T12720] ? do_replace+0x1c6/0x490 [ 445.421375][T12720] ? do_raw_spin_lock+0x128/0x260 [ 445.421397][T12720] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.421425][T12720] ? __lock_acquire+0x5c0/0x1f40 [ 445.421453][T12720] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.421488][T12720] ? do_replace+0x1c6/0x490 [ 445.421515][T12720] __vmalloc_node_noprof+0xad/0xf0 [ 445.421541][T12720] ? do_replace+0x1c6/0x490 [ 445.421570][T12720] __vmalloc_noprof+0xa3/0x120 [ 445.421595][T12720] ? __pfx___vmalloc_noprof+0x10/0x10 [ 445.421628][T12720] do_replace+0x1c6/0x490 [ 445.421654][T12720] ? __pfx_do_replace+0x10/0x10 [ 445.421691][T12720] ? register_lock_class+0x3f/0x7b0 [ 445.421712][T12720] compat_do_replace+0x589/0x7a0 [ 445.421744][T12720] ? __pfx_compat_do_replace+0x10/0x10 [ 445.421776][T12720] ? hook_capable+0x1bc/0x500 [ 445.421844][T12720] ? bpf_lsm_capable+0x9/0x10 [ 445.421886][T12720] ? security_capable+0x80/0x260 [ 445.421921][T12720] do_ebt_set_ctl+0x3f4/0x4a0 [ 445.421950][T12720] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 445.421982][T12720] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 445.422060][T12720] ? nf_sockopt_find.isra.0+0x222/0x290 [ 445.422093][T12720] nf_setsockopt+0x8d/0xf0 [ 445.422123][T12720] ip_setsockopt+0xcb/0xf0 [ 445.422148][T12720] tcp_setsockopt+0xa7/0x100 [ 445.422178][T12720] smc_setsockopt+0x1b6/0xad0 [ 445.422215][T12720] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 445.422254][T12720] ? __pfx_smc_setsockopt+0x10/0x10 [ 445.422284][T12720] ? aa_sock_opt_perm+0x114/0x1e0 [ 445.422308][T12720] ? __pfx_smc_setsockopt+0x10/0x10 [ 445.422337][T12720] do_sock_setsockopt+0xf3/0x1d0 [ 445.422361][T12720] __sys_setsockopt+0x119/0x190 [ 445.422385][T12720] __ia32_sys_setsockopt+0xbc/0x160 [ 445.422403][T12720] ? __might_fault+0x111/0x140 [ 445.422422][T12720] __do_fast_syscall_32+0x14b/0x8c0 [ 445.422445][T12720] do_fast_syscall_32+0x32/0x70 [ 445.422463][T12720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.422494][T12720] RIP: 0023:0xf7fa3fbc [ 445.422512][T12720] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 445.422529][T12720] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 445.422546][T12720] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 445.422559][T12720] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 445.422570][T12720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.422580][T12720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.422592][T12720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.422635][T12720] [ 445.422671][T12720] Mem-Info: [ 445.422682][T12720] active_anon:1888 inactive_anon:4881 isolated_anon:0 [ 445.422682][T12720] active_file:8575 inactive_file:14831 isolated_file:0 [ 445.422682][T12720] unevictable:2024 dirty:596 writeback:0 [ 445.422682][T12720] slab_reclaimable:6500 slab_unreclaimable:64256 [ 445.422682][T12720] mapped:23337 shmem:3744 pagetables:1487 [ 445.422682][T12720] sec_pagetables:311 bounce:0 [ 445.422682][T12720] kernel_misc_reclaimable:0 [ 445.422682][T12720] free:35854 free_pcp:16511 free_cma:0 [ 445.422720][T12720] Node 0 active_anon:40kB inactive_anon:224kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1528kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.422771][T12720] Node 1 active_anon:7512kB inactive_anon:19300kB active_file:34152kB inactive_file:59324kB unevictable:8096kB isolated(anon):0kB isolated(file):0kB mapped:93324kB dirty:2376kB writeback:0kB shmem:14976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7456kB pagetables:4420kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 445.460954][T12720] Node 0 DMA free:2616kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.461015][T12720] lowmem_reserve[]: 0 256 256 256 256 [ 445.461047][T12720] Node 0 DMA32 free:15736kB boost:2048kB min:13604kB low:16492kB high:19380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40kB inactive_anon:224kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB zspages:68kB present:1032196kB managed:263108kB mlocked:0kB bounce:0kB free_pcp:6520kB local_pcp:48kB free_cma:0kB [ 445.461091][T12720] lowmem_reserve[]: 0 0 0 0 0 [ 445.461120][T12720] Node 1 DMA32 free:125164kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:7620kB inactive_anon:19300kB active_file:34152kB inactive_file:59324kB unevictable:8096kB writepending:2380kB zspages:2396kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:60136kB local_pcp:13516kB free_cma:0kB [ 445.461168][T12720] lowmem_reserve[]: 0 0 0 0 0 [ 445.461198][T12720] Node 0 DMA: 58*4kB (UE) 18*8kB (UE) 8*16kB (UE) 40*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2616kB [ 445.461343][T12720] Node 0 DMA32: 178*4kB (UME) 72*8kB (UME) 45*16kB (UME) 151*32kB (UME) 57*64kB (UME) 11*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 15736kB [ 445.461489][T12720] Node 1 DMA32: 2555*4kB (UME) 1134*8kB (UME) 432*16kB (UME) 216*32kB (UME) 218*64kB (UME) 111*128kB (UME) 52*256kB (UME) 19*512kB (UM) 14*1024kB (UM) 9*2048kB (UM) 2*4096kB (U) = 125276kB [ 445.461632][T12720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 445.461646][T12720] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 445.461657][T12720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 445.461668][T12720] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 445.461679][T12720] 28180 total pagecache pages [ 445.461685][T12720] 1033 pages in swap cache [ 445.461690][T12720] Free swap = 109752kB [ 445.461698][T12720] Total swap = 124996kB [ 445.461704][T12720] 524155 pages RAM [ 445.461709][T12720] 0 pages HighMem/MovableOnly [ 445.461714][T12720] 217486 pages reserved [ 445.461722][T12720] 0 pages cma reserved [ 446.122558][ T5153] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 446.123800][ T5153] Bluetooth: hci0: unexpected event for opcode 0x204b [ 446.974224][ T858] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 447.125479][ T858] usb 9-1: Using ep0 maxpacket: 8 [ 447.130292][ T858] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 447.131160][ T858] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 447.131173][ T858] usb 9-1: config 0 has no interface number 0 [ 447.131190][ T858] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.131202][ T858] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 447.131214][ T858] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.131226][ T858] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 447.131245][ T858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.147651][ T858] usb 9-1: config 0 descriptor?? [ 447.163756][ T858] ldusb 9-1:0.55: LD USB Device #2 now attached to major 180 minor 2 [ 447.418947][T12754] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.895595][ T858] usb 9-1: USB disconnect, device number 6 [ 447.897901][ T858] ldusb 9-1:0.55: LD USB Device #2 now disconnected [ 448.175931][T12782] ublk3: read batch cmd buffer failed [ 448.176404][T12782] ublk3: read batch cmd buffer failed [ 448.231378][T12782] ublk3: read batch cmd buffer failed [ 448.231653][T12782] ublk3: read batch cmd buffer failed [ 450.176476][ T5153] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 450.176549][ T5153] Bluetooth: hci0: Injecting HCI hardware error event [ 450.180851][ T67] Bluetooth: hci0: hardware error 0x00 [ 451.845379][ T5198] udevd[5198]: worker [11912] /devices/platform/dummy_hcd.2/usb7/7-1 is taking a long time [ 451.845416][ T5198] udevd[5198]: worker [11640] /devices/platform/dummy_hcd.0/usb5/5-1 is taking a long time [ 451.946388][T12842] Console: switching to colour dummy device 80x25 [ 452.574298][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 455.409349][T12890] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 455.433412][T12890] kvm: pic: level sensitive irq not supported [ 455.435653][T12890] kvm: pic: non byte read [ 455.438336][T12890] kvm: pic: level sensitive irq not supported [ 455.439110][T12890] kvm: pic: non byte read [ 455.442057][T12890] kvm: pic: level sensitive irq not supported [ 455.442369][T12890] kvm: pic: non byte read [ 455.445703][T12890] kvm: pic: level sensitive irq not supported [ 455.446917][T12890] kvm: pic: non byte read [ 455.454499][T12890] kvm: pic: level sensitive irq not supported [ 455.455486][T12890] kvm: pic: non byte read [ 455.460711][T12890] kvm: pic: level sensitive irq not supported [ 455.461568][T12890] kvm: pic: non byte read [ 455.463916][T12890] kvm: pic: level sensitive irq not supported [ 455.464673][T12890] kvm: pic: non byte read [ 455.466904][T12890] kvm: pic: level sensitive irq not supported [ 455.467304][T12890] kvm: pic: non byte read [ 455.472579][T12890] kvm: pic: level sensitive irq not supported [ 455.474760][T12890] kvm: pic: non byte read [ 458.085618][T12917] bridge0: port 3(syz_tun) entered blocking state [ 458.085704][T12917] bridge0: port 3(syz_tun) entered disabled state [ 458.086593][T12917] syz_tun: entered promiscuous mode [ 458.088233][T12917] bridge0: port 3(syz_tun) entered blocking state [ 458.088309][T12917] bridge0: port 3(syz_tun) entered forwarding state [ 458.188176][T12917] bridge0: port 3(syz_tun) entered disabled state [ 458.188277][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.188398][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.203815][T12921] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 458.203854][T12921] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 458.204286][T12921] vhci_hcd vhci_hcd.0: Device attached [ 458.486677][T11648] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 458.555519][T11648] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 459.112761][T12924] vhci_hcd: connection reset by peer [ 459.189329][ T13] vhci_hcd vhci_hcd.1: stop threads [ 459.189424][ T13] vhci_hcd vhci_hcd.1: release socket [ 459.192722][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 459.893645][ T3411] libceph: connect (1)[c::]:6789 error -101 [ 459.894370][ T3411] libceph: mon0 (1)[c::]:6789 connect error [ 460.172430][ T3411] libceph: connect (1)[c::]:6789 error -101 [ 460.174409][ T3411] libceph: mon0 (1)[c::]:6789 connect error [ 460.607627][T12949] ceph: No mds server is up or the cluster is laggy [ 460.728080][T12955] dvmrp0: entered allmulticast mode [ 463.684196][T11648] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 465.229239][T13026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.454407][T13026] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 465.553037][T13023] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1351'. [ 465.553050][T13023] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1351'. [ 465.553057][T13023] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 466.543118][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 466.649449][T13049] vlan2: entered allmulticast mode [ 466.649470][T13049] bridge1: entered allmulticast mode [ 466.695590][T13043] bridge1: port 1(erspan0) entered blocking state [ 466.695920][T13043] bridge1: port 1(erspan0) entered disabled state [ 466.695991][T13043] erspan0: entered allmulticast mode [ 466.697005][T13043] erspan0: entered promiscuous mode [ 466.697629][T13043] bridge1: port 1(erspan0) entered blocking state [ 466.697716][T13043] bridge1: port 1(erspan0) entered forwarding state [ 466.743516][T13051] netlink: 'syz.0.1355': attribute type 5 has an invalid length. [ 466.814244][T12939] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.814293][T12939] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.814331][T12939] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.814360][T12939] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.817222][T13053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1356'. [ 466.928975][T12819] IPVS: starting estimator thread 0... [ 467.024218][T13054] IPVS: using max 43 ests per chain, 103200 per kthread [ 467.207137][T13057] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 467.230794][T13057] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 467.231006][T13057] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 467.231314][T13057] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 467.232550][T13057] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 467.283814][T13057] pci 0000:00:01.0: Adding to iommu group 1 [ 467.325260][T13057] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 467.325274][T13057] pci 0000:00:01.0: vgaarb: bridge control possible [ 467.325282][T13057] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 467.345538][T13057] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 467.345741][T13057] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 467.356861][T13057] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 467.379902][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 467.402270][T13057] [drm] Found bochs VGA, ID 0xb0c5. [ 467.402283][T13057] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 467.468503][T13057] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 467.491282][T13066] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1359'. [ 467.791180][T13057] Console: switching to colour frame buffer device 160x50 [ 467.821561][T13057] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 467.878294][T13078] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.258613][T13088] syz.0.1366: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.258668][T13088] CPU: 2 UID: 0 PID: 13088 Comm: syz.0.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.258687][T13088] Tainted: [L]=SOFTLOCKUP [ 469.258692][T13088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.258699][T13088] Call Trace: [ 469.258705][T13088] [ 469.258711][T13088] dump_stack_lvl+0x100/0x190 [ 469.258877][T13088] ? do_replace+0x1c6/0x490 [ 469.258971][T13088] warn_alloc.cold+0x9e/0xb2 [ 469.258988][T13088] ? __pfx_warn_alloc+0x10/0x10 [ 469.259028][T13088] ? check_buffer+0x13f/0x820 [ 469.259056][T13088] ? __pfx_trace_clock_local+0x10/0x10 [ 469.259074][T13088] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 469.259100][T13088] ? do_replace+0x1c6/0x490 [ 469.259119][T13088] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 469.259144][T13088] ? __lock_acquire+0x5c0/0x1f40 [ 469.259176][T13088] ? do_replace+0x1c6/0x490 [ 469.259198][T13088] ? do_raw_spin_lock+0x128/0x260 [ 469.259220][T13088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.259248][T13088] ? __lock_acquire+0x5c0/0x1f40 [ 469.259277][T13088] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 469.259370][T13088] ? do_replace+0x1c6/0x490 [ 469.259398][T13088] __vmalloc_node_noprof+0xad/0xf0 [ 469.259424][T13088] ? do_replace+0x1c6/0x490 [ 469.259456][T13088] __vmalloc_noprof+0xa3/0x120 [ 469.259483][T13088] ? __pfx___vmalloc_noprof+0x10/0x10 [ 469.259520][T13088] do_replace+0x1c6/0x490 [ 469.259549][T13088] ? __pfx_do_replace+0x10/0x10 [ 469.259583][T13088] ? register_lock_class+0x3f/0x7b0 [ 469.259603][T13088] compat_do_replace+0x589/0x7a0 [ 469.259632][T13088] ? __pfx_compat_do_replace+0x10/0x10 [ 469.259664][T13088] ? hook_capable+0x1bc/0x500 [ 469.259727][T13088] ? bpf_lsm_capable+0x9/0x10 [ 469.259769][T13088] ? security_capable+0x80/0x260 [ 469.259803][T13088] do_ebt_set_ctl+0x3f4/0x4a0 [ 469.259835][T13088] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 469.259865][T13088] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 469.259936][T13088] ? nf_sockopt_find.isra.0+0x222/0x290 [ 469.259965][T13088] nf_setsockopt+0x8d/0xf0 [ 469.259993][T13088] ip_setsockopt+0xcb/0xf0 [ 469.260016][T13088] tcp_setsockopt+0xa7/0x100 [ 469.260044][T13088] smc_setsockopt+0x1b6/0xad0 [ 469.260080][T13088] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 469.260118][T13088] ? __pfx_smc_setsockopt+0x10/0x10 [ 469.260145][T13088] ? aa_sock_opt_perm+0x114/0x1e0 [ 469.260161][T13088] ? __pfx_smc_setsockopt+0x10/0x10 [ 469.260181][T13088] do_sock_setsockopt+0xf3/0x1d0 [ 469.260201][T13088] __sys_setsockopt+0x119/0x190 [ 469.260219][T13088] __ia32_sys_setsockopt+0xbc/0x160 [ 469.260234][T13088] ? __might_fault+0x111/0x140 [ 469.260248][T13088] __do_fast_syscall_32+0x14b/0x8c0 [ 469.260265][T13088] do_fast_syscall_32+0x32/0x70 [ 469.260280][T13088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.260298][T13088] RIP: 0023:0xf7f38fbc [ 469.260310][T13088] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 469.260324][T13088] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 469.260341][T13088] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 469.260350][T13088] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 469.260365][T13088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.260375][T13088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.260384][T13088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.260407][T13088] [ 469.271861][T13088] Mem-Info: [ 469.273117][T13088] active_anon:5372 inactive_anon:4843 isolated_anon:0 [ 469.273117][T13088] active_file:8606 inactive_file:15537 isolated_file:0 [ 469.273117][T13088] unevictable:2024 dirty:591 writeback:0 [ 469.273117][T13088] slab_reclaimable:6550 slab_unreclaimable:64459 [ 469.273117][T13088] mapped:28289 shmem:6626 pagetables:1506 [ 469.273117][T13088] sec_pagetables:311 bounce:0 [ 469.273117][T13088] kernel_misc_reclaimable:0 [ 469.273117][T13088] free:36363 free_pcp:11133 free_cma:0 [ 469.273150][T13088] Node 0 active_anon:188kB inactive_anon:76kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1528kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 469.273201][T13088] Node 1 active_anon:21300kB inactive_anon:19296kB active_file:34276kB inactive_file:62148kB unevictable:8096kB isolated(anon):0kB isolated(file):0kB mapped:113132kB dirty:2364kB writeback:0kB shmem:26504kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:0kB kernel_stack:7924kB pagetables:4496kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 469.273231][T13088] Node 0 DMA free:2616kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 469.273264][T13088] lowmem_reserve[]: 0 256 256 256 256 [ 469.273283][T13088] Node 0 DMA32 free:15112kB boost:2048kB min:13604kB low:16492kB high:19380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:188kB inactive_anon:76kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:68kB present:1032196kB managed:263108kB mlocked:0kB bounce:0kB free_pcp:9144kB local_pcp:3580kB free_cma:0kB [ 469.273313][T13088] lowmem_reserve[]: 0 0 0 0 0 [ 469.273329][T13088] Node 1 DMA32 free:127724kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21300kB inactive_anon:19296kB active_file:34276kB inactive_file:62148kB unevictable:8096kB writepending:2364kB zspages:2396kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:35384kB local_pcp:16188kB free_cma:0kB [ 469.273359][T13088] lowmem_reserve[]: 0 0 0 0 0 [ 469.273376][T13088] Node 0 DMA: 58*4kB (UE) 18*8kB (UE) 8*16kB (UE) 40*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2616kB [ 469.273446][T13088] Node 0 DMA32: 162*4kB (UME) 62*8kB (UME) 43*16kB (UME) 141*32kB (UME) 55*64kB (UME) 11*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 15112kB [ 469.273521][T13088] Node 1 DMA32: 110*4kB (UME) 974*8kB (UME) 302*16kB (UME) 113*32kB (UME) 203*64kB (UME) 108*128kB (UME) 57*256kB (UME) 28*512kB (UM) 14*1024kB (UM) 12*2048kB (UM) 4*4096kB (UM) = 127720kB [ 469.273602][T13088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.273610][T13088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 469.273618][T13088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.273629][T13088] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 469.273638][T13088] 31801 total pagecache pages [ 469.273643][T13088] 1034 pages in swap cache [ 469.273647][T13088] Free swap = 109752kB [ 469.273650][T13088] Total swap = 124996kB [ 469.273654][T13088] 524155 pages RAM [ 469.273658][T13088] 0 pages HighMem/MovableOnly [ 469.273661][T13088] 217486 pages reserved [ 469.273664][T13088] 0 pages cma reserved [ 469.785973][T13096] program syz.2.1368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.274300][T11985] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 470.424147][T11985] usb 9-1: Using ep0 maxpacket: 8 [ 470.424652][T11985] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 470.425579][T11985] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 470.425592][T11985] usb 9-1: config 0 has no interface number 0 [ 470.425609][T11985] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.425620][T11985] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 470.425632][T11985] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.425645][T11985] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 470.425664][T11985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.427105][T11985] usb 9-1: config 0 descriptor?? [ 470.430486][T11985] ldusb 9-1:0.55: LD USB Device #2 now attached to major 180 minor 2 [ 470.644268][T13100] rxe_eth0 speed is unknown, defaulting to 1000 [ 471.311707][T11985] usb 9-1: USB disconnect, device number 7 [ 471.315635][T11985] ldusb 9-1:0.55: LD USB Device #2 now disconnected [ 474.695744][T13182] bridge0: port 3(netdevsim0) entered blocking state [ 474.695839][T13182] bridge0: port 3(netdevsim0) entered listening state [ 474.696037][T13182] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.696170][T13182] bridge0: port 2(bridge_slave_1) entered listening state [ 474.696353][T13182] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.696451][T13182] bridge0: port 1(bridge_slave_0) entered listening state [ 474.778147][T13182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.057508][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 480.314155][T13283] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 480.335654][T13283] kvm: pic: level sensitive irq not supported [ 480.336691][T13283] kvm: pic: non byte read [ 480.350347][T13283] kvm: pic: level sensitive irq not supported [ 480.350975][T13283] kvm: pic: non byte read [ 480.352664][T13283] kvm: pic: level sensitive irq not supported [ 480.362875][T13283] kvm: pic: non byte read [ 480.377265][T13283] kvm: pic: level sensitive irq not supported [ 480.381895][T13283] kvm: pic: non byte read [ 480.392739][T13283] kvm: pic: level sensitive irq not supported [ 480.393531][T13283] kvm: pic: non byte read [ 480.415672][T13283] kvm: pic: level sensitive irq not supported [ 480.416559][T13283] kvm: pic: non byte read [ 480.422057][T13283] kvm: pic: level sensitive irq not supported [ 480.423307][T13283] kvm: pic: non byte read [ 480.440460][T13283] kvm: pic: level sensitive irq not supported [ 480.440966][T13283] kvm: pic: non byte read [ 480.451233][T13283] kvm: pic: level sensitive irq not supported [ 480.451773][T13283] kvm: pic: non byte read [ 480.694151][T11697] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 480.848291][T11697] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 480.860907][T11697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.860933][T11697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.868551][T11697] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 480.868676][T11697] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 480.868705][T11697] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 480.869318][T11697] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 480.869377][T11697] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 480.879715][T11697] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 480.883563][T11697] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 480.883596][T11697] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 480.889735][T11697] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 480.957250][ T1128] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 480.957308][ T1128] ata1.00: irq_stat 0x40000000 [ 480.957355][ T1128] ata1.00: failed command: READ DMA EXT [ 480.957523][ T1128] ata1.00: cmd 25/00:60:0e:36:01/00:05:00:00:00/e0 tag 14 dma 704512 in [ 480.957523][ T1128] res 41/04:60:0e:36:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 480.958253][ T1128] ata1.00: status: { DRDY ERR } [ 480.958536][ T1128] ata1.00: error: { ABRT } [ 480.960884][ T1128] ata1.00: configured for UDMA/100 [ 480.961776][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 480.962521][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 480.962557][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 480.962871][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 36 0e 00 05 60 00 [ 480.962922][ T1128] I/O error, dev sda, sector 79374 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 481.010202][ T1128] ata1: EH complete [ 483.214211][ T5878] usb 5-1: Failed to early initialize device [ 483.234340][ T5878] usb 5-1: USB disconnect, device number 9 [ 483.495491][ T50] usb 6-1: USB disconnect, device number 11 [ 483.501428][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 483.509973][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 483.510278][ T50] keyspan 6-1:1.0: device disconnected [ 483.797171][T13332] Console: switching to colour dummy device 80x25 [ 486.179845][ T24] usb 7-1: Failed to early initialize device [ 488.039210][ T24] usb 7-1: USB disconnect, device number 10 [ 489.875909][T13392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 491.158982][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 493.434290][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 493.584413][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 493.615502][ T24] usb 7-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 493.678176][T13449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1432'. [ 493.937623][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.937640][ T24] usb 7-1: Product: syz [ 493.937648][ T24] usb 7-1: Manufacturer: syz [ 493.937655][ T24] usb 7-1: SerialNumber: syz [ 495.726530][ T24] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 495.899692][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 495.899835][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 495.899855][ T24] usb 7-1: media controller created [ 495.907380][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.915593][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 495.932043][ T24] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 495.933202][ T24] usb 7-1: USB disconnect, device number 11 [ 496.331362][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1434'. [ 496.518568][T13463] FAULT_INJECTION: forcing a failure. [ 496.518568][T13463] name failslab, interval 1, probability 0, space 0, times 0 [ 496.518604][T13463] CPU: 2 UID: 0 PID: 13463 Comm: syz.2.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.518633][T13463] Tainted: [L]=SOFTLOCKUP [ 496.518641][T13463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.518651][T13463] Call Trace: [ 496.518658][T13463] [ 496.518665][T13463] dump_stack_lvl+0x100/0x190 [ 496.518697][T13463] should_fail_ex.cold+0x5/0xa [ 496.518723][T13463] should_failslab+0xc2/0x120 [ 496.518768][T13463] kmem_cache_alloc_noprof+0x92/0x6a0 [ 496.518794][T13463] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 496.518862][T13463] ? acpi_ut_create_update_state+0x72/0x130 [ 496.518896][T13463] acpi_ut_create_update_state+0x72/0x130 [ 496.518920][T13463] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 496.518944][T13463] acpi_ut_update_object_reference+0x32f/0x800 [ 496.518974][T13463] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 496.519018][T13463] ? __pfx_acpi_ut_trace+0x10/0x10 [ 496.519046][T13463] ? __pfx_acpi_ut_trace+0x10/0x10 [ 496.519069][T13463] ? acpi_ut_status_exit+0x111/0x1c0 [ 496.519101][T13463] acpi_ut_add_reference+0x80/0x170 [ 496.519127][T13463] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 496.519153][T13463] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 496.519175][T13463] ? acpi_ds_create_operand+0x267/0xc20 [ 496.519201][T13463] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 496.519222][T13463] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 496.519236][T13463] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 496.519259][T13463] ? __asan_memset+0x23/0x50 [ 496.519281][T13463] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 496.519317][T13463] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 496.519344][T13463] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 496.519374][T13463] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 496.519397][T13463] ? acpi_ut_trace_ptr+0x161/0x2a0 [ 496.519427][T13463] acpi_ds_exec_end_op+0xb78/0x1e60 [ 496.519455][T13463] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 496.519476][T13463] acpi_ps_parse_loop+0x5e1/0x26e0 [ 496.519508][T13463] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 496.519528][T13463] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 496.519547][T13463] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 496.519574][T13463] ? acpi_ut_create_thread_state+0x6d/0x170 [ 496.519603][T13463] acpi_ps_parse_aml+0x81e/0x1120 [ 496.519633][T13463] acpi_ps_execute_method+0x5c4/0xe90 [ 496.519662][T13463] acpi_ns_evaluate+0x640/0x1670 [ 496.519695][T13463] acpi_ut_evaluate_object+0xf7/0x610 [ 496.519716][T13463] acpi_rs_get_prt_method_data+0xa0/0x150 [ 496.519738][T13463] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 496.519754][T13463] ? acpi_ut_status_exit+0x111/0x1c0 [ 496.519784][T13463] ? acpi_rs_validate_parameters+0x104/0x210 [ 496.519806][T13463] acpi_get_irq_routing_table+0xb8/0x140 [ 496.519828][T13463] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 496.519849][T13463] ? irqentry_exit+0x202/0xab0 [ 496.519869][T13463] ? lockdep_hardirqs_on+0x7d/0x110 [ 496.519900][T13463] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 496.519929][T13463] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 496.519959][T13463] acpi_pci_irq_lookup+0x8e/0x6b0 [ 496.519981][T13463] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 496.520009][T13463] acpi_pci_irq_disable+0x1a8/0x360 [ 496.520030][T13463] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 496.520047][T13463] pcibios_disable_device+0x89/0xb0 [ 496.520075][T13463] do_pci_disable_device+0x9f/0x100 [ 496.520123][T13463] ? __pfx_do_pci_disable_device+0x10/0x10 [ 496.520158][T13463] ? pci_release_region.part.0+0x15b/0x2e0 [ 496.520187][T13463] pci_disable_device+0x130/0x270 [ 496.520216][T13463] virtio_pci_remove+0xcf/0x110 [ 496.520248][T13463] pci_device_remove+0xb2/0x1d0 [ 496.520272][T13463] ? __pfx_pci_device_remove+0x10/0x10 [ 496.520308][T13463] device_remove+0xcb/0x180 [ 496.520354][T13463] device_release_driver_internal+0x44e/0x620 [ 496.520386][T13463] pci_stop_bus_device+0x120/0x160 [ 496.520414][T13463] pci_stop_and_remove_bus_device+0x58/0xa0 [ 496.520443][T13463] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 496.520471][T13463] remove_store+0x123/0x140 [ 496.520490][T13463] ? __pfx_remove_store+0x10/0x10 [ 496.520511][T13463] ? find_held_lock+0x2b/0x80 [ 496.520530][T13463] ? sysfs_file_kobj+0xe4/0x290 [ 496.520596][T13463] ? sysfs_file_kobj+0xe4/0x290 [ 496.520627][T13463] ? __pfx_remove_store+0x10/0x10 [ 496.520645][T13463] dev_attr_store+0x58/0x80 [ 496.520673][T13463] ? __pfx_dev_attr_store+0x10/0x10 [ 496.520702][T13463] sysfs_kf_write+0xf2/0x150 [ 496.520732][T13463] kernfs_fop_write_iter+0x3e0/0x5f0 [ 496.520752][T13463] ? __pfx_sysfs_kf_write+0x10/0x10 [ 496.520781][T13463] vfs_write+0x6af/0x1050 [ 496.520817][T13463] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 496.520845][T13463] ? __pfx_vfs_write+0x10/0x10 [ 496.520865][T13463] ? find_held_lock+0x2b/0x80 [ 496.520905][T13463] ksys_write+0x12a/0x250 [ 496.520929][T13463] ? __pfx_ksys_write+0x10/0x10 [ 496.520958][T13463] __do_fast_syscall_32+0x14b/0x8c0 [ 496.520983][T13463] do_fast_syscall_32+0x32/0x70 [ 496.520999][T13463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.521023][T13463] RIP: 0023:0xf7fa3fbc [ 496.521060][T13463] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 496.521078][T13463] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 496.521099][T13463] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000ac0 [ 496.521108][T13463] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.521120][T13463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.521129][T13463] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 496.521141][T13463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.521167][T13463] [ 496.521391][T13463] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 497.557384][T13488] netlink: 'syz.2.1438': attribute type 5 has an invalid length. [ 498.190948][T13511] FAULT_INJECTION: forcing a failure. [ 498.190948][T13511] name failslab, interval 1, probability 0, space 0, times 0 [ 498.190971][T13511] CPU: 2 UID: 0 PID: 13511 Comm: syz.4.1440 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.190986][T13511] Tainted: [L]=SOFTLOCKUP [ 498.190989][T13511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.190995][T13511] Call Trace: [ 498.191000][T13511] [ 498.191004][T13511] dump_stack_lvl+0x100/0x190 [ 498.191023][T13511] should_fail_ex.cold+0x5/0xa [ 498.191039][T13511] should_failslab+0xc2/0x120 [ 498.191056][T13511] __kmalloc_noprof+0xfc/0x840 [ 498.191087][T13511] ? ___neigh_create+0x1499/0x2870 [ 498.191108][T13511] ___neigh_create+0x1499/0x2870 [ 498.191124][T13511] ? neigh_lookup+0x405/0x6d0 [ 498.191144][T13511] ? __pfx_neigh_lookup+0x10/0x10 [ 498.191166][T13511] ? __pfx____neigh_create+0x10/0x10 [ 498.191185][T13511] arp_ioctl+0xc6f/0xe40 [ 498.191202][T13511] ? __pfx_arp_ioctl+0x10/0x10 [ 498.191226][T13511] inet_ioctl+0x1a4/0x3f0 [ 498.191239][T13511] ? __pfx_inet_ioctl+0x10/0x10 [ 498.191254][T13511] ? kasan_quarantine_put+0x104/0x240 [ 498.191275][T13511] ? tomoyo_path_number_perm+0x188/0x580 [ 498.191295][T13511] sock_do_ioctl+0x118/0x280 [ 498.191311][T13511] ? __pfx_sock_do_ioctl+0x10/0x10 [ 498.191328][T13511] ? do_vfs_ioctl+0x226/0x13e0 [ 498.191353][T13511] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 498.191368][T13511] compat_sock_ioctl+0x568/0x760 [ 498.191388][T13511] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 498.191404][T13511] ? hook_file_ioctl_common+0x140/0x440 [ 498.191424][T13511] ? lock_acquire+0x1d1/0x380 [ 498.191441][T13511] ? __might_fault+0xc5/0x140 [ 498.191455][T13511] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 498.191472][T13511] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 498.191487][T13511] __do_fast_syscall_32+0x14b/0x8c0 [ 498.191499][T13511] ? lockdep_hardirqs_on+0x7d/0x110 [ 498.191517][T13511] do_fast_syscall_32+0x32/0x70 [ 498.191529][T13511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.191543][T13511] RIP: 0023:0xf746efbc [ 498.191552][T13511] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 498.191562][T13511] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 498.191573][T13511] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008955 [ 498.191580][T13511] RDX: 00000000800011c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.191586][T13511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.191593][T13511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 498.191599][T13511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.191613][T13511] [ 498.386254][T13522] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.418917][T13522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1441'. [ 498.418964][T13522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1441'. [ 498.419004][T13522] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 499.994860][T13547] syzkaller0: entered promiscuous mode [ 499.994883][T13547] syzkaller0: entered allmulticast mode [ 500.002193][T13547] tipc: Enabled bearer , priority 0 [ 500.018873][T13547] tipc: Resetting bearer [ 500.033418][T13546] tipc: Resetting bearer [ 500.055626][T13546] tipc: Disabling bearer [ 501.058076][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.511137][T13569] capability: warning: `syz.0.1449' uses 32-bit capabilities (legacy support in use) [ 501.520117][T13569] overlayfs: upper fs does not support file handles, falling back to index=off. [ 501.634813][T13569] overlayfs: failed lookup in lower (newroot/358, name='file0', err=-40): overlapping layers [ 502.689555][T13581] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 502.710322][T13581] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 502.710566][T13581] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 502.711205][T13581] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 502.715399][T13581] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 502.774657][T13581] pci 0000:00:01.0: Adding to iommu group 1 [ 502.794741][T13581] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 502.794756][T13581] pci 0000:00:01.0: vgaarb: bridge control possible [ 502.794763][T13581] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 502.801935][T13581] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 502.821590][T13581] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 502.821693][T13581] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 502.822567][T13581] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 502.886672][T13581] pci 0000:00:05.0: Adding to iommu group 5 [ 502.910547][T13581] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 502.911042][T13581] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 502.920090][T13581] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 502.920424][T13581] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 502.926773][T13581] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 502.939061][T13581] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 503.354120][T13581] [drm] Found bochs VGA, ID 0xb0c5. [ 503.354133][T13581] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 503.744204][T13581] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 504.837790][T13581] Console: switching to colour frame buffer device 160x50 [ 504.865879][T13581] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 504.874853][T13581] ================================================================== [ 504.874899][T13581] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 504.875075][T13581] Read of size 1 at addr ffff88802292a480 by task syz.2.1451/13581 [ 504.875091][T13581] [ 504.875111][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.2.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.875137][T13581] Tainted: [L]=SOFTLOCKUP [ 504.875144][T13581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.875155][T13581] Call Trace: [ 504.875194][T13581] [ 504.875201][T13581] dump_stack_lvl+0x100/0x190 [ 504.875251][T13581] print_report+0x13d/0x4b0 [ 504.875279][T13581] ? __virt_addr_valid+0x239/0x430 [ 504.875309][T13581] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 504.875328][T13581] kasan_report+0xdf/0x1c0 [ 504.875366][T13581] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 504.875388][T13581] acpi_ns_get_attached_object+0x148/0x1b0 [ 504.875407][T13581] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 504.875426][T13581] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 504.875452][T13581] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 504.875473][T13581] ? acpi_ds_create_operand+0x267/0xc20 [ 504.875497][T13581] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 504.875516][T13581] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 504.875534][T13581] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 504.875560][T13581] ? __asan_memset+0x23/0x50 [ 504.875580][T13581] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 504.875610][T13581] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 504.875640][T13581] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 504.875665][T13581] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 504.875690][T13581] ? acpi_ut_trace_ptr+0x161/0x2a0 [ 504.875731][T13581] acpi_ds_exec_end_op+0xb78/0x1e60 [ 504.875758][T13581] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 504.875780][T13581] acpi_ps_parse_loop+0x5e1/0x26e0 [ 504.875809][T13581] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 504.875833][T13581] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 504.875864][T13581] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 504.875890][T13581] ? acpi_ut_create_thread_state+0x6d/0x170 [ 504.875918][T13581] acpi_ps_parse_aml+0x81e/0x1120 [ 504.875943][T13581] acpi_ps_execute_method+0x5c4/0xe90 [ 504.875972][T13581] acpi_ns_evaluate+0x640/0x1670 [ 504.876002][T13581] acpi_ut_evaluate_object+0xf7/0x610 [ 504.876023][T13581] acpi_rs_get_prt_method_data+0xa0/0x150 [ 504.876041][T13581] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 504.876056][T13581] ? acpi_ut_status_exit+0x111/0x1c0 [ 504.876083][T13581] ? acpi_rs_validate_parameters+0x104/0x210 [ 504.876106][T13581] acpi_get_irq_routing_table+0xb8/0x140 [ 504.876126][T13581] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 504.876146][T13581] ? do_raw_spin_lock+0x128/0x260 [ 504.876178][T13581] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 504.876201][T13581] ? mark_held_locks+0x40/0x70 [ 504.876227][T13581] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 504.876246][T13581] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 504.876349][T13581] ? pci_conf1_read+0x138/0x240 [ 504.876377][T13581] acpi_pci_irq_lookup+0x8e/0x6b0 [ 504.876394][T13581] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 504.876413][T13581] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 504.876474][T13581] ? __driver_probe_device+0x210/0x460 [ 504.876539][T13581] ? __device_attach_driver+0x1df/0x320 [ 504.876561][T13581] ? bus_for_each_drv+0x159/0x1e0 [ 504.876581][T13581] ? __device_attach+0x1e4/0x4d0 [ 504.876605][T13581] acpi_pci_irq_enable+0x1f5/0x6f0 [ 504.876630][T13581] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 504.876649][T13581] ? __pfx_pci_enable_resources+0x10/0x10 [ 504.876673][T13581] ? __pfx___pci_set_power_state+0x10/0x10 [ 504.876704][T13581] pcibios_enable_device+0xb6/0xe0 [ 504.876733][T13581] do_pci_enable_device+0x21f/0x4a0 [ 504.876763][T13581] ? __pfx_do_pci_enable_device+0x10/0x10 [ 504.876791][T13581] ? pci_update_current_state+0x102/0x240 [ 504.876816][T13581] ? __pfx_pci_update_current_state+0x10/0x10 [ 504.876842][T13581] ? ksm_scan_thread+0x3350/0x6f90 [ 504.876865][T13581] ? __kasan_kmalloc+0xaa/0xb0 [ 504.876890][T13581] pci_enable_device_flags+0x27c/0x370 [ 504.876913][T13581] ? __pfx_virtio_pci_probe+0x10/0x10 [ 504.876943][T13581] virtio_pci_probe+0x1d5/0x410 [ 504.876962][T13581] local_pci_probe+0xdd/0x1b0 [ 504.876989][T13581] pci_call_probe+0x176/0x800 [ 504.877033][T13581] ? pci_match_device+0x147/0x7d0 [ 504.877059][T13581] ? __pfx_pci_call_probe+0x10/0x10 [ 504.877090][T13581] ? __pfx_pci_match_device+0x10/0x10 [ 504.877115][T13581] ? pci_find_host_bridge+0x3c/0x80 [ 504.877149][T13581] pci_device_probe+0x25b/0x400 [ 504.877174][T13581] ? __pfx_pci_device_probe+0x10/0x10 [ 504.877203][T13581] ? sysfs_create_link+0x68/0xc0 [ 504.877257][T13581] ? __pfx_pci_device_probe+0x10/0x10 [ 504.877283][T13581] really_probe+0x241/0xa60 [ 504.877308][T13581] __driver_probe_device+0x210/0x460 [ 504.877333][T13581] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 504.877359][T13581] driver_probe_device+0x4a/0x140 [ 504.877382][T13581] __device_attach_driver+0x1df/0x320 [ 504.877409][T13581] ? __pfx___device_attach_driver+0x10/0x10 [ 504.877431][T13581] bus_for_each_drv+0x159/0x1e0 [ 504.877453][T13581] ? __pfx_bus_for_each_drv+0x10/0x10 [ 504.877472][T13581] ? lockdep_hardirqs_on+0x7d/0x110 [ 504.877501][T13581] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 504.877526][T13581] __device_attach+0x1e4/0x4d0 [ 504.877550][T13581] ? __pfx___device_attach+0x10/0x10 [ 504.877575][T13581] ? do_raw_spin_unlock+0x145/0x1e0 [ 504.877599][T13581] device_initial_probe+0xaf/0xd0 [ 504.877629][T13581] pci_bus_add_device+0xc5/0x100 [ 504.877649][T13581] pci_bus_add_devices+0x9a/0x1f0 [ 504.877672][T13581] pci_rescan_bus+0x2a/0x40 [ 504.877697][T13581] rescan_store+0xfb/0x130 [ 504.877722][T13581] ? __pfx_rescan_store+0x10/0x10 [ 504.877746][T13581] ? sysfs_file_kobj+0xe4/0x290 [ 504.877775][T13581] ? __pfx_rescan_store+0x10/0x10 [ 504.877799][T13581] bus_attr_store+0x74/0xb0 [ 504.877817][T13581] ? __pfx_bus_attr_store+0x10/0x10 [ 504.877833][T13581] sysfs_kf_write+0xf2/0x150 [ 504.877862][T13581] kernfs_fop_write_iter+0x3e0/0x5f0 [ 504.877883][T13581] ? __pfx_sysfs_kf_write+0x10/0x10 [ 504.877910][T13581] vfs_write+0x6af/0x1050 [ 504.877943][T13581] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 504.877983][T13581] ? __pfx_vfs_write+0x10/0x10 [ 504.878005][T13581] ? find_held_lock+0x2b/0x80 [ 504.878034][T13581] ksys_write+0x12a/0x250 [ 504.878059][T13581] ? __pfx_ksys_write+0x10/0x10 [ 504.878087][T13581] __do_fast_syscall_32+0x14b/0x8c0 [ 504.878110][T13581] do_fast_syscall_32+0x32/0x70 [ 504.878129][T13581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.878153][T13581] RIP: 0023:0xf7fa3fbc [ 504.878170][T13581] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 504.878188][T13581] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 504.878217][T13581] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000700 [ 504.878231][T13581] RDX: 0000000000000091 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.878242][T13581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.878253][T13581] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 504.878266][T13581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.878284][T13581] [ 504.878290][T13581] [ 504.878294][T13581] Allocated by task 1: [ 504.878303][T13581] kasan_save_stack+0x30/0x50 [ 504.878326][T13581] kasan_save_track+0x14/0x30 [ 504.878349][T13581] __kasan_slab_alloc+0x89/0x90 [ 504.878371][T13581] kmem_cache_alloc_noprof+0x269/0x6a0 [ 504.878391][T13581] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 504.878414][T13581] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 504.878437][T13581] acpi_ds_build_internal_object+0x173/0x790 [ 504.878459][T13581] acpi_ds_create_node+0xe3/0x280 [ 504.878480][T13581] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 504.878499][T13581] acpi_ps_parse_loop+0x5e1/0x26e0 [ 504.878523][T13581] acpi_ps_parse_aml+0x81e/0x1120 [ 504.878545][T13581] acpi_ps_execute_table+0x393/0x500 [ 504.878570][T13581] acpi_ns_execute_table+0x596/0x970 [ 504.878588][T13581] acpi_ns_parse_table+0xcb/0x160 [ 504.878603][T13581] acpi_ns_load_table+0xc9/0x490 [ 504.878619][T13581] acpi_tb_load_namespace+0x2b0/0x8f0 [ 504.878644][T13581] acpi_load_tables+0x89/0x160 [ 504.878718][T13581] acpi_init+0x146/0x840 [ 504.878739][T13581] do_one_initcall+0x11c/0x6f0 [ 504.878756][T13581] kernel_init_freeable+0x6ea/0x7b0 [ 504.878774][T13581] kernel_init+0x21/0x1d0 [ 504.878792][T13581] ret_from_fork+0x730/0xd60 [ 504.878809][T13581] ret_from_fork_asm+0x1a/0x30 [ 504.878824][T13581] [ 504.878828][T13581] Freed by task 13463: [ 504.878838][T13581] kasan_save_stack+0x30/0x50 [ 504.878858][T13581] kasan_save_track+0x14/0x30 [ 504.878881][T13581] kasan_save_free_info+0x3b/0x70 [ 504.878897][T13581] __kasan_slab_free+0x5f/0x80 [ 504.878918][T13581] kmem_cache_free+0x127/0x6c0 [ 504.878935][T13581] acpi_os_release_object+0x1c/0x30 [ 504.878969][T13581] acpi_ut_delete_object_desc+0xea/0x130 [ 504.878988][T13581] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 504.879015][T13581] acpi_ut_update_object_reference+0x5f9/0x800 [ 504.879042][T13581] acpi_ut_remove_reference+0x192/0x1d0 [ 504.879069][T13581] acpi_rs_get_prt_method_data+0xcd/0x150 [ 504.879085][T13581] acpi_get_irq_routing_table+0xb8/0x140 [ 504.879103][T13581] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 504.879119][T13581] acpi_pci_irq_lookup+0x8e/0x6b0 [ 504.879136][T13581] acpi_pci_irq_disable+0x1a8/0x360 [ 504.879151][T13581] pcibios_disable_device+0x89/0xb0 [ 504.879174][T13581] do_pci_disable_device+0x9f/0x100 [ 504.879200][T13581] pci_disable_device+0x130/0x270 [ 504.879225][T13581] virtio_pci_remove+0xcf/0x110 [ 504.879240][T13581] pci_device_remove+0xb2/0x1d0 [ 504.879262][T13581] device_remove+0xcb/0x180 [ 504.879284][T13581] device_release_driver_internal+0x44e/0x620 [ 504.879307][T13581] pci_stop_bus_device+0x120/0x160 [ 504.879334][T13581] pci_stop_and_remove_bus_device+0x58/0xa0 [ 504.879359][T13581] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 504.879387][T13581] remove_store+0x123/0x140 [ 504.879402][T13581] dev_attr_store+0x58/0x80 [ 504.879427][T13581] sysfs_kf_write+0xf2/0x150 [ 504.879450][T13581] kernfs_fop_write_iter+0x3e0/0x5f0 [ 504.879472][T13581] vfs_write+0x6af/0x1050 [ 504.879492][T13581] ksys_write+0x12a/0x250 [ 504.879513][T13581] __do_fast_syscall_32+0x14b/0x8c0 [ 504.879530][T13581] do_fast_syscall_32+0x32/0x70 [ 504.879548][T13581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.879569][T13581] [ 504.879573][T13581] The buggy address belongs to the object at ffff88802292a478 [ 504.879573][T13581] which belongs to the cache Acpi-Operand of size 72 [ 504.879586][T13581] The buggy address is located 8 bytes inside of [ 504.879586][T13581] freed 72-byte region [ffff88802292a478, ffff88802292a4c0) [ 504.879605][T13581] [ 504.879609][T13581] The buggy address belongs to the physical page: [ 504.879630][T13581] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802292af08 pfn:0x2292a [ 504.879649][T13581] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 504.879665][T13581] page_type: f5(slab) [ 504.879682][T13581] raw: 00fff00000000200 ffff88801d44da40 ffffea00008a5e10 ffffea00008a5710 [ 504.879699][T13581] raw: ffff88802292af08 0000000200270006 00000000f5000000 0000000000000000 [ 504.879710][T13581] page dumped because: kasan: bad access detected [ 504.879755][T13581] page_owner tracks the page as allocated [ 504.879762][T13581] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2557208323 [ 504.879791][T13581] post_alloc_hook+0xfd/0x120 [ 504.879806][T13581] get_page_from_freelist+0x1113/0x35e0 [ 504.879825][T13581] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 504.879842][T13581] new_slab+0xb1/0x6d0 [ 504.879859][T13581] refill_objects+0xe3/0x410 [ 504.879877][T13581] __pcs_replace_empty_main+0x35e/0x650 [ 504.879892][T13581] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 504.879913][T13581] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 504.879936][T13581] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 504.879958][T13581] acpi_ds_create_operand+0x6be/0xc20 [ 504.879979][T13581] acpi_ds_eval_data_object_operands+0x125/0x640 [ 504.879999][T13581] acpi_ds_exec_end_op+0xe41/0x1e60 [ 504.880020][T13581] acpi_ps_parse_loop+0x5e1/0x26e0 [ 504.880041][T13581] acpi_ps_parse_aml+0x81e/0x1120 [ 504.880062][T13581] acpi_ps_execute_table+0x393/0x500 [ 504.880086][T13581] acpi_ns_execute_table+0x596/0x970 [ 504.880101][T13581] page_owner free stack trace missing [ 504.880106][T13581] [ 504.880110][T13581] Memory state around the buggy address: [ 504.880119][T13581] ffff88802292a380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 504.880130][T13581] ffff88802292a400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 504.880140][T13581] >ffff88802292a480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 504.880149][T13581] ^ [ 504.880159][T13581] ffff88802292a500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 504.880169][T13581] ffff88802292a580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 504.880178][T13581] ================================================================== [ 504.881997][T13581] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 505.351816][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.2.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.356124][T13581] Tainted: [L]=SOFTLOCKUP [ 505.357854][T13581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.361755][T13581] Call Trace: [ 505.363104][T13581] [ 505.364310][T13581] dump_stack_lvl+0x100/0x190 [ 505.366225][T13581] vpanic+0x553/0x970 [ 505.367788][T13581] ? __pfx_vpanic+0x10/0x10 [ 505.369606][T13581] ? mark_held_locks+0x40/0x70 [ 505.371529][T13581] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 505.373923][T13581] panic+0xd1/0xe0 [ 505.375443][T13581] ? __pfx_panic+0x10/0x10 [ 505.377244][T13581] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 505.379566][T13581] ? preempt_schedule+0x57/0xd0 [ 505.381513][T13581] check_panic_on_warn.cold+0x19/0x34 [ 505.383503][T13581] end_report.part.0+0x3a/0x90 [ 505.385444][T13581] kasan_report.cold+0xe/0x18 [ 505.387324][T13581] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 505.389720][T13581] acpi_ns_get_attached_object+0x148/0x1b0 [ 505.392032][T13581] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 505.394112][T13581] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 505.395716][T13581] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 505.397735][T13581] ? acpi_ds_create_operand+0x267/0xc20 [ 505.399460][T13581] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 505.401417][T13581] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 505.403802][T13581] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 505.405899][T13581] ? __asan_memset+0x23/0x50 [ 505.407756][T13581] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 505.410155][T13581] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 505.412405][T13581] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 505.414932][T13581] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 505.417246][T13581] ? acpi_ut_trace_ptr+0x161/0x2a0 [ 505.419281][T13581] acpi_ds_exec_end_op+0xb78/0x1e60 [ 505.421345][T13581] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 505.423565][T13581] acpi_ps_parse_loop+0x5e1/0x26e0 [ 505.425643][T13581] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 505.427829][T13581] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 505.430052][T13581] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 505.432412][T13581] ? acpi_ut_create_thread_state+0x6d/0x170 [ 505.434764][T13581] acpi_ps_parse_aml+0x81e/0x1120 [ 505.436800][T13581] acpi_ps_execute_method+0x5c4/0xe90 [ 505.438968][T13581] acpi_ns_evaluate+0x640/0x1670 [ 505.440935][T13581] acpi_ut_evaluate_object+0xf7/0x610 [ 505.443072][T13581] acpi_rs_get_prt_method_data+0xa0/0x150 [ 505.445352][T13581] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 505.447852][T13581] ? acpi_ut_status_exit+0x111/0x1c0 [ 505.449970][T13581] ? acpi_rs_validate_parameters+0x104/0x210 [ 505.452347][T13581] acpi_get_irq_routing_table+0xb8/0x140 [ 505.454605][T13581] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 505.457109][T13581] ? do_raw_spin_lock+0x128/0x260 [ 505.459126][T13581] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 505.461417][T13581] ? mark_held_locks+0x40/0x70 [ 505.463275][T13581] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 505.465597][T13581] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 505.467856][T13581] ? pci_conf1_read+0x138/0x240 [ 505.469807][T13581] acpi_pci_irq_lookup+0x8e/0x6b0 [ 505.471821][T13581] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 505.473992][T13581] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 505.476404][T13581] ? __driver_probe_device+0x210/0x460 [ 505.478587][T13581] ? __device_attach_driver+0x1df/0x320 [ 505.480785][T13581] ? bus_for_each_drv+0x159/0x1e0 [ 505.482794][T13581] ? __device_attach+0x1e4/0x4d0 [ 505.484791][T13581] acpi_pci_irq_enable+0x1f5/0x6f0 [ 505.486841][T13581] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 505.489092][T13581] ? __pfx_pci_enable_resources+0x10/0x10 [ 505.491346][T13581] ? __pfx___pci_set_power_state+0x10/0x10 [ 505.493678][T13581] pcibios_enable_device+0xb6/0xe0 [ 505.495705][T13581] do_pci_enable_device+0x21f/0x4a0 [ 505.497804][T13581] ? __pfx_do_pci_enable_device+0x10/0x10 [ 505.500086][T13581] ? pci_update_current_state+0x102/0x240 [ 505.502320][T13581] ? __pfx_pci_update_current_state+0x10/0x10 [ 505.504683][T13581] ? ksm_scan_thread+0x3350/0x6f90 [ 505.506727][T13581] ? __kasan_kmalloc+0xaa/0xb0 [ 505.508612][T13581] pci_enable_device_flags+0x27c/0x370 [ 505.510687][T13581] ? __pfx_virtio_pci_probe+0x10/0x10 [ 505.512808][T13581] virtio_pci_probe+0x1d5/0x410 [ 505.514747][T13581] local_pci_probe+0xdd/0x1b0 [ 505.516611][T13581] pci_call_probe+0x176/0x800 [ 505.518485][T13581] ? pci_match_device+0x147/0x7d0 [ 505.520481][T13581] ? __pfx_pci_call_probe+0x10/0x10 [ 505.522567][T13581] ? __pfx_pci_match_device+0x10/0x10 [ 505.524707][T13581] ? pci_find_host_bridge+0x3c/0x80 [ 505.526802][T13581] pci_device_probe+0x25b/0x400 [ 505.528771][T13581] ? __pfx_pci_device_probe+0x10/0x10 [ 505.530936][T13581] ? sysfs_create_link+0x68/0xc0 [ 505.532918][T13581] ? __pfx_pci_device_probe+0x10/0x10 [ 505.535086][T13581] really_probe+0x241/0xa60 [ 505.536912][T13581] __driver_probe_device+0x210/0x460 [ 505.539031][T13581] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 505.541372][T13581] driver_probe_device+0x4a/0x140 [ 505.543413][T13581] __device_attach_driver+0x1df/0x320 [ 505.545544][T13581] ? __pfx___device_attach_driver+0x10/0x10 [ 505.547890][T13581] bus_for_each_drv+0x159/0x1e0 [ 505.549836][T13581] ? __pfx_bus_for_each_drv+0x10/0x10 [ 505.551958][T13581] ? lockdep_hardirqs_on+0x7d/0x110 [ 505.554062][T13581] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 505.556397][T13581] __device_attach+0x1e4/0x4d0 [ 505.558335][T13581] ? __pfx___device_attach+0x10/0x10 [ 505.560433][T13581] ? do_raw_spin_unlock+0x145/0x1e0 [ 505.562500][T13581] device_initial_probe+0xaf/0xd0 [ 505.564525][T13581] pci_bus_add_device+0xc5/0x100 [ 505.566499][T13581] pci_bus_add_devices+0x9a/0x1f0 [ 505.568543][T13581] pci_rescan_bus+0x2a/0x40 [ 505.570205][T13581] rescan_store+0xfb/0x130 [ 505.571612][T13581] ? __pfx_rescan_store+0x10/0x10 [ 505.573265][T13581] ? sysfs_file_kobj+0xe4/0x290 [ 505.574883][T13581] ? __pfx_rescan_store+0x10/0x10 [ 505.576472][T13581] bus_attr_store+0x74/0xb0 [ 505.577917][T13581] ? __pfx_bus_attr_store+0x10/0x10 [ 505.579548][T13581] sysfs_kf_write+0xf2/0x150 [ 505.581356][T13581] kernfs_fop_write_iter+0x3e0/0x5f0 [ 505.583453][T13581] ? __pfx_sysfs_kf_write+0x10/0x10 [ 505.585534][T13581] vfs_write+0x6af/0x1050 [ 505.587245][T13581] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 505.589554][T13581] ? __pfx_vfs_write+0x10/0x10 [ 505.591456][T13581] ? find_held_lock+0x2b/0x80 [ 505.593359][T13581] ksys_write+0x12a/0x250 [ 505.595075][T13581] ? __pfx_ksys_write+0x10/0x10 [ 505.597024][T13581] __do_fast_syscall_32+0x14b/0x8c0 [ 505.599080][T13581] do_fast_syscall_32+0x32/0x70 [ 505.601036][T13581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.603542][T13581] RIP: 0023:0xf7fa3fbc [ 505.605189][T13581] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 505.612513][T13581] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 505.615256][T13581] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000700 [ 505.618357][T13581] RDX: 0000000000000091 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.621454][T13581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.624558][T13581] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 505.627674][T13581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.630811][T13581] [ 505.632940][T13581] Kernel Offset: disabled [ 505.634677][T13581] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:46:29 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85baf160 RDI=ffffffff9cf0a4e0 RBP=ffffffff9cf0a4a0 RSP=ffffc9000320e430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff39e14f1 R15=dffffc0000000000 RIP=ffffffff85baf187 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880952ae000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7322bec CR3=000000006d69e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000800000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ed98c38c50 000055ed98c38c50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc39873d90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63615f7866705f5f 203f20205d313835 3331545b5d363135 3537382e34303520 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 232072656c6c616b 7a79732020202020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20204c2020202020 2020202020202020 47203a6465746e69 615420313534312e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e7a7973203a6d 6d6f432031383533 31203a4449502030 203a444955203020 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a555043205d3138 353331545b5d3131 313537382e343035 20205b203a6c656e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000015b108d RBX=ffff88801e352580 RCX=ffffffff8be53325 RDX=0000000000000001 RSI=ffffffff8e619345 RDI=ffffffff8c832c80 RBP=ffffed1003c6a4b0 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed10055e6825 R10=ffff88802af3412b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8be517bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880953ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e4f3ff8 CR3=000000006d69e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000fc00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000cd77ef RBX=ffff88801e704b00 RCX=ffffffff8be53325 RDX=0000000000000001 RSI=ffffffff8e619345 RDI=ffffffff8c832c80 RBP=ffffed1003ce0960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed1005606825 R10=ffff88802b03412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8be517bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880954ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7461108 CR3=000000005ff6d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000fc00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000200000 RBX=ffff8880417d9530 RCX=0000000000000015 RDX=ffff88802aa2cb00 RSI=ffffffff86cbe24a RDI=ffff88802aa2cb00 RBP=0000000000000015 RSP=ffffc900040cf048 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000015 R11=0000000000000001 R12=ffffc90000415138 R13=ffff8880417d958c R14=ffff8880417d9538 R15=0000000000000000 RIP=ffffffff86cbe257 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fddd693e300 ffffffff 00c00000 GS =0000 ffff8880955ae000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000557397e17f40 CR3=000000004b474000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4dcd0dd6681a642 e4122e9e79d9503e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99369d26afbc3a4c f0dcd4dd81476729 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79169f6262a7ce43 ad06dffd8134d1aa ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e594674eceaea44a b34f9e6a50df4605 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005b00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 862650005a4f3c00 000132ec00000007 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b36fa00aaeac600 0001330580010000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a337910000000001 000132ec00000004 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000133052e34a000 0d6ed000000132d7 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 23c54370f1d90a64 3045810357ed1269 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f68169043952d622 c57919141ba7faf0 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=e8c3b132bd643c7a 61a252cf8794b3a3 e8c3b132bd643c7a 61a252cf8794b3a3 e8c3b132bd643c7a 61a252cf8794b3a3 e8c3b132bd643c7a 61a252cf8794b3a3 ZMM18=894c0d55aec8e5a9 44855a8987eb4348 894c0d55aec8e5a9 44855a8987eb4348 894c0d55aec8e5a9 44855a8987eb4348 894c0d55aec8e5a9 44855a8987eb4348 ZMM19=f60f000000000000 0000000000000004 f60f000000000000 0000000000000003 f60f000000000000 0000000000000002 f60f000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff82a42086ffff ffff82a4258cffff ffff82a426e3ffff ffff825df7bcffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81778fd5ffff ffff81affb02ffff ffff821f1d64ffff ffff82655932ffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff82655776ffff ffff82655617ffff ffff8be39340ffff ffff8be39225ffff ZMM24=8a74a26e8a74a26e 8a74a26e8a74a26e 8a74a26e8a74a26e 8a74a26e8a74a26e 8a74a26e8a74a26e 8a74a26e8a74a26e 8a74a26e8a74a26e 8a74a26e8a74a26e ZMM25=dcfaf354dcfaf354 dcfaf354dcfaf354 dcfaf354dcfaf354 dcfaf354dcfaf354 dcfaf354dcfaf354 dcfaf354dcfaf354 dcfaf354dcfaf354 dcfaf354dcfaf354 ZMM26=e54b1ecbe54b1ecb e54b1ecbe54b1ecb e54b1ecbe54b1ecb e54b1ecbe54b1ecb e54b1ecbe54b1ecb e54b1ecbe54b1ecb e54b1ecbe54b1ecb e54b1ecbe54b1ecb ZMM27=e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e e4a3dd9ee4a3dd9e ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=011c0000011c0000 011c0000011c0000 011c0000011c0000 011c0000011c0000 011c0000011c0000 011c0000011c0000 011c0000011c0000 011c0000011c0000