last executing test programs: 9.066483894s ago: executing program 2 (id=2114): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 7.52355717s ago: executing program 1 (id=2115): socket$tipc(0x1e, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000180), 0x30001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r5, 0x2, 0x1, "0f"}, 0x9) socket(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x101, 0x11, 0x5, 0x0, 0x0) 7.523409824s ago: executing program 2 (id=2116): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 7.491693734s ago: executing program 1 (id=2119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x26, 0x29, 0x70bd2d, 0xfffffff6, {0x16}, [@typed={0xc, 0x15e, 0x0, 0x0, @u64=0x51956538}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0xd, [@private=0xa010100, @remote, @local, @dev={0xac, 0x14, 0x14, 0x41}]}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x9, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000340)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r7, &(0x7f00000002c0), 0x8) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x100) ioctl$NBD_DO_IT(r8, 0xab03) 7.473180795s ago: executing program 1 (id=2120): setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xffffffffffffff08, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x585d, &(0x7f0000000340)={0x0, 0xb382, 0x2, 0x3, 0xfffffffe}, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000004c0)='n', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000005c0)) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0x1b) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000001380)='X', 0x1, 0x400e5, &(0x7f00000013c0)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000001400)={0x0, 0xfd, 0x9, 0x0, 0x14, 0x40, 0xfd, 0x25, 0x80, 0x0, 0x8, 0x0, 0x4, 0x5}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001480)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) io_setup(0x8, &(0x7f0000001580)) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0xfffffffffffffecd, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0x8, 0x6, "04800042", '\x00\b6 '}}, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.458857593s ago: executing program 2 (id=2125): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) 6.738650795s ago: executing program 0 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,lpwwpn=0x1000000010000002,roles=32', 0x6c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(0xffffffffffffffff, 0x400, 0xd8eb, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 6.510225096s ago: executing program 2 (id=2124): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) 5.138358531s ago: executing program 3 (id=2126): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x3, 0x1, 0x0, &(0x7f0000000480)=""/71, &(0x7f0000000500)=""/9, 0x41000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x8, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0x0, 0x5, 0x3, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}}) 5.138095964s ago: executing program 1 (id=2127): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 5.133056592s ago: executing program 2 (id=2128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) creat(0x0, 0xd931d3864d39dcca) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) futex(r4, 0xd, 0x2, 0x0, 0x0, 0x2) futex(r4, 0xd, 0x2, 0x0, 0x0, 0x2) 3.875073883s ago: executing program 0 (id=2129): socket$tipc(0x1e, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000180), 0x30001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r5, 0x2, 0x1, "0f"}, 0x9) socket(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x101, 0x11, 0x5, 0x0, 0x0) 3.815175913s ago: executing program 0 (id=2130): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 3.785459691s ago: executing program 1 (id=2131): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) 3.784646236s ago: executing program 0 (id=2132): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 3.376443793s ago: executing program 3 (id=2133): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) 2.657965722s ago: executing program 0 (id=2134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) r0 = mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r2, 0x6}, 0x50) connect$netlink(r2, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) preadv2(r0, 0x0, 0x0, 0xff, 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000680)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r5, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 2.261139064s ago: executing program 3 (id=2135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x67, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="03020000008002ff", 0x8) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000100)={0x3, 0x0, r1}) write$binfmt_misc(r3, &(0x7f0000000440)="c188a459c8261ee110b323a9093b458d9df792a1aacb28d2653b184b5b98d9f5958ff835e235558e02baf6f676989d683d523325602512017b093993fa2c3fb5b5b0357aac00ff9d68990642f07a039fec320e43b181868a98c78d4098ba340e0382c8921b353412f11b0fd15b5e06c5a833b0391828cbb8417c25c7483f38f47c7a0b4b81994259e179bc26d9ff60480a2ae69078b9722889bd4e1245f112db8b8c1b60a123ed45684af176d58b3c251745c028b9a2c7ca4d562211fe18d9bdae03f2745ce53493ff5745bf842e5e33ec5d5a809b16c3d2950211704d56c95cf696ee54c0943d5b15a5ce74f3c9e6340baa11c844", 0xf5) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669632e74696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xc) setfsuid(0xee00) write(r1, &(0x7f0000000300)="6164642073797a30203132372e302e302e31833800000000", 0x18) 2.100529798s ago: executing program 0 (id=2136): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbca8aee1c26bb0337897ace4fb85cc40c273cd67ec01764ee2f7de0223a5bea506f5f997938cd33aef9a85636fc3", 0x61) 2.008450787s ago: executing program 3 (id=2137): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) iopl(0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x48014, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x2203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.685603219s ago: executing program 2 (id=2138): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 1.675426065s ago: executing program 1 (id=2139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='/dev/nullb1', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='1', 0x1) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000740)='loop', 0x4) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r5, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e) 524.94886ms ago: executing program 3 (id=2140): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 0s ago: executing program 3 (id=2141): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000002c0)=0x22922, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000940)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000600)) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)=""/241) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x100, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000606000400000000000900020073797a32000000000c00078008001240f9d10703050005000000000005000100060000000d000300686173683a6d616300"], 0x54}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004440)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @empty, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback}}}], 0x20}}], 0x1, 0x4004040) ioctl$KVM_NMI(r6, 0xae9a) kernel console output (not intermixed with test programs): che_node 217KB 220KB [ 218.187892][ T8195] kmem_cache 180KB 226KB [ 218.187902][ T8195] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz.1.542,pid=8195,uid=0 [ 218.202092][ T8195] Out of memory (oom_kill_allocating_task): Killed process 8193 (syz.1.542) total-vm:104228kB, anon-rss:284kB, file-rss:23196kB, shmem-rss:5336kB, UID:0 pgtables:132kB oom_score_adj:0 [ 218.653188][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0002 [ 220.021675][ T8233] fuse: fd is not a fuse device [ 220.130823][ T8239] fuse: fd is not a fuse device [ 222.410847][ T8270] fuse: Unknown parameter 'grou00000000000000000000' [ 223.094497][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 224.962403][ T8318] fuse: Unknown parameter 'grou00000000000000000000' [ 225.065464][ T5792] Bluetooth: hci3: command 0x040f tx timeout [ 225.277661][ T8323] trusted_key: encrypted_key: insufficient parameters specified [ 226.876019][ T8358] fuse: Unknown parameter 'group_i00000000000000000000' [ 227.168785][ T5792] Bluetooth: hci3: command 0x040f tx timeout [ 227.780192][ T8369] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 228.566753][ T8375] veth3: entered promiscuous mode [ 228.566773][ T8375] veth3: entered allmulticast mode [ 229.237181][ T5144] Bluetooth: hci3: command 0x040f tx timeout [ 229.797872][ T8399] fuse: Unknown parameter 'group_i00000000000000000000' [ 230.333081][ T8410] fuse: fd is not a fuse device [ 230.487383][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 231.315744][ T5144] Bluetooth: hci3: command 0x040f tx timeout [ 232.540355][ T8429] fuse: fd is not a fuse device [ 233.312517][ T8444] fuse: Bad value for 'user_id' [ 233.312537][ T8444] fuse: Bad value for 'user_id' [ 234.047957][ T8454] fuse: fd is not a fuse device [ 235.827946][ T8470] fuse: Unknown parameter 'group_i00000000000000000000' [ 236.511966][ T8480] ublk0: read batch cmd buffer failed [ 236.512069][ T8480] ublk0: read batch cmd buffer failed [ 236.540250][ T8480] ublk0: read batch cmd buffer failed [ 236.540376][ T8480] ublk0: read batch cmd buffer failed [ 237.305525][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.700620][ T8500] fuse: Unknown parameter 'group_i00000000000000000000' [ 239.866586][ T8502] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.438539][ T8512] overlayfs: failed to clone upperpath [ 242.720059][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 242.720077][ T42] audit: type=1326 audit(1793064554.485:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.720262][ T42] audit: type=1326 audit(1793064554.485:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.743742][ T42] audit: type=1326 audit(1793064554.495:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.747493][ T42] audit: type=1326 audit(1793064554.515:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.747718][ T42] audit: type=1326 audit(1793064554.515:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.767176][ T42] audit: type=1326 audit(1793064554.535:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.767409][ T42] audit: type=1326 audit(1793064554.535:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.768001][ T42] audit: type=1326 audit(1793064554.535:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.768206][ T42] audit: type=1326 audit(1793064554.535:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 242.768543][ T42] audit: type=1326 audit(1793064554.535:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8525 comm="syz.2.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 245.381757][ T8566] batman_adv: batadv0: Adding interface: veth0 [ 245.381815][ T8566] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.381841][ T8566] batman_adv: batadv0: Interface activated: veth0 [ 245.381866][ T8566] batadv0: mtu less than device minimum [ 245.382892][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.383801][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.384758][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.385876][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.386822][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.387861][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.402635][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.403522][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.404478][ T8566] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 245.479435][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.642867][ T8568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.944573][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.534727][ T8568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.549152][ T8568] batman_adv: batadv0: Interface deactivated: dummy0 [ 246.549176][ T8568] batman_adv: batadv0: Removing interface: dummy0 [ 246.549970][ T8568] batman_adv: batadv0: Interface deactivated: veth0 [ 246.549988][ T8568] batman_adv: batadv0: Removing interface: veth0 [ 246.954316][ T8580] fuse: Bad value for 'group_id' [ 246.954331][ T8580] fuse: Bad value for 'group_id' [ 247.512149][ T8589] fuse: fd is not a fuse device [ 247.520461][ T8589] netlink: 'syz.2.659': attribute type 5 has an invalid length. [ 247.520484][ T8589] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.659'. [ 247.595355][ T8591] fuse: Unknown parameter 'grou00000000000000000000' [ 247.636011][ T8592] kAFS: No cell specified [ 250.361254][ T8628] fuse: Bad value for 'group_id' [ 250.361275][ T8628] fuse: Bad value for 'group_id' [ 250.482897][ T8634] fuse: fd is not a fuse device [ 250.604465][ T8639] fuse: Unknown parameter 'grou00000000000000000000' [ 250.665577][ T5792] Bluetooth: hci3: command 0x040f tx timeout [ 251.763474][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.801138][ T24] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 252.052216][ T860] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 252.177948][ T8649] ceph: No mds server is up or the cluster is laggy [ 253.160057][ T8666] IPVS: set_ctl: invalid protocol: 41 100.1.1.5:20003 [ 253.546624][ T8672] fuse: fd is not a fuse device [ 253.616086][ T8674] fuse: fd is not a fuse device [ 254.673621][ T8684] overlay: filesystem on ./file0 not supported [ 254.922881][ T8701] fuse: fd is not a fuse device [ 255.241096][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.241176][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.495730][ T8712] Illegal XDP return value 4294967294 on prog (id 44) dev syz_tun, expect packet loss! [ 256.312932][ T8724] rxe_eth0 speed is unknown, defaulting to 1000 [ 256.989203][ T8736] fuse: fd is not a fuse device [ 257.762175][ T8724] lo speed is unknown, defaulting to 1000 [ 260.970120][ T8779] fuse: Unknown parameter 'group_id00000000000000000000' [ 261.271108][ T8784] fuse: fd is not a fuse device [ 261.425590][ T8789] fuse: Bad value for 'fd' [ 262.144189][ T8802] overlayfs: failed to clone upperpath [ 263.260899][ T8814] fuse: Unknown parameter 'group_id00000000000000000000' [ 263.593648][ T8820] fuse: Unknown parameter 'use00000000000000000000' [ 263.637292][ T8819] fuse: Bad value for 'fd' [ 264.076139][ T8825] tipc: Started in network mode [ 264.076257][ T8825] tipc: Node identity 0010000000000000002, cluster identity 1 [ 264.966349][ T8835] net_ratelimit: 50 callbacks suppressed [ 264.966369][ T8835] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.966464][ T8835] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.970734][ T8835] hsr_slave_0: left promiscuous mode [ 264.993397][ T8835] hsr_slave_1: left promiscuous mode [ 266.917861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 267.183946][ T8846] fuse: fd is not a fuse device [ 267.245778][ T8850] fuse: fd is not a fuse device [ 267.297109][ T8852] fuse: Bad value for 'fd' [ 269.391791][ T8871] Bluetooth: ISO socket layer initialized [ 269.396330][ T5144] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 269.400352][ T5144] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 269.422612][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 270.084646][ T8877] fuse: Unknown parameter 'grou00000000000000000000' [ 270.313671][ T8881] fuse: Unknown parameter 'use00000000000000000000' [ 270.321114][ T8883] fuse: Bad value for 'fd' [ 270.521273][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 272.386998][ T8910] rxe_eth0 speed is unknown, defaulting to 1000 [ 272.880000][ T8910] lo speed is unknown, defaulting to 1000 [ 273.334866][ T8926] fuse: Unknown parameter 'grou00000000000000000000' [ 273.737137][ T8934] fuse: Bad value for 'fd' [ 273.868756][ T8931] Console: switching to colour dummy device 80x25 [ 274.261487][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 274.263921][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 274.408846][ T8946] netlink: 'syz.3.750': attribute type 21 has an invalid length. [ 274.409963][ T8946] netlink: 128 bytes leftover after parsing attributes in process `syz.3.750'. [ 274.456749][ T8946] netlink: 'syz.3.750': attribute type 4 has an invalid length. [ 274.456774][ T8946] netlink: 3 bytes leftover after parsing attributes in process `syz.3.750'. [ 274.584764][ T8953] ublk_ctrl_add_dev: invalid recovery flags 10 [ 274.728569][ T8956] fuse: fd is not a fuse device [ 274.779162][ T8956] netlink: 'syz.1.753': attribute type 11 has an invalid length. [ 274.779183][ T8956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'. [ 274.892921][ T8959] fuse: fd is not a fuse device [ 276.122550][ T8971] fuse: Bad value for 'fd' [ 276.164396][ T8970] batman_adv: batadv0: Adding interface: netdevsim0 [ 276.164417][ T8970] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.164446][ T8970] batman_adv: batadv0: Interface activated: netdevsim0 [ 276.472882][ T8977] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.521725][ T8975] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 277.161611][ T8986] fuse: Bad value for 'rootmode' [ 278.855397][ T9004] fuse: Invalid rootmode [ 279.985092][ T9020] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 280.573450][ T9025] fuse: Unknown parameter 'use00000000000000000000' [ 280.672303][ T9030] fuse: Bad value for 'fd' [ 281.281120][ T5498] veth0_vlan: left promiscuous mode [ 281.318027][ T5883] veth0_vlan: entered promiscuous mode [ 281.481395][ T9044] fuse: Invalid rootmode [ 282.181394][ T9060] fuse: Unknown parameter 'user_id00000000000000000000' [ 282.403962][ T9066] gadgetfs: bound to dummy_udc driver [ 282.492634][ T9068] IPVS: stopping master sync thread 9067 ... [ 282.802663][ T9071] fuse: fd is not a fuse device [ 282.961753][ T9073] fuse: Bad value for 'fd' [ 285.258962][ T9081] fuse: fd is not a fuse device [ 286.174820][ T9102] fuse: fd is not a fuse device [ 288.125987][ T9134] netlink: 'syz.0.798': attribute type 4 has an invalid length. [ 288.126008][ T9134] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 288.126020][ T9134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.798'. [ 288.343876][ T9143] fuse: fd is not a fuse device [ 288.345504][ T9134] bond_slave_0: mtu greater than device maximum [ 288.349206][ T9140] lo: entered allmulticast mode [ 288.354115][ T9133] lo: left allmulticast mode [ 288.740763][ T9153] fuse: Bad value for 'fd' [ 289.839694][ T9172] fuse: Unknown parameter 'user_i00000000000000000000' [ 290.178199][ T860] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 290.269348][ T860] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -71 [ 290.844987][ T9183] fido_id[9183]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.334178][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 291.443158][ T9194] warn_alloc: 1 callbacks suppressed [ 291.443180][ T9194] syz.2.817: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 291.443236][ T9194] CPU: 2 UID: 0 PID: 9194 Comm: syz.2.817 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 291.443271][ T9194] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 291.443278][ T9194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.443288][ T9194] Call Trace: [ 291.443316][ T9194] [ 291.443323][ T9194] dump_stack_lvl+0x100/0x190 [ 291.443439][ T9194] warn_alloc.cold+0x9e/0xb2 [ 291.443471][ T9194] ? __pfx_warn_alloc+0x10/0x10 [ 291.443527][ T9194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.443584][ T9194] ? __pfx_get_page_from_freelist+0x10/0x10 [ 291.443611][ T9194] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 291.443645][ T9194] ? find_held_lock+0x2b/0x80 [ 291.443669][ T9194] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 291.443691][ T9194] ? do_raw_spin_lock+0x128/0x260 [ 291.443711][ T9194] ? find_held_lock+0x2b/0x80 [ 291.443732][ T9194] ? debug_check_no_obj_freed+0x31f/0x630 [ 291.443770][ T9194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.443790][ T9194] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 291.443817][ T9194] ? policy_nodemask+0xed/0x4f0 [ 291.443846][ T9194] alloc_pages_mpol+0x201/0x560 [ 291.443872][ T9194] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 291.443895][ T9194] ? __free_frozen_pages+0x766/0x1110 [ 291.443926][ T9194] folio_alloc_mpol_noprof+0x36/0x260 [ 291.443946][ T9194] alloc_migration_target_by_mpol+0x2c1/0x650 [ 291.443968][ T9194] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 291.443989][ T9194] ? __pfx___might_resched+0x10/0x10 [ 291.444020][ T9194] migrate_pages_batch+0x5c2/0x4700 [ 291.444047][ T9194] ? __pfx_kasan_save_track+0x10/0x10 [ 291.444071][ T9194] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 291.444121][ T9194] ? migrate_pages_sync+0x12c/0x880 [ 291.444148][ T9194] ? migrate_pages_sync+0x588/0x880 [ 291.444172][ T9194] ? __pfx_migrate_pages_batch+0x10/0x10 [ 291.444203][ T9194] ? __pfx_migrate_pages_sync+0x10/0x10 [ 291.444240][ T9194] migrate_pages+0x1946/0x2840 [ 291.444267][ T9194] ? lock_acquire+0x1d1/0x380 [ 291.444283][ T9194] ? current_cpuset_is_being_rebound+0x24/0x370 [ 291.444310][ T9194] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 291.444338][ T9194] ? __pfx_migrate_pages+0x10/0x10 [ 291.444362][ T9194] ? do_mbind+0x555/0xfd0 [ 291.444391][ T9194] do_mbind+0x5a4/0xfd0 [ 291.444419][ T9194] ? __pfx_do_mbind+0x10/0x10 [ 291.444440][ T9194] ? compat_get_bitmap+0x115/0x190 [ 291.444472][ T9194] ? __pfx_get_nodes+0x10/0x10 [ 291.444497][ T9194] ? find_held_lock+0x2b/0x80 [ 291.444523][ T9194] kernel_mbind+0x1b7/0x200 [ 291.444544][ T9194] ? __pfx_kernel_mbind+0x10/0x10 [ 291.444571][ T9194] __do_fast_syscall_32+0x14b/0x8c0 [ 291.444596][ T9194] do_fast_syscall_32+0x32/0x70 [ 291.444617][ T9194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.444639][ T9194] RIP: 0023:0xf745efbc [ 291.444656][ T9194] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 291.444674][ T9194] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 291.444692][ T9194] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 291.444704][ T9194] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 291.444715][ T9194] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 291.444725][ T9194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 291.444736][ T9194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.444760][ T9194] [ 291.444810][ T9194] Mem-Info: [ 291.444820][ T9194] active_anon:4297 inactive_anon:2093 isolated_anon:512 [ 291.444820][ T9194] active_file:4294 inactive_file:21715 isolated_file:0 [ 291.444820][ T9194] unevictable:1024 dirty:400 writeback:0 [ 291.444820][ T9194] slab_reclaimable:6414 slab_unreclaimable:56482 [ 291.444820][ T9194] mapped:25854 shmem:4237 pagetables:1222 [ 291.444820][ T9194] sec_pagetables:312 bounce:0 [ 291.444820][ T9194] kernel_misc_reclaimable:0 [ 291.444820][ T9194] free:41920 free_pcp:656 free_cma:0 [ 291.444864][ T9194] Node 0 active_anon:0kB inactive_anon:68kB active_file:52kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1444kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 291.444908][ T9194] Node 0 DMA free:2668kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB [ 291.444953][ T9194] lowmem_reserve[]: 0 256 256 256 256 [ 291.444984][ T9194] Node 0 DMA32 free:25576kB boost:25992kB min:37544kB low:40432kB high:43320kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:64kB active_file:52kB inactive_file:84kB unevictable:0kB writepending:4kB zspages:332kB present:1032196kB managed:262872kB mlocked:0kB bounce:0kB free_pcp:2552kB local_pcp:1404kB free_cma:0kB [ 291.445032][ T9194] lowmem_reserve[]: 0 0 0 0 0 [ 291.445130][ T9194] Node 0 DMA: 101*4kB (UM) 13*8kB (UM) 7*16kB (UM) 12*32kB (UM) 14*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2668kB [ 291.445256][ T9194] Node 0 DMA32: 612*4kB (UME) 127*8kB (UME) 76*16kB (UM) 183*32kB (UME) 57*64kB (UME) 19*128kB (UME) 11*256kB (UM) 2*512kB (U) 3*1024kB (M) 1*2048kB (M) 0*4096kB = 25576kB [ 291.445580][ T9194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.445594][ T9194] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 291.445606][ T9194] 31122 total pagecache pages [ 291.445612][ T9194] 878 pages in swap cache [ 291.445618][ T9194] Free swap = 108652kB [ 291.445624][ T9194] Total swap = 124996kB [ 291.445630][ T9194] 524155 pages RAM [ 291.445636][ T9194] 0 pages HighMem/MovableOnly [ 291.445641][ T9194] 217545 pages reserved [ 291.445647][ T9194] 0 pages cma reserved [ 291.740549][ T9202] fuse: fd is not a fuse device [ 291.870404][ T9204] fuse: fd is not a fuse device [ 293.609278][ T9221] bridge0: port 3(syz_tun) entered disabled state [ 293.609531][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.613529][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.300432][ T9240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.828'. [ 296.805021][ T9275] fuse: fd is not a fuse device [ 297.029792][ T9283] team0 (unregistering): Port device team_slave_0 removed [ 297.033322][ T9283] team0 (unregistering): Port device team_slave_1 removed [ 297.059229][ T9285] fuse: fd is not a fuse device [ 297.234760][ T9289] fuse: Unknown parameter '0x0000000000000004' [ 297.721494][ T9295] fuse: fd is not a fuse device [ 299.738589][ T9319] fuse: Bad value for 'fd' [ 299.876470][ T9322] fuse: fd is not a fuse device [ 300.086606][ T9324] fuse: Unknown parameter '0x0000000000000004' [ 300.402085][ T9326] fuse: fd is not a fuse device [ 300.772568][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 301.885214][ T9351] Set syz0 is full, maxelem 0 reached [ 302.162557][ T9354] fuse: Bad value for 'fd' [ 302.242541][ T9356] fuse: fd is not a fuse device [ 302.433385][ T9358] fuse: Unknown parameter '0x0000000000000004' [ 303.688910][ T9373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'. [ 304.423985][ T9381] fuse: fd is not a fuse device [ 304.554612][ T9386] fuse: fd is not a fuse device [ 304.738679][ T9393] fuse: Unknown parameter '0x0000000000000004' [ 305.332850][ T9398] fuse: Bad value for 'fd' [ 306.482695][ T9412] fuse: fd is not a fuse device [ 306.816780][ T9415] fuse: Unknown parameter 'use00000000000000000000' [ 306.920646][ T9419] fuse: Unknown parameter '0x0000000000000004' [ 307.261771][ T9427] fuse: Bad value for 'fd' [ 308.966959][ T9454] fuse: Unknown parameter 'user_i00000000000000000000' [ 309.066662][ T9456] fuse: fd is not a fuse device [ 309.102515][ T9458] fuse: Unknown parameter '0x0000000000000005' [ 309.233081][ T9460] fuse: fd is not a fuse device [ 309.252376][ T9462] fuse: Bad value for 'fd' [ 310.153371][ T9468] fuse: Bad value for 'fd' [ 310.626560][ T9478] fuse: fd is not a fuse device [ 310.683804][ T9481] fuse: Unknown parameter 'fd0x0000000000000004' [ 310.713259][ T9482] fuse: Unknown parameter 'use00000000000000000000' [ 310.969210][ T9486] fuse: fd is not a fuse device [ 311.570955][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.614568][ T9496] fuse: Unknown parameter '0x0000000000000005' [ 312.789437][ T9513] fuse: fd is not a fuse device [ 312.831308][ T9510] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.933874][ T9515] fuse: Unknown parameter 'user_i00000000000000000000' [ 313.011560][ T9510] lo speed is unknown, defaulting to 1000 [ 313.805401][ T9525] fuse: Unknown parameter '0x0000000000000004' [ 313.865061][ T9527] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:21 [ 313.866665][ T9527] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 316.448993][ T9549] fuse: Unknown parameter 'user_id00000000000000000000' [ 316.663813][ T9555] fuse: Unknown parameter 'fd0x0000000000000005' [ 316.681529][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.681593][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.939859][ T9559] fuse: Unknown parameter '0x0000000000000004' [ 317.253665][ T9562] netlink: 80 bytes leftover after parsing attributes in process `syz.1.925'. [ 317.486151][ T9565] fuse: fd is not a fuse device [ 318.596515][ T9579] fuse: Bad value for 'fd' [ 318.748938][ T9583] fuse: Unknown parameter 'user_id00000000000000000000' [ 319.459737][ T9594] bond2: entered allmulticast mode [ 319.460342][ T9594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.538588][ T9597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.551231][ T9597] macvlan2: entered allmulticast mode [ 319.551255][ T9597] bond0: entered allmulticast mode [ 319.552131][ T9597] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 319.626809][ T9597] netlink: 14 bytes leftover after parsing attributes in process `syz.2.935'. [ 319.692451][ T9594] ip6gretap1: entered allmulticast mode [ 319.692944][ T9594] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 320.114142][ T9605] ceph: No source [ 321.549409][ T9616] fuse: fd is not a fuse device [ 321.749946][ T9618] fuse: fd is not a fuse device [ 322.665497][ T9625] FAULT_INJECTION: forcing a failure. [ 322.665497][ T9625] name failslab, interval 1, probability 0, space 0, times 0 [ 322.665542][ T9625] CPU: 3 UID: 0 PID: 9625 Comm: syz.3.940 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 322.665579][ T9625] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 322.665589][ T9625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.665602][ T9625] Call Trace: [ 322.665610][ T9625] [ 322.665618][ T9625] dump_stack_lvl+0x100/0x190 [ 322.665656][ T9625] should_fail_ex.cold+0x5/0xa [ 322.665713][ T9625] should_failslab+0xc2/0x120 [ 322.665743][ T9625] __kmalloc_cache_node_noprof+0x94/0x710 [ 322.665774][ T9625] ? blkg_alloc+0xbd/0xf80 [ 322.665805][ T9625] blkg_alloc+0xbd/0xf80 [ 322.665835][ T9625] ? _raw_spin_unlock_irq+0x29/0x50 [ 322.665867][ T9625] blkg_conf_prep+0x46e/0xf10 [ 322.665912][ T9625] tg_set_conf.isra.0+0x1ed/0x500 [ 322.665936][ T9625] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 322.665963][ T9625] ? kernfs_root+0xf8/0x2a0 [ 322.665989][ T9625] cgroup_file_write+0x1e6/0x8a0 [ 322.666012][ T9625] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 322.666033][ T9625] ? __pfx_cgroup_file_write+0x10/0x10 [ 322.666082][ T9625] ? __kmalloc_noprof+0x350/0x840 [ 322.666117][ T9625] kernfs_fop_write_iter+0x3e0/0x5f0 [ 322.666150][ T9625] ? __pfx_cgroup_file_write+0x10/0x10 [ 322.666176][ T9625] vfs_write+0x6af/0x1050 [ 322.666203][ T9625] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 322.666232][ T9625] ? __pfx_vfs_write+0x10/0x10 [ 322.666255][ T9625] ? find_held_lock+0x2b/0x80 [ 322.666298][ T9625] ksys_write+0x12a/0x250 [ 322.666323][ T9625] ? __pfx_ksys_write+0x10/0x10 [ 322.666356][ T9625] __do_fast_syscall_32+0x14b/0x8c0 [ 322.666384][ T9625] do_fast_syscall_32+0x32/0x70 [ 322.666406][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.666431][ T9625] RIP: 0023:0xf742efbc [ 322.666448][ T9625] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 322.666466][ T9625] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 322.666486][ T9625] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 322.666500][ T9625] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.666511][ T9625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.666522][ T9625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.666533][ T9625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.666561][ T9625] [ 323.628382][ T5864] lo speed is unknown, defaulting to 1000 [ 324.308707][ T9632] warn_alloc: 1 callbacks suppressed [ 324.308726][ T9632] syz.3.946: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 324.308776][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.3.946 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 324.308798][ T9632] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 324.308803][ T9632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.308812][ T9632] Call Trace: [ 324.308818][ T9632] [ 324.308824][ T9632] dump_stack_lvl+0x100/0x190 [ 324.308852][ T9632] warn_alloc.cold+0x9e/0xb2 [ 324.308872][ T9632] ? __pfx_warn_alloc+0x10/0x10 [ 324.308895][ T9632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 324.308915][ T9632] ? __pfx_get_page_from_freelist+0x10/0x10 [ 324.308940][ T9632] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 324.308973][ T9632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.308992][ T9632] ? do_raw_spin_lock+0x128/0x260 [ 324.309011][ T9632] ? find_held_lock+0x2b/0x80 [ 324.309029][ T9632] ? debug_check_no_obj_freed+0x31f/0x630 [ 324.309065][ T9632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.309083][ T9632] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 324.309106][ T9632] ? policy_nodemask+0xed/0x4f0 [ 324.309156][ T9632] alloc_pages_mpol+0x201/0x560 [ 324.309182][ T9632] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 324.309207][ T9632] ? __free_frozen_pages+0x766/0x1110 [ 324.309239][ T9632] folio_alloc_mpol_noprof+0x36/0x260 [ 324.309261][ T9632] alloc_migration_target_by_mpol+0x2c1/0x650 [ 324.309285][ T9632] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 324.309306][ T9632] ? __pfx___might_resched+0x10/0x10 [ 324.309338][ T9632] migrate_pages_batch+0x5c2/0x4700 [ 324.309371][ T9632] ? __pfx_kasan_save_track+0x10/0x10 [ 324.309396][ T9632] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 324.309424][ T9632] ? migrate_pages_sync+0x12c/0x880 [ 324.309453][ T9632] ? migrate_pages_sync+0x588/0x880 [ 324.309483][ T9632] ? __pfx_migrate_pages_batch+0x10/0x10 [ 324.309519][ T9632] ? __pfx_migrate_pages_sync+0x10/0x10 [ 324.309556][ T9632] migrate_pages+0x1946/0x2840 [ 324.309572][ T9632] ? lock_acquire+0x1d1/0x380 [ 324.309585][ T9632] ? current_cpuset_is_being_rebound+0x24/0x370 [ 324.309608][ T9632] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 324.309637][ T9632] ? __pfx_migrate_pages+0x10/0x10 [ 324.309656][ T9632] ? do_mbind+0x555/0xfd0 [ 324.309680][ T9632] do_mbind+0x5a4/0xfd0 [ 324.309702][ T9632] ? __pfx_do_mbind+0x10/0x10 [ 324.309719][ T9632] ? madvise_unlock+0xa9/0x220 [ 324.309750][ T9632] ? __pfx_get_nodes+0x10/0x10 [ 324.309779][ T9632] kernel_mbind+0x1b7/0x200 [ 324.309801][ T9632] ? __pfx_kernel_mbind+0x10/0x10 [ 324.309829][ T9632] __do_fast_syscall_32+0x14b/0x8c0 [ 324.309877][ T9632] do_fast_syscall_32+0x32/0x70 [ 324.309898][ T9632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.309920][ T9632] RIP: 0023:0xf742efbc [ 324.309935][ T9632] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 324.309953][ T9632] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 324.309972][ T9632] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 324.309983][ T9632] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 324.309994][ T9632] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 324.310003][ T9632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 324.310012][ T9632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.310037][ T9632] [ 324.310125][ T9632] Mem-Info: [ 324.310137][ T9632] active_anon:4326 inactive_anon:2106 isolated_anon:512 [ 324.310137][ T9632] active_file:4300 inactive_file:21685 isolated_file:0 [ 324.310137][ T9632] unevictable:2048 dirty:440 writeback:0 [ 324.310137][ T9632] slab_reclaimable:6388 slab_unreclaimable:57566 [ 324.310137][ T9632] mapped:27873 shmem:5266 pagetables:1203 [ 324.310137][ T9632] sec_pagetables:313 bounce:0 [ 324.310137][ T9632] kernel_misc_reclaimable:0 [ 324.310137][ T9632] free:41780 free_pcp:386 free_cma:0 [ 324.310180][ T9632] Node 0 active_anon:0kB inactive_anon:68kB active_file:0kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8640kB pagetables:1444kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 324.310226][ T9632] Node 0 DMA free:2668kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:72kB free_cma:0kB [ 324.310275][ T9632] lowmem_reserve[]: 0 256 256 256 256 [ 324.310308][ T9632] Node 0 DMA32 free:29376kB boost:25992kB min:37544kB low:40432kB high:43320kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:64kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:4kB zspages:356kB present:1032196kB managed:262872kB mlocked:0kB bounce:0kB free_pcp:1472kB local_pcp:984kB free_cma:0kB [ 324.310359][ T9632] lowmem_reserve[]: 0 0 0 0 0 [ 324.310390][ T9632] Node 0 DMA: 101*4kB (UM) 13*8kB (UM) 7*16kB (UM) 12*32kB (UM) 14*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2668kB [ 324.310507][ T9632] Node 0 DMA32: 618*4kB (UME) 129*8kB (UME) 85*16kB (UM) 198*32kB (UME) 68*64kB (UME) 20*128kB (UME) 14*256kB (UM) 3*512kB (U) 4*1024kB (UM) 1*2048kB (M) 0*4096kB = 29376kB [ 324.310646][ T9632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.310661][ T9632] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 324.310677][ T9632] 32144 total pagecache pages [ 324.310683][ T9632] 895 pages in swap cache [ 324.310689][ T9632] Free swap = 108640kB [ 324.310697][ T9632] Total swap = 124996kB [ 324.310703][ T9632] 524155 pages RAM [ 324.310711][ T9632] 0 pages HighMem/MovableOnly [ 324.310716][ T9632] 217545 pages reserved [ 324.310722][ T9632] 0 pages cma reserved [ 325.090097][ T9646] fuse: fd is not a fuse device [ 325.209710][ T9650] fuse: Bad value for 'fd' [ 325.209814][ T9649] fuse: Bad value for 'rootmode' [ 329.060486][ T9684] fuse: fd is not a fuse device [ 329.109614][ T9686] fuse: Unknown parameter '0x0000000000000005' [ 330.034033][ T9699] ip6t_hbh: too many supported opts specified [ 330.139900][ T9699] netlink: 'syz.0.967': attribute type 39 has an invalid length. [ 331.912799][ T9717] FAULT_INJECTION: forcing a failure. [ 331.912799][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 331.912839][ T9717] CPU: 3 UID: 0 PID: 9717 Comm: syz.3.971 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 331.912867][ T9717] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 331.912875][ T9717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.912887][ T9717] Call Trace: [ 331.912894][ T9717] [ 331.912901][ T9717] dump_stack_lvl+0x100/0x190 [ 331.912934][ T9717] should_fail_ex.cold+0x5/0xa [ 331.912959][ T9717] should_failslab+0xc2/0x120 [ 331.912986][ T9717] kmem_cache_alloc_noprof+0x92/0x6a0 [ 331.913009][ T9717] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 331.913039][ T9717] ? acpi_ut_create_update_state+0x72/0x130 [ 331.913071][ T9717] acpi_ut_create_update_state+0x72/0x130 [ 331.913097][ T9717] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 331.913121][ T9717] acpi_ut_update_object_reference+0x32f/0x800 [ 331.913145][ T9717] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 331.913163][ T9717] ? __pfx_acpi_ut_trace+0x10/0x10 [ 331.913216][ T9717] ? __pfx_acpi_ut_trace+0x10/0x10 [ 331.913244][ T9717] ? acpi_ut_status_exit+0x111/0x1c0 [ 331.913276][ T9717] acpi_ut_add_reference+0x80/0x170 [ 331.913296][ T9717] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 331.913320][ T9717] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 331.913344][ T9717] ? acpi_ds_create_operand+0x267/0xc20 [ 331.913373][ T9717] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 331.913394][ T9717] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 331.913413][ T9717] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 331.913438][ T9717] ? __asan_memset+0x23/0x50 [ 331.913459][ T9717] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 331.913498][ T9717] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 331.913525][ T9717] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 331.913552][ T9717] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 331.913576][ T9717] ? acpi_ut_trace_ptr+0x101/0x2a0 [ 331.913608][ T9717] acpi_ds_exec_end_op+0xb78/0x1e60 [ 331.913637][ T9717] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 331.913662][ T9717] acpi_ps_parse_loop+0x5e1/0x26e0 [ 331.913698][ T9717] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 331.913722][ T9717] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 331.913744][ T9717] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 331.913770][ T9717] ? acpi_ut_create_thread_state+0x6d/0x170 [ 331.913802][ T9717] acpi_ps_parse_aml+0x81e/0x1120 [ 331.913830][ T9717] acpi_ps_execute_method+0x5c4/0xe90 [ 331.913853][ T9717] acpi_ns_evaluate+0x640/0x1670 [ 331.913879][ T9717] acpi_ut_evaluate_object+0xf7/0x610 [ 331.913902][ T9717] acpi_rs_get_prt_method_data+0xa0/0x150 [ 331.913924][ T9717] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 331.913941][ T9717] ? acpi_ut_status_exit+0x111/0x1c0 [ 331.913969][ T9717] ? acpi_rs_validate_parameters+0x104/0x210 [ 331.913991][ T9717] acpi_get_irq_routing_table+0xb8/0x140 [ 331.914011][ T9717] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 331.914035][ T9717] ? preempt_schedule_thunk+0x16/0x40 [ 331.914059][ T9717] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 331.914084][ T9717] ? do_raw_spin_lock+0x128/0x260 [ 331.914108][ T9717] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 331.914133][ T9717] ? mark_held_locks+0x40/0x70 [ 331.914163][ T9717] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 331.914197][ T9717] acpi_pci_irq_lookup+0x8e/0x6b0 [ 331.914217][ T9717] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 331.914245][ T9717] acpi_pci_irq_disable+0x1a8/0x360 [ 331.914264][ T9717] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 331.914285][ T9717] pcibios_disable_device+0x89/0xb0 [ 331.914313][ T9717] do_pci_disable_device+0x9f/0x100 [ 331.914333][ T9717] ? __pfx_do_pci_disable_device+0x10/0x10 [ 331.914356][ T9717] ? pci_release_region.part.0+0x15b/0x2e0 [ 331.914382][ T9717] pci_disable_device+0x130/0x270 [ 331.914402][ T9717] virtio_pci_remove+0xcf/0x110 [ 331.914422][ T9717] pci_device_remove+0xb2/0x1d0 [ 331.914447][ T9717] ? __pfx_pci_device_remove+0x10/0x10 [ 331.914484][ T9717] device_remove+0xcb/0x180 [ 331.914568][ T9717] device_release_driver_internal+0x441/0x610 [ 331.914602][ T9717] pci_stop_bus_device+0x120/0x160 [ 331.914623][ T9717] pci_stop_and_remove_bus_device+0x58/0xa0 [ 331.914642][ T9717] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 331.914662][ T9717] remove_store+0x123/0x140 [ 331.914682][ T9717] ? __pfx_remove_store+0x10/0x10 [ 331.914704][ T9717] ? find_held_lock+0x2b/0x80 [ 331.914727][ T9717] ? sysfs_file_kobj+0xe4/0x290 [ 331.914754][ T9717] ? sysfs_file_kobj+0xe4/0x290 [ 331.914782][ T9717] ? __pfx_remove_store+0x10/0x10 [ 331.914800][ T9717] dev_attr_store+0x58/0x80 [ 331.914819][ T9717] ? __pfx_dev_attr_store+0x10/0x10 [ 331.914836][ T9717] sysfs_kf_write+0xf2/0x150 [ 331.914863][ T9717] kernfs_fop_write_iter+0x3e0/0x5f0 [ 331.914886][ T9717] ? __pfx_sysfs_kf_write+0x10/0x10 [ 331.914915][ T9717] vfs_write+0x6af/0x1050 [ 331.914940][ T9717] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 331.914966][ T9717] ? __pfx_vfs_write+0x10/0x10 [ 331.914985][ T9717] ? find_held_lock+0x2b/0x80 [ 331.915023][ T9717] ksys_write+0x12a/0x250 [ 331.915045][ T9717] ? __pfx_ksys_write+0x10/0x10 [ 331.915075][ T9717] __do_fast_syscall_32+0x14b/0x8c0 [ 331.915096][ T9717] ? lockdep_hardirqs_on+0x7d/0x110 [ 331.915119][ T9717] do_fast_syscall_32+0x32/0x70 [ 331.915141][ T9717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.915164][ T9717] RIP: 0023:0xf742efbc [ 331.915181][ T9717] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 331.915199][ T9717] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 331.915220][ T9717] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000ac0 [ 331.915231][ T9717] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.915240][ T9717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.915249][ T9717] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 331.915259][ T9717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.915284][ T9717] [ 331.938535][ T9717] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 332.971737][ T9722] fuse: Unknown parameter 'use00000000000000000000' [ 333.256864][ T9725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.974'. [ 333.986603][ T9728] netlink: 'syz.0.975': attribute type 5 has an invalid length. [ 334.044318][ T9730] 9pnet_virtio: no channels available for device syz [ 334.136421][ T5860] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.136467][ T5860] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.136497][ T5860] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.136526][ T5860] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.174309][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 335.174689][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 335.217806][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 335.217947][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 335.504551][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 335.504693][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 335.742469][ T9746] ceph: No mds server is up or the cluster is laggy [ 336.113319][ T64] libceph: connect (1)[c::]:6789 error -101 [ 336.113466][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 336.635931][ T9756] geneve0: entered promiscuous mode [ 336.641936][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 337.342999][ T9768] fuse: Unknown parameter 'use00000000000000000000' [ 337.652607][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 337.817244][ T9783] fuse: Unknown parameter '0x0000000000000005' [ 339.539986][ T9805] rxe_eth0 speed is unknown, defaulting to 1000 [ 340.264112][ T9805] lo speed is unknown, defaulting to 1000 [ 340.406172][ T9820] fuse: Unknown parameter 'use00000000000000000000' [ 342.278939][ T9839] fuse: fd is not a fuse device [ 342.448721][ T9841] fuse: Unknown parameter '0x0000000000000005' [ 345.664528][ T9871] fuse: Unknown parameter '0x0000000000000005' [ 346.216094][ T9881] overlay: filesystem on ./file0 not supported [ 346.258671][ T9884] fuse: Unknown parameter '0x0000000000000004' [ 348.757567][ T9909] fuse: fd is not a fuse device [ 348.948231][ T9913] fuse: Unknown parameter 'user_i00000000000000000000' [ 349.173104][ T9917] fuse: Unknown parameter '0x0000000000000005' [ 353.774457][ T9940] ALSA: mixer_oss: invalid OSS volume '' [ 354.695608][ T9949] fuse: Unknown parameter '0x0000000000000004' [ 354.729235][ T9947] fuse: Unknown parameter 'user_id00000000000000000000' [ 354.932417][ T9955] fuse: Unknown parameter '0x0000000000000005' [ 355.169070][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 356.117198][ T9975] fuse: fd is not a fuse device [ 357.235444][ T9962] Bluetooth: hci0: command 0x040f tx timeout [ 357.267124][ T5792] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 358.099096][ T9987] fuse: Unknown parameter '0x0000000000000004' [ 358.101648][ T9991] fuse: Unknown parameter '0x0000000000000004' [ 358.129582][ T9990] fuse: Unknown parameter 'user_id00000000000000000000' [ 358.191088][ T9993] fuse: fd is not a fuse device [ 358.780321][T10009] fuse: fd is not a fuse device [ 360.122869][T10025] fuse: Unknown parameter 'fd0x0000000000000004' [ 360.400729][T10030] fuse: fd is not a fuse device [ 360.832013][T10039] fuse: fd is not a fuse device [ 360.955943][T10043] fuse: fd is not a fuse device [ 361.259089][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.259599][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.260010][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.260435][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.261990][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.262397][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.262806][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.263206][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.263913][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.264311][T10045] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 361.827635][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 361.829070][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 362.184771][T10054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1063'. [ 362.445045][T10061] fuse: Bad value for 'fd' [ 362.503057][T10063] fuse: Unknown parameter 'fd0x0000000000000005' [ 362.730145][T10068] fuse: fd is not a fuse device [ 362.732172][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 365.436881][T10099] fuse: Bad value for 'fd' [ 369.307100][ C2] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 2: transmit queue 0 timed out 5390 ms [ 369.311853][ T50] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly [ 369.348885][ T50] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 375.464591][T10170] fuse: Unknown parameter 'fd0x0000000000000004' [ 378.121706][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.121764][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.814146][ T50] e1000e 0000:00:02.0 eth1: Hardware Error [ 378.937667][T10179] ip6t_hbh: too many supported opts specified [ 378.975111][T10179] netlink: 'syz.1.1097': attribute type 39 has an invalid length. [ 379.063159][ T50] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 379.553022][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 379.553038][ T42] audit: type=1326 audit(1793064693.310:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.553072][ T42] audit: type=1326 audit(1793064693.310:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.555074][ T42] audit: type=1326 audit(1793064693.310:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.592831][ T42] audit: type=1326 audit(1793064693.350:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.592878][ T42] audit: type=1326 audit(1793064693.350:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.599306][ T42] audit: type=1326 audit(1793064693.360:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71877ab code=0x7ffc0000 [ 379.599370][ T42] audit: type=1326 audit(1793064693.360:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.599407][ T42] audit: type=1326 audit(1793064693.360:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.599443][ T42] audit: type=1326 audit(1793064693.360:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 379.599480][ T42] audit: type=1326 audit(1793064693.360:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 380.399984][T10207] fuse: fd is not a fuse device [ 380.599337][ T64] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 380.745439][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 380.746265][ T64] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.747485][ T64] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 380.747524][ T64] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.747544][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.747563][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.747582][ T64] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.747614][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.087182][ T64] usb 8-1: GET_CAPABILITIES returned 0 [ 381.087252][ T64] usbtmc 8-1:16.0: can't read capabilities [ 381.328543][ T9] usb 8-1: USB disconnect, device number 5 [ 383.616613][T10235] fuse: Unknown parameter '0x0000000000000005' [ 384.034439][T10239] Set syz0 is full, maxelem 0 reached [ 385.658428][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1112'. [ 386.341354][T10272] team0 (unregistering): Port device team_slave_0 removed [ 386.392630][T10272] team0 (unregistering): Port device team_slave_1 removed [ 386.492057][T10277] fuse: Unknown parameter '0x0000000000000005' [ 387.907790][T10288] team0 (unregistering): Port device team_slave_0 removed [ 388.115382][T10288] team0 (unregistering): Port device team_slave_1 removed [ 388.188965][T10298] Set syz0 is full, maxelem 0 reached [ 388.978533][T10309] ublk_ctrl_add_dev: invalid recovery flags 10 [ 389.596289][ T860] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 389.761376][ T860] usb 8-1: Using ep0 maxpacket: 8 [ 390.332399][ T860] usb 8-1: unable to get BOS descriptor or descriptor too short [ 390.332442][ T860] usb 8-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 390.333623][ T860] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 390.333654][ T860] usb 8-1: can't read configurations, error -71 [ 392.717853][T10348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1130'. [ 395.395582][T10396] 9pnet_virtio: no channels available for device syz [ 396.835402][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.065363][T10437] fuse: fd is not a fuse device [ 400.941308][T10451] fuse: fd is not a fuse device [ 403.917854][T10475] fuse: Bad value for 'fd' [ 407.086381][T10515] fuse: fd is not a fuse device [ 408.504237][T10542] fuse: fd is not a fuse device [ 408.631770][T10544] fuse: fd is not a fuse device [ 413.903326][T10582] fuse: fd is not a fuse device [ 414.648608][T10595] comedi comedi3: board detection failed [ 415.331926][T10596] uprobe: syz.2.1188:10596 failed to unregister, leaking uprobe [ 416.449175][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 417.276036][T10628] fuse: fd is not a fuse device [ 417.287837][T10626] netlink: 'syz.3.1196': attribute type 13 has an invalid length. [ 417.328784][T10630] fuse: fd is not a fuse device [ 417.993772][T10640] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.674837][T10666] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 420.749302][T10640] lo speed is unknown, defaulting to 1000 [ 420.750415][T10644] rxe_eth0 speed is unknown, defaulting to 1000 [ 421.265656][T10669] fuse: fd is not a fuse device [ 421.474234][T10644] lo speed is unknown, defaulting to 1000 [ 421.926889][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 422.082246][T10682] vxcan1 (unregistering): left allmulticast mode [ 422.890962][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 423.068807][T10697] sctp_transport_update_pmtu: 39 callbacks suppressed [ 423.068832][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.069390][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.069828][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.070329][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.073624][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.074127][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.074623][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.075053][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.093078][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.093669][T10697] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 423.563279][T10700] tmpfs: Unknown parameter '0x0000000000000004' [ 423.757362][ T5792] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 423.758693][ T5792] Bluetooth: hci0: unexpected event for opcode 0x204b [ 425.065466][ T5864] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 425.274323][ T5864] usb 8-1: not running at top speed; connect to a high speed hub [ 425.274358][ T5864] usb 8-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 425.304375][ T5864] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 425.304401][ T5864] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.304418][ T5864] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 425.304458][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.365960][ T5864] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -22 [ 425.609019][T10728] fuse: fd is not a fuse device [ 425.988487][ T50] usb 8-1: USB disconnect, device number 8 [ 427.790219][ T5792] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 427.790291][ T5792] Bluetooth: hci0: Injecting HCI hardware error event [ 427.794522][ T9962] Bluetooth: hci0: hardware error 0x00 [ 429.960201][ T9962] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 432.485654][T10792] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 432.525476][T10792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1236'. [ 432.525506][T10792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1236'. [ 432.525517][T10792] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 433.943380][T10822] fuse: fd is not a fuse device [ 435.573988][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 435.618518][T10837] vlan1: entered allmulticast mode [ 435.618539][T10837] bridge2: entered allmulticast mode [ 435.624104][T10837] bridge2: port 1(erspan0) entered blocking state [ 435.624241][T10837] bridge2: port 1(erspan0) entered disabled state [ 435.624336][T10837] erspan0: entered allmulticast mode [ 435.655982][T10837] erspan0: entered promiscuous mode [ 435.656836][T10837] bridge2: port 1(erspan0) entered blocking state [ 435.656921][T10837] bridge2: port 1(erspan0) entered forwarding state [ 436.466488][T10841] fuse: fd is not a fuse device [ 438.003397][T10863] fuse: fd is not a fuse device [ 439.290431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 439.557470][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.557543][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.309761][T10903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.336482][T10903] md: md3 stopped. [ 442.894534][T10906] program syz.3.1266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.958788][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'. [ 443.958898][T10910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.089110][T10910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.984239][ T9962] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 448.002001][ T9962] Bluetooth: hci1: unexpected event for opcode 0x204b [ 449.665749][T10984] Invalid ELF header magic: != ELF [ 449.801154][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.238505][T11007] bridge0: port 3(syz_tun) entered blocking state [ 451.238598][T11007] bridge0: port 3(syz_tun) entered listening state [ 451.238800][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.238943][T11007] bridge0: port 2(bridge_slave_1) entered listening state [ 451.239146][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.239249][T11007] bridge0: port 1(bridge_slave_0) entered listening state [ 451.394146][T11007] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 452.035873][ T9962] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 452.036248][ T9962] Bluetooth: hci1: Injecting HCI hardware error event [ 452.037378][ T9962] Bluetooth: hci1: hardware error 0x00 [ 453.339699][T11020] fuse: fd is not a fuse device [ 453.611979][T11023] fuse: fd is not a fuse device [ 454.210682][ T9962] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 454.490223][T11034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 454.696778][T11038] No source specified [ 454.742200][T11038] netlink: 'syz.1.1299': attribute type 4 has an invalid length. [ 454.742228][T11038] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.1299'. [ 455.640485][T11037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.719719][T11042] null_blk: nullb1: using native zone append [ 456.163115][T11042] null_blk: disk nullb1 created [ 456.424153][T11054] fuse: fd is not a fuse device [ 456.502463][T11057] fuse: fd is not a fuse device [ 457.638005][T11069] overlayfs: upper fs does not support file handles, falling back to index=off. [ 457.717906][T11069] overlayfs: failed lookup in lower (newroot/333, name='file0', err=-40): overlapping layers [ 461.069898][T11118] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 463.323534][T11152] overlay: Unknown parameter '/' [ 464.339381][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 465.119599][T11171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 465.345506][T11171] md: could not open device unknown-block(1,0). [ 465.451729][T11175] md: could not open device unknown-block(1,1). [ 467.525754][T11192] md: could not open device unknown-block(1,0). [ 467.903629][T11203] fuse: fd is not a fuse device [ 469.120073][T11224] md: could not open device unknown-block(1,6). [ 469.455031][T11234] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 469.625669][T11234] md: could not open device unknown-block(1,0). [ 469.677896][T11238] md: md0 stopped. [ 469.715608][T11234] md: could not open device unknown-block(1,1). [ 472.165842][T11276] md: could not open device unknown-block(1,6). [ 472.596796][T11284] fuse: fd is not a fuse device [ 472.692425][T11289] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 473.055492][T11289] md: could not open device unknown-block(1,6). [ 473.362336][T11289] md/raid1:md3: active with 1 out of 2 mirrors [ 473.362754][T11289] md3: detected capacity change from 0 to 1024 [ 473.752963][T11290] md3: detected capacity change from 1024 to 0 [ 473.752983][T11290] md: md3 stopped. [ 476.796942][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1383'. [ 476.992894][T11352] IPVS: set_ctl: invalid protocol: 41 100.1.1.5:20003 [ 477.249213][T11354] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 478.818613][T11382] netlink: 'syz.2.1389': attribute type 13 has an invalid length. [ 480.119031][T11390] warn_alloc: 1 callbacks suppressed [ 480.119053][T11390] syz.1.1398: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.119151][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.1.1398 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 480.119180][T11390] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 480.119188][T11390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.119199][T11390] Call Trace: [ 480.119205][T11390] [ 480.119246][T11390] dump_stack_lvl+0x100/0x190 [ 480.119280][T11390] ? do_replace+0x1c6/0x490 [ 480.119298][T11390] warn_alloc.cold+0x9e/0xb2 [ 480.119330][T11390] ? __pfx_warn_alloc+0x10/0x10 [ 480.119369][T11390] ? do_replace+0x1c6/0x490 [ 480.119389][T11390] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 480.119443][T11390] ? __lock_acquire+0x5c0/0x1f40 [ 480.119465][T11390] ? do_replace+0x1c6/0x490 [ 480.119484][T11390] ? do_raw_spin_lock+0x128/0x260 [ 480.119508][T11390] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.119536][T11390] ? __lock_acquire+0x5c0/0x1f40 [ 480.119553][T11390] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 480.119585][T11390] ? do_replace+0x1c6/0x490 [ 480.119603][T11390] __vmalloc_node_noprof+0xad/0xf0 [ 480.119631][T11390] ? do_replace+0x1c6/0x490 [ 480.119652][T11390] __vmalloc_noprof+0xa3/0x120 [ 480.119678][T11390] ? __pfx___vmalloc_noprof+0x10/0x10 [ 480.119712][T11390] do_replace+0x1c6/0x490 [ 480.119733][T11390] ? __pfx_do_replace+0x10/0x10 [ 480.119760][T11390] ? register_lock_class+0x3f/0x7b0 [ 480.119782][T11390] compat_do_replace+0x589/0x7a0 [ 480.119805][T11390] ? __pfx_compat_do_replace+0x10/0x10 [ 480.119826][T11390] ? hook_capable+0x1bc/0x500 [ 480.119855][T11390] ? bpf_lsm_capable+0x9/0x10 [ 480.119881][T11390] ? security_capable+0x80/0x260 [ 480.119906][T11390] do_ebt_set_ctl+0x3f4/0x4a0 [ 480.119927][T11390] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 480.119949][T11390] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 480.119980][T11390] ? nf_sockopt_find.isra.0+0x222/0x290 [ 480.120010][T11390] nf_setsockopt+0x8d/0xf0 [ 480.120037][T11390] ip_setsockopt+0xcb/0xf0 [ 480.120062][T11390] tcp_setsockopt+0xa7/0x100 [ 480.120094][T11390] smc_setsockopt+0x1b6/0xad0 [ 480.120113][T11390] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 480.120142][T11390] ? __pfx_smc_setsockopt+0x10/0x10 [ 480.120160][T11390] ? aa_sock_opt_perm+0x114/0x1e0 [ 480.120181][T11390] ? __pfx_smc_setsockopt+0x10/0x10 [ 480.120201][T11390] do_sock_setsockopt+0xf3/0x1d0 [ 480.120232][T11390] __sys_setsockopt+0x119/0x190 [ 480.120259][T11390] __ia32_sys_setsockopt+0xbc/0x160 [ 480.120278][T11390] ? __might_fault+0x111/0x140 [ 480.120298][T11390] __do_fast_syscall_32+0x14b/0x8c0 [ 480.120337][T11390] do_fast_syscall_32+0x32/0x70 [ 480.120361][T11390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.120386][T11390] RIP: 0023:0xf7f26fbc [ 480.120402][T11390] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 480.120418][T11390] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 480.120438][T11390] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 480.120450][T11390] RDX: 0000000000000080 RSI: 0000000080000400 RDI: 0000000000000108 [ 480.120461][T11390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.120471][T11390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 480.120482][T11390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.120505][T11390] [ 480.120560][T11390] Mem-Info: [ 480.120574][T11390] active_anon:5422 inactive_anon:2330 isolated_anon:0 [ 480.120574][T11390] active_file:3475 inactive_file:19570 isolated_file:0 [ 480.120574][T11390] unevictable:2048 dirty:479 writeback:2 [ 480.120574][T11390] slab_reclaimable:6468 slab_unreclaimable:57916 [ 480.120574][T11390] mapped:23009 shmem:6489 pagetables:1258 [ 480.120574][T11390] sec_pagetables:315 bounce:0 [ 480.120574][T11390] kernel_misc_reclaimable:0 [ 480.120574][T11390] free:41425 free_pcp:11326 free_cma:0 [ 480.120620][T11390] Node 0 active_anon:20kB inactive_anon:48kB active_file:108kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:4kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1444kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.120664][T11390] Node 1 active_anon:21668kB inactive_anon:9272kB active_file:13792kB inactive_file:78248kB unevictable:8192kB isolated(anon):0kB isolated(file):0kB mapped:92012kB dirty:1916kB writeback:4kB shmem:25956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6068kB pagetables:3588kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 480.120709][T11390] Node 0 DMA free:2912kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.120755][T11390] lowmem_reserve[]: 0 256 256 256 256 [ 480.120786][T11390] Node 0 DMA32 free:32124kB boost:25992kB min:37544kB low:40432kB high:43320kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:48kB active_file:108kB inactive_file:28kB unevictable:0kB writepending:4kB zspages:356kB present:1032196kB managed:262872kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:80kB free_cma:0kB [ 480.120833][T11390] lowmem_reserve[]: 0 0 0 0 0 [ 480.120862][T11390] Node 1 DMA32 free:130664kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21668kB inactive_anon:9272kB active_file:13792kB inactive_file:78248kB unevictable:8192kB writepending:1920kB zspages:4120kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:45016kB local_pcp:13068kB free_cma:0kB [ 480.120912][T11390] lowmem_reserve[]: 0 0 0 0 0 [ 480.120942][T11390] Node 0 DMA: 116*4kB (UM) 20*8kB (UM) 11*16kB (UM) 14*32kB (UM) 14*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2912kB [ 480.121096][T11390] Node 0 DMA32: 763*4kB (UME) 162*8kB (UME) 88*16kB (UM) 210*32kB (UME) 69*64kB (UME) 21*128kB (UME) 13*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 0*4096kB = 32124kB [ 480.191531][T11390] Node 1 DMA32: 1017*4kB (UM) 336*8kB (UME) 321*16kB (UME) 399*32kB (UME) 229*64kB (UME) 181*128kB (UME) 76*256kB (UME) 37*512kB (UM) 19*1024kB (UM) 3*2048kB (M) 1*4096kB (U) = 130580kB [ 480.191680][T11390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.191694][T11390] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 480.191707][T11390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.191720][T11390] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 480.191734][T11390] 30502 total pagecache pages [ 480.191744][T11390] 970 pages in swap cache [ 480.191751][T11390] Free swap = 108432kB [ 480.191758][T11390] Total swap = 124996kB [ 480.191765][T11390] 524155 pages RAM [ 480.191771][T11390] 0 pages HighMem/MovableOnly [ 480.191777][T11390] 217545 pages reserved [ 480.191783][T11390] 0 pages cma reserved [ 480.774045][T11394] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 481.040037][T11396] md: could not open device unknown-block(1,0). [ 481.076155][T11394] md: could not open device unknown-block(1,1). [ 481.654255][T11406] fuse: fd is not a fuse device [ 481.790534][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 481.791324][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 481.791461][ C0] bridge0: port 3(syz_tun) entered learning state [ 481.808978][T11408] overlayfs: failed to clone upperpath [ 481.818760][T11408] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 481.882425][T11408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.225086][T11410] bond3: (slave veth3): Enslaving as an active interface with a down link [ 482.313394][T11408] bond3: (slave macvlan0): making interface the new active one [ 482.333420][T11408] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 483.016326][T11431] overlayfs: failed to clone lowerpath [ 483.021539][T11432] fuse: fd is not a fuse device [ 483.084222][T11433] overlayfs: failed to clone lowerpath [ 484.384186][T11448] jffs2: notice: (11448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 484.789438][T11460] fuse: fd is not a fuse device [ 487.067247][T11485] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 487.206753][T11491] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 487.438751][T11494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 487.609076][T11491] md/raid1:md3: active with 1 out of 2 mirrors [ 487.609654][T11491] md3: detected capacity change from 0 to 1024 [ 487.616666][T11498] JFS: charset not found [ 487.659562][T11494] md: could not open device unknown-block(1,0). [ 487.716896][T11501] md: recover of RAID array md3 [ 487.788353][T11501] md: md3: recover done. [ 487.837774][T11503] fuse: fd is not a fuse device [ 488.154137][T11511] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 488.454784][T11520] Invalid ELF header magic: != ELF [ 488.572735][T11518] md: could not open device unknown-block(1,6). [ 489.000219][ T34] e1000 0000:00:07.0 eth0: Reset adapter [ 489.011087][T11511] md3: detected capacity change from 1024 to 0 [ 489.011108][T11511] md: md3 stopped. [ 489.126492][ T5883] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 491.459238][T11547] fuse: fd is not a fuse device [ 491.879516][T11554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 492.233250][T11560] md: md3 stopped. [ 494.998349][T11579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 496.028743][T11585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.124104][T11597] fuse: fd is not a fuse device [ 498.658035][T11520] e1000e 0000:00:02.0 eth1: Hardware Error [ 498.909562][T11606] fuse: fd is not a fuse device [ 498.967813][T11520] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 499.275742][ T34] e1000 0000:00:07.0 eth0: Reset adapter [ 499.313671][T11609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 499.606113][T11611] md: md0 stopped. [ 499.655665][T11609] md: could not open device unknown-block(1,0). [ 499.697616][T11623] fuse: fd is not a fuse device [ 499.736106][T11618] lo: entered allmulticast mode [ 499.757552][ T34] e1000 0000:00:07.0 eth0: Reset adapter [ 499.833373][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.860343][T11631] fuse: fd is not a fuse device [ 499.946053][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.950517][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.490454][T11628] lo: left allmulticast mode [ 501.022515][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.022567][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.163780][T11627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.186732][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 509.763240][T11678] fuse: fd is not a fuse device [ 509.842707][ T42] audit: type=1326 audit(1793064823.600:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 509.842756][ T42] audit: type=1326 audit(1793064823.600:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 509.842931][ T42] audit: type=1326 audit(1793064823.600:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 509.843008][ T42] audit: type=1326 audit(1793064823.600:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 509.843045][ T42] audit: type=1326 audit(1793064823.600:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 509.843103][ T42] audit: type=1326 audit(1793064823.600:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 510.049334][ T42] audit: type=1326 audit(1793064823.790:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 510.050526][ T42] audit: type=1326 audit(1793064823.790:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 510.050572][ T42] audit: type=1326 audit(1793064823.790:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 510.050607][ T42] audit: type=1326 audit(1793064823.790:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.0.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efbc code=0x7ffc0000 [ 510.251029][T11683] jffs2: notice: (11683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 511.273325][T11701] fuse: fd is not a fuse device [ 511.308087][T11699] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 511.488249][T11705] fuse: fd is not a fuse device [ 511.891584][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 511.891608][ C0] bridge0: topology change detected, propagating [ 511.891988][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.892001][ C0] bridge0: topology change detected, propagating [ 511.892089][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.892100][ C0] bridge0: topology change detected, propagating [ 512.051288][T11699] batman_adv: batadv0: Interface deactivated: syz_tun [ 512.108728][T11699] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.110272][T11699] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.140852][ T5883] syz1: Port: 1 Link DOWN [ 512.304025][T11720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.680781][T11720] md: could not open device unknown-block(1,6). [ 512.719017][T11720] md: md3 stopped. [ 512.881707][T11721] md: could not open device unknown-block(1,7). [ 512.990331][ T9] lo speed is unknown, defaulting to 1000 [ 512.990368][ T9] syz0: Port: 1 Link DOWN [ 514.134585][T11750] jffs2: notice: (11750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 514.175526][T11754] fuse: fd is not a fuse device [ 514.801369][T11762] FAULT_INJECTION: forcing a failure. [ 514.801369][T11762] name failslab, interval 1, probability 0, space 0, times 0 [ 514.801403][T11762] CPU: 3 UID: 0 PID: 11762 Comm: syz.0.1484 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 514.801430][T11762] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 514.801438][T11762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.801448][T11762] Call Trace: [ 514.801455][T11762] [ 514.801463][T11762] dump_stack_lvl+0x100/0x190 [ 514.801493][T11762] should_fail_ex.cold+0x5/0xa [ 514.801520][T11762] should_failslab+0xc2/0x120 [ 514.801548][T11762] __kmalloc_noprof+0xfc/0x840 [ 514.801569][T11762] ? memcmp+0x12/0x1d0 [ 514.801589][T11762] ? tomoyo_supervisor+0x65d/0x1340 [ 514.801615][T11762] tomoyo_supervisor+0x65d/0x1340 [ 514.801642][T11762] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 514.801676][T11762] ? tomoyo_realpath_from_path+0x19c/0x690 [ 514.801714][T11762] tomoyo_path_number_perm+0x445/0x580 [ 514.801741][T11762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.801765][T11762] ? futex_wait+0x11e/0x370 [ 514.801801][T11762] ? __lock_acquire+0x5c0/0x1f40 [ 514.801828][T11762] ? __fget_files+0x34/0x3d0 [ 514.801852][T11762] ? find_held_lock+0x2b/0x80 [ 514.801871][T11762] ? __fget_files+0x215/0x3d0 [ 514.801891][T11762] ? hook_file_ioctl_common+0x140/0x440 [ 514.801919][T11762] ? __fget_files+0x21f/0x3d0 [ 514.801947][T11762] security_file_ioctl_compat+0xd3/0x230 [ 514.801974][T11762] __ia32_compat_sys_ioctl+0xc2/0x360 [ 514.802001][T11762] __do_fast_syscall_32+0x14b/0x8c0 [ 514.802026][T11762] do_fast_syscall_32+0x32/0x70 [ 514.802045][T11762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.802067][T11762] RIP: 0023:0xf742efbc [ 514.802082][T11762] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 514.802098][T11762] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 514.802116][T11762] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000089f1 [ 514.802127][T11762] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.802137][T11762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.802147][T11762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.802157][T11762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.802181][T11762] [ 517.751749][T11794] fuse: fd is not a fuse device [ 517.968460][T11780] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 519.663688][T11809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 519.853519][T11809] md: could not open device unknown-block(1,0). [ 519.885639][T11809] md: could not open device unknown-block(1,1). [ 521.424772][ T9962] Bluetooth: hci3: unexpected cc 0x0c23 length: 8 > 4 [ 521.424803][ T9962] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 523.791604][T11845] CIFS: Attempting to mount //127.0.0.1/share [ 524.733469][T11845] CIFS: VFS: cifs_mount failed w/return code = -512 [ 525.891584][T11872] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 526.617049][T11883] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.758569][T11883] lo speed is unknown, defaulting to 1000 [ 529.982169][T11904] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 529.982197][T11904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 529.984715][T11904] vhci_hcd vhci_hcd.0: Device attached [ 530.138452][T11913] vhci_hcd: connection closed [ 530.160480][ T5860] vhci_hcd vhci_hcd.3: stop threads [ 530.161534][ T5860] vhci_hcd vhci_hcd.3: release socket [ 530.163566][ T5860] vhci_hcd vhci_hcd.3: disconnect device [ 531.156182][T11715] e1000 0000:00:07.0 eth0: Reset adapter [ 531.167771][T11927] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 531.616475][ T5883] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 532.111776][T11949] fuse: fd is not a fuse device [ 534.874689][T11927] e1000e 0000:00:02.0 eth1: Hardware Error [ 535.355793][T11715] e1000 0000:00:07.0 eth0: Reset adapter [ 535.475751][T11715] e1000 0000:00:07.0 eth0: Reset adapter [ 535.682946][T11996] futex_wake_op: syz.2.1542 tries to shift op by 144; fix this program [ 537.626681][T11711] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 545.676022][T12050] syzkaller1: entered promiscuous mode [ 545.676038][T12050] syzkaller1: entered allmulticast mode [ 548.441088][T12102] futex_wake_op: syz.1.1560 tries to shift op by 144; fix this program [ 548.656844][T12108] set match dimension is over the limit! [ 548.756705][T12114] Invalid ELF header magic: != ELF [ 549.924163][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 550.615643][T12138] md: could not open device unknown-block(1,6). [ 551.574778][T12150] overlayfs: failed to clone lowerpath [ 554.583454][T12198] 9pnet_virtio: no channels available for device syz [ 554.612469][T12199] overlayfs: overlapping lowerdir path [ 556.768600][T12244] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 556.905577][T12244] md: could not open device unknown-block(1,0). [ 556.945899][T12244] md: could not open device unknown-block(1,1). [ 556.948077][T12244] md: md0 stopped. [ 557.270895][T12259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 557.420859][T12255] overlayfs: overlapping lowerdir path [ 557.524484][T12266] md: md0 stopped. [ 557.549679][T12268] jffs2: notice: (12268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 557.571922][T12259] md: could not open device unknown-block(1,0). [ 557.755813][T12273] md: could not open device unknown-block(1,6). [ 557.895439][ T5860] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.895461][ T5860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.707362][T12298] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 558.885665][T12298] md: could not open device unknown-block(1,1). [ 558.888109][T12298] md: md0 stopped. [ 559.711201][T12329] Invalid ELF header type: 3 != 1 [ 559.718862][T12329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.718912][T12329] batadv0: mtu less than device minimum [ 559.719510][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.719988][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.720494][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.720962][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.721470][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.721942][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.722437][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.722927][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.723435][T12329] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.758930][T12329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.113901][T12365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 561.275498][T12365] md: could not open device unknown-block(1,6). [ 561.329515][T12365] md: md3 stopped. [ 561.377790][T12372] set match dimension is over the limit! [ 561.875389][ T41] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 562.035691][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 562.036492][ T41] usb 8-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.40 [ 562.037781][ T41] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.037807][ T41] usb 8-1: config 1 interface 0 has no altsetting 0 [ 562.039881][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.039900][ T41] usb 8-1: Product: syz [ 562.039912][ T41] usb 8-1: Manufacturer: syz [ 562.039924][ T41] usb 8-1: SerialNumber: syz [ 562.262202][ T41] usbhid 8-1:1.0: can't add hid device: -71 [ 562.262288][ T41] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 562.264343][ T41] usb 8-1: USB disconnect, device number 9 [ 562.428933][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.428993][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.753709][T12411] lo speed is unknown, defaulting to 1000 [ 563.753755][T12411] lo speed is unknown, defaulting to 1000 [ 563.754295][T12411] lo speed is unknown, defaulting to 1000 [ 563.755604][T12411] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 563.755632][T12411] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 563.755665][T12411] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 563.766137][T12411] lo speed is unknown, defaulting to 1000 [ 563.767354][T12411] lo speed is unknown, defaulting to 1000 [ 563.768443][T12411] lo speed is unknown, defaulting to 1000 [ 563.769508][T12411] lo speed is unknown, defaulting to 1000 [ 563.938325][T12416] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 564.102018][T12425] md: md3 stopped. [ 564.103824][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 564.105106][T12424] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1636'. [ 564.212589][T12414] futex_wake_op: syz.2.1635 tries to shift op by 144; fix this program [ 564.212749][T12414] futex_wake_op: syz.2.1635 tries to shift op by 144; fix this program [ 564.293307][T12431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 564.372273][T12433] 9pnet_virtio: no channels available for device syz [ 564.498952][T12431] md/raid1:md3: not clean -- starting background reconstruction [ 564.498971][T12431] md/raid1:md3: active with 2 out of 2 mirrors [ 564.499559][T12431] md3: detected capacity change from 0 to 1024 [ 564.558586][T12439] md3: detected capacity change from 1024 to 0 [ 564.558600][T12439] md: md3 stopped. [ 565.845711][T12463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 565.985515][T12463] md: could not open device unknown-block(1,0). [ 565.991157][T12463] md: md0 stopped. [ 566.025542][T12468] md: could not open device unknown-block(1,1). [ 566.071721][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 566.904070][T12491] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 567.155395][ T41] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 567.318360][T12497] netlink: 'syz.1.1652': attribute type 2 has an invalid length. [ 567.338462][T12491] jffs2: notice: (12491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 567.592236][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 567.592325][ T41] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 567.595112][ T41] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 567.595140][ T41] usb 8-1: can't read configurations, error -71 [ 568.686016][T12529] Invalid ELF header type: 3 != 1 [ 569.073236][T12536] fuse: fd is not a fuse device [ 570.718910][T12563] rxe_eth0 speed is unknown, defaulting to 1000 [ 570.797011][T12563] lo speed is unknown, defaulting to 1000 [ 570.896839][T12563] lo speed is unknown, defaulting to 1000 [ 571.663566][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 571.887829][T12591] Invalid ELF header type: 3 != 1 [ 571.958485][T12591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.326602][T12591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.671561][T12602] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 572.845782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 572.985795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 574.747841][T12639] IPVS: Error joining to the multicast group [ 575.215644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 575.405844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 578.320024][T12689] fuse: fd is not a fuse device [ 578.906476][T12702] netlink: 'syz.0.1700': attribute type 2 has an invalid length. [ 579.054031][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 580.100699][T12696] syz.2.1698 (12696) used greatest stack depth: 17352 bytes left [ 581.320332][T12732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 581.515654][T12732] md: could not open device unknown-block(1,0). [ 582.038246][T12742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'. [ 582.138379][T12752] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 582.203171][T12749] fuse: fd is not a fuse device [ 582.316727][T12765] 9pnet_virtio: no channels available for device syz [ 582.351904][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 582.357845][T12752] md: md3 stopped. [ 582.754038][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 582.883876][T11711] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 583.183748][T11711] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 583.239711][T12786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 583.257006][T12769] ceph: No mds server is up or the cluster is laggy [ 584.040392][T12806] netlink: 'syz.1.1722': attribute type 39 has an invalid length. [ 585.278105][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1726'. [ 586.139594][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 586.898098][T12866] Invalid ELF header type: 3 != 1 [ 587.500721][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'. [ 589.489886][T12888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 590.766062][T12910] bridge0: port 3(wlan1) entered blocking state [ 590.767365][T12910] bridge0: port 3(wlan1) entered disabled state [ 590.768111][T12910] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 590.784690][T12910] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 590.836001][T12910] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 590.836021][T12910] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 590.837023][T12910] bridge0: port 3(wlan1) entered disabled state [ 590.841354][T12912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3999745443 (255983708352 ns) > initial count (95901105600 ns). Using initial count to start timer. [ 591.231546][T12928] Invalid ELF header type: 3 != 1 [ 591.654883][T12927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1747'. [ 591.924901][T11712] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 592.070827][T12935] fido_id[12935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 592.135586][T12937] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 592.197688][T12941] jffs2: notice: (12941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 593.155049][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 593.155063][ T42] audit: type=1800 audit(1793064906.910:466): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1750" name="bus" dev="ramfs" ino=32071 res=0 errno=-4 [ 593.648889][T12986] Invalid ELF header type: 3 != 1 [ 594.283413][T12997] syz.3.1760 (12997): drop_caches: 2 [ 594.283625][T12997] syz.3.1760 (12997): drop_caches: 2 [ 594.294591][T12997] syz.3.1760 (12997): drop_caches: 2 [ 594.374845][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 595.416058][T13020] md: md3 stopped. [ 596.792719][T13056] Invalid ELF header type: 3 != 1 [ 597.300421][T13063] fuse: fd is not a fuse device [ 599.313928][T13094] macvlan0: entered promiscuous mode [ 599.314108][T13094] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 599.314117][T13094] netlink: 'syz.0.1783': attribute type 2 has an invalid length. [ 599.452129][T13089] ftl_cs: FTL header not found. [ 599.465789][T13096] md: could not open device unknown-block(1,6). [ 599.560729][T13089] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 599.582413][T13105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 599.647190][T13105] md: could not open device unknown-block(1,6). [ 599.702186][T13107] md: personality for level is not loaded! [ 599.702562][T13107] md: md3 stopped. [ 599.712337][T13105] md: could not open device unknown-block(1,7). [ 601.107000][ T8718] Bluetooth: hci4: Frame reassembly failed (-84) [ 601.108806][T13139] Bluetooth: hci4: Frame reassembly failed (-90) [ 601.118040][T13141] fuse: fd is not a fuse device [ 602.854264][T13164] fuse: fd is not a fuse device [ 603.145465][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 603.149639][ T9962] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 603.272386][T13176] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 603.272406][T13176] block device autoloading is deprecated and will be removed. [ 603.278990][T13173] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 603.676439][T13183] bridge0: port 3(wlan1) entered blocking state [ 603.676736][T13183] bridge0: port 3(wlan1) entered disabled state [ 603.677083][T13183] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 603.680652][T13183] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 603.698203][T13183] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode [ 603.698233][T13183] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 603.698313][T13183] bridge0: port 3(wlan1) entered disabled state [ 604.199351][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1811'. [ 604.201166][ T5792] Bluetooth: hci3: Malformed Event: 0x2f [ 604.256978][ T5792] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 605.023186][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 605.076578][T13207] sctp_transport_update_pmtu: 39 callbacks suppressed [ 605.076599][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.078723][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.079790][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.080358][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.087083][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.087676][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.088230][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.088765][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.089466][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.090003][T13207] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 605.794500][T13216] bridge0: port 3(wlan1) entered blocking state [ 605.794665][T13216] bridge0: port 3(wlan1) entered disabled state [ 605.794809][T13216] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 605.809562][T13216] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 605.973117][T13216] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 605.973823][T13216] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 605.974554][T13216] bridge0: port 3(wlan1) entered disabled state [ 609.941184][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 610.315391][T13269] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 610.315415][T13269] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 610.316984][T13269] vhci_hcd vhci_hcd.0: Device attached [ 610.655532][ T41] usb 38-1: SetAddress Request (2) to port 0 [ 610.655934][ T41] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 611.264469][T13270] vhci_hcd: connection reset by peer [ 611.265560][ T5638] vhci_hcd vhci_hcd.0: stop threads [ 611.265581][ T5638] vhci_hcd vhci_hcd.0: release socket [ 611.265658][ T5638] vhci_hcd vhci_hcd.0: disconnect device [ 611.691850][T13296] fuse: fd is not a fuse device [ 613.105482][ T5638] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.109401][T13318] block nbd0: server does not support multiple connections per device. [ 613.118815][ T5638] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.118841][ T5638] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.118860][ T5638] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.119193][T13318] block nbd0: shutting down sockets [ 613.463095][T13326] batman_adv: batadv0: Interface activated: syz_tun [ 613.465091][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.465156][T13326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.467407][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.467499][T13326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.478398][T13326] net_ratelimit: 10 callbacks suppressed [ 613.478410][T13326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 613.478447][ T5883] lo speed is unknown, defaulting to 1000 [ 613.478467][ T5883] syz0: Port: 1 Link ACTIVE [ 613.480996][T11718] syz1: Port: 1 Link ACTIVE [ 613.715409][T11712] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 613.778918][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 613.875385][T11712] usb 8-1: Using ep0 maxpacket: 8 [ 613.876225][T11712] usb 8-1: New USB device found: idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 613.876991][T11712] usb 8-1: config 0 has no interfaces? [ 613.879233][T11712] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.879259][T11712] usb 8-1: Product: syz [ 613.879272][T11712] usb 8-1: Manufacturer: syz [ 613.879285][T11712] usb 8-1: SerialNumber: syz [ 613.882052][T11712] usb 8-1: config 0 descriptor?? [ 614.253347][ T64] usb 8-1: USB disconnect, device number 12 [ 615.368644][T13366] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1855'. [ 615.381450][T13366] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 615.384336][T13366] tipc: Enabled bearer , priority 10 [ 615.705785][ T41] usb 38-1: device descriptor read/8, error -110 [ 616.270598][ T41] usb usb38-port1: attempt power cycle [ 616.411176][T11712] tipc: Node number set to 3829685814 [ 616.790258][T13382] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 616.850455][ T41] usb usb38-port1: unable to enumerate USB device [ 618.751079][T13399] nvmet: adding nsid 1 to subsystem testsubsys [ 620.404946][T13413] rxe_eth0 speed is unknown, defaulting to 1000 [ 620.534171][T13413] lo speed is unknown, defaulting to 1000 [ 620.540188][T13413] lo speed is unknown, defaulting to 1000 [ 623.218482][T13442] bond0: (slave bond_slave_0): Releasing backup interface [ 623.877766][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.877814][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.832567][T13487] 9pnet_virtio: no channels available for device syz [ 628.494570][T13505] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 628.510930][T13505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.541572][T13505] gretap1: entered promiscuous mode [ 628.543871][T13505] bond3: (slave gretap1): making interface the new active one [ 628.544703][T13505] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 628.592246][T13505] macvlan2: entered promiscuous mode [ 628.592269][T13505] macvlan2: entered allmulticast mode [ 628.592718][T13505] bond3: entered promiscuous mode [ 628.593696][T13505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 628.594219][T13505] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 628.594333][T13505] bond3: left promiscuous mode [ 631.081031][T13550] 9pnet_virtio: no channels available for device syz [ 631.433288][T13556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3999745443 (255983708352 ns) > initial count (95901105600 ns). Using initial count to start timer. [ 632.507094][T13575] md: could not open device unknown-block(1,0). [ 632.558813][T13573] md: could not open device unknown-block(1,1). [ 637.091025][T13626] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 637.753735][T13638] md: personality for level is not loaded! [ 638.099867][T13651] md/raid1:md3: not clean -- starting background reconstruction [ 638.099879][T13651] md/raid1:md3: active with 2 out of 2 mirrors [ 638.100579][T13651] md3: detected capacity change from 0 to 1024 [ 638.106597][T13646] md: could not open device unknown-block(1,6). [ 638.111407][T13654] md: resync of RAID array md3 [ 638.147805][T13654] md: md3: resync done. [ 638.165740][T13647] md: could not open device unknown-block(1,7). [ 638.607857][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 638.715601][T13666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 638.715629][T13666] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 638.715749][T13666] vhci_hcd vhci_hcd.0: Device attached [ 639.031501][ T2335] usb 44-1: SetAddress Request (3) to port 0 [ 639.031559][ T2335] usb 44-1: new SuperSpeed USB device number 3 using vhci_hcd [ 639.884965][T13667] vhci_hcd: connection reset by peer [ 639.889090][ T5638] vhci_hcd vhci_hcd.3: stop threads [ 639.889137][ T5638] vhci_hcd vhci_hcd.3: release socket [ 639.889219][ T5638] vhci_hcd vhci_hcd.3: disconnect device [ 642.179459][T13694] md: could not open device unknown-block(1,6). [ 642.216042][T13695] md: could not open device unknown-block(1,7). [ 642.255961][T13694] md3: detected capacity change from 1024 to 0 [ 642.255975][T13694] md: md3 stopped. [ 644.105852][ T2335] usb 44-1: device descriptor read/8, error -110 [ 644.576655][ T2335] usb usb44-port1: attempt power cycle [ 644.722671][T13747] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 644.817203][T13747] md: could not open device unknown-block(1,0). [ 644.877687][T13747] md: could not open device unknown-block(1,1). [ 645.140464][ T2335] usb usb44-port1: unable to enumerate USB device [ 646.354192][ T42] audit: type=1800 audit(1793064960.110:467): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1951" name="bus" dev="ramfs" ino=33970 res=0 errno=-4 [ 648.194492][T13807] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 648.305849][T13807] md: could not open device unknown-block(1,0). [ 648.443109][T13810] md: could not open device unknown-block(1,1). [ 648.533468][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 649.785381][T11715] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 649.956081][T11715] usb 8-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 649.957224][T11715] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.957244][T11715] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 649.957272][T11715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.966528][T11715] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 651.256365][T11715] usb 8-1: USB disconnect, device number 13 [ 651.280065][T11715] idmouse 8-1:1.0: disconnected [ 652.366427][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 653.100329][T13870] FAULT_INJECTION: forcing a failure. [ 653.100329][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 653.100352][T13870] CPU: 3 UID: 0 PID: 13870 Comm: syz.3.1990 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 653.100368][T13870] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 653.100373][T13870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 653.100379][T13870] Call Trace: [ 653.100384][T13870] [ 653.100388][T13870] dump_stack_lvl+0x100/0x190 [ 653.100408][T13870] should_fail_ex.cold+0x5/0xa [ 653.100425][T13870] should_failslab+0xc2/0x120 [ 653.100442][T13870] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 653.100457][T13870] ? rcu_is_watching+0x13/0xc0 [ 653.100472][T13870] ? nf_ct_ext_add+0x1b0/0x3c0 [ 653.100485][T13870] krealloc_node_align_noprof+0x321/0x3e0 [ 653.100501][T13870] nf_ct_ext_add+0x1b0/0x3c0 [ 653.100514][T13870] init_conntrack.isra.0+0x58b/0x1390 [ 653.100528][T13870] ? __nf_conntrack_find_get+0xa0d/0xd00 [ 653.100538][T13870] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 653.100549][T13870] ? ipv6_get_l4proto+0x13a/0x220 [ 653.100567][T13870] ? ip6t_do_table+0xc2b/0x1ca0 [ 653.100581][T13870] nf_conntrack_in+0xeb3/0x1680 [ 653.100597][T13870] ? __pfx_nf_conntrack_in+0x10/0x10 [ 653.100608][T13870] ? __do_replace+0x8e6/0x990 [ 653.100622][T13870] ? ipv6_defrag+0x1e1/0x480 [ 653.100638][T13870] ? ipv6_defrag+0x2a8/0x480 [ 653.100658][T13870] nf_hook_slow+0xbf/0x220 [ 653.100682][T13870] nf_hook.constprop.0+0x2a6/0x750 [ 653.100704][T13870] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 653.100727][T13870] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 653.100753][T13870] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 653.100782][T13870] ? __pfx_ipv6_rcv+0x10/0x10 [ 653.100803][T13870] ipv6_rcv+0xa4/0x3d0 [ 653.100824][T13870] ? __pfx_ipv6_rcv+0x10/0x10 [ 653.100842][T13870] __netif_receive_skb_one_core+0x12d/0x1e0 [ 653.100864][T13870] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 653.100881][T13870] ? lock_acquire+0x1d1/0x380 [ 653.100896][T13870] __netif_receive_skb+0x1f/0x120 [ 653.100916][T13870] netif_receive_skb+0x139/0x7d0 [ 653.100937][T13870] ? __pfx_netif_receive_skb+0x10/0x10 [ 653.100967][T13870] tun_rx_batched.isra.0+0x3f6/0x750 [ 653.100998][T13870] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 653.101038][T13870] ? tun_get_user+0x1dcd/0x3ee0 [ 653.101071][T13870] tun_get_user+0x1f62/0x3ee0 [ 653.101109][T13870] ? __lock_acquire+0x5c0/0x1f40 [ 653.101126][T13870] ? __pfx_tun_get_user+0x10/0x10 [ 653.101158][T13870] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 653.101189][T13870] ? find_held_lock+0x2b/0x80 [ 653.101210][T13870] ? tun_get+0x191/0x370 [ 653.101233][T13870] ? tun_get+0x191/0x370 [ 653.101260][T13870] tun_chr_write_iter+0xdc/0x200 [ 653.101279][T13870] vfs_write+0x6af/0x1050 [ 653.101294][T13870] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 653.101312][T13870] ? __pfx_vfs_write+0x10/0x10 [ 653.101324][T13870] ? find_held_lock+0x2b/0x80 [ 653.101357][T13870] ksys_write+0x12a/0x250 [ 653.101382][T13870] ? __pfx_ksys_write+0x10/0x10 [ 653.101407][T13870] do_int80_emulation+0x166/0x650 [ 653.101426][T13870] asm_int80_emulation+0x1a/0x20 [ 653.101440][T13870] RIP: 0023:0xf71877ab [ 653.101458][T13870] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 653.101477][T13870] RSP: 002b:00000000f544644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 653.101494][T13870] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001b00 [ 653.101508][T13870] RDX: 000000000000004a RSI: 0000000000000000 RDI: 0000000000000000 [ 653.101519][T13870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.101530][T13870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 653.101540][T13870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.101565][T13870] [ 653.316659][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 653.580482][T13888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 653.617122][T13888] md: could not open device unknown-block(1,0). [ 653.654874][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.676172][T13888] md: could not open device unknown-block(1,1). [ 653.714831][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.769903][T13890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.076601][T13898] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 654.099545][T13898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1995'. [ 654.099590][T13898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1995'. [ 654.099598][T13898] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 654.322725][T13900] jffs2: notice: (13900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 654.878945][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 655.474300][T13916] syzkaller1: entered promiscuous mode [ 655.474320][T13916] syzkaller1: entered allmulticast mode [ 655.984465][T13927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 656.036562][T13927] md: could not open device unknown-block(1,0). [ 656.058175][T13929] fuse: fd is not a fuse device [ 656.075851][T13927] md: could not open device unknown-block(1,1). [ 656.137936][T13932] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 656.156940][T13932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.243168][T13932] gretap1: entered promiscuous mode [ 656.248528][T13932] bond4: (slave gretap1): making interface the new active one [ 656.249756][T13932] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 656.254501][T13935] macvlan2: entered promiscuous mode [ 656.254520][T13935] macvlan2: entered allmulticast mode [ 656.254969][T13935] bond4: entered promiscuous mode [ 656.272837][T13935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 656.273372][T13935] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 656.273474][T13935] bond4: left promiscuous mode [ 657.044645][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 657.271032][T13943] jffs2: notice: (13943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 657.712810][T13954] random: crng reseeded on system resumption [ 657.717384][T13951] 9pnet_virtio: no channels available for device syz [ 658.116743][T13960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2013'. [ 658.255239][T13966] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 658.315854][T13966] md: could not open device unknown-block(1,0). [ 658.355616][T13966] md: could not open device unknown-block(1,1). [ 658.818662][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2017'. [ 659.588816][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2019'. [ 661.124098][T13996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 661.264038][T13996] md: personality for level is not loaded! [ 662.043554][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 662.929032][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 664.349873][T14036] macsec1: entered allmulticast mode [ 664.349896][T14036] veth1_macvtap: entered allmulticast mode [ 664.353522][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 664.380018][T14036] veth1_macvtap (unregistering): left allmulticast mode [ 664.458950][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 664.458971][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 664.627065][T14039] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.628117][T14039] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.882731][T14039] bond0: left allmulticast mode [ 664.925553][ T5638] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.925589][ T5638] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.925607][ T5638] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.925624][ T5638] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.596529][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 666.781109][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 667.981379][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 668.420262][T14085] 9p: Bad value for 'wfdno' [ 669.073280][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 669.729033][T14093] 9pnet_virtio: no channels available for device syz [ 670.116028][T14111] jffs2: notice: (14111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 670.215749][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'. [ 671.697587][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 672.615770][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 674.195047][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 674.368365][T14168] jffs2: notice: (14168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 674.788471][T14173] syzkaller0: entered promiscuous mode [ 674.788485][T14173] syzkaller0: entered allmulticast mode [ 674.795057][T14173] tipc: Enabled bearer , priority 0 [ 674.807385][T14173] tipc: Resetting bearer [ 674.828212][T14172] tipc: Resetting bearer [ 674.881771][T14172] tipc: Disabling bearer [ 675.041870][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 676.190126][T14209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 676.316605][T14215] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 676.338546][T14215] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2079'. [ 676.338592][T14215] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2079'. [ 676.338631][T14215] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 676.428202][T14213] md: could not open device unknown-block(1,0). [ 676.437294][T14221] md/raid1:md3: not clean -- starting background reconstruction [ 676.437305][T14221] md/raid1:md3: active with 2 out of 2 mirrors [ 676.441902][T14224] md: resync of RAID array md3 [ 676.441935][T14224] md: md3: resync done. [ 676.444249][T14216] md: could not open device unknown-block(1,6). [ 676.467687][T14221] md: md3 stopped. [ 676.469800][T14220] md: could not open device unknown-block(1,7). [ 677.263539][ T64] kernel write not supported for file /gssd/clntXX/gssd (pid: 64 comm: kworker/3:1) [ 677.485612][T14241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 677.509757][ T64] lo speed is unknown, defaulting to 1000 [ 677.509775][ T64] syz0: Port: 1 Link DOWN [ 677.565897][T14241] md: could not open device unknown-block(1,0). [ 677.619490][T14246] md: md0 stopped. [ 677.635593][T14241] md: could not open device unknown-block(1,1). [ 678.257440][T14256] 9pnet_virtio: no channels available for device syz [ 678.306154][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 679.281422][T14264] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 679.344585][T14264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2100'. [ 679.344648][T14264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2100'. [ 679.344703][T14264] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 679.910240][T11712] kernel write not supported for file /gssd/clntXX/gssd (pid: 11712 comm: kworker/2:5) [ 679.949115][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 680.122768][T14277] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 680.287875][T14278] md: md3 stopped. [ 680.291047][T14280] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2106'. [ 680.427559][T14285] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 681.809088][T14295] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 681.809119][T14295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 681.809619][T14295] vhci_hcd vhci_hcd.0: Device attached [ 682.162852][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 682.165444][ T41] usb 38-1: SetAddress Request (6) to port 0 [ 682.165481][ T41] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 683.234422][T14296] vhci_hcd: connection reset by peer [ 683.235051][ T5638] vhci_hcd vhci_hcd.0: stop threads [ 683.235073][ T5638] vhci_hcd vhci_hcd.0: release socket [ 683.235112][ T5638] vhci_hcd vhci_hcd.0: disconnect device [ 683.339129][T14312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3999745443 (255983708352 ns) > initial count (95901105600 ns). Using initial count to start timer. [ 683.784390][T14318] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 683.821456][T14318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2114'. [ 683.821521][T14318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2114'. [ 683.821574][T14318] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 684.531747][T14324] 9p: Bad value for 'wfdno' [ 685.306481][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'. [ 685.306661][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.306691][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.442323][T14342] macsec2: entered allmulticast mode [ 685.442338][T14342] veth1_macvtap: entered allmulticast mode [ 685.449174][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 685.458248][T14342] veth1_macvtap (unregistering): left allmulticast mode [ 685.563537][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 685.563554][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 685.572142][T14343] batman_adv: batadv0: Interface deactivated: syz_tun [ 685.612612][T14343] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.613094][T14343] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.810830][T14343] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 685.924158][ T64] syz1: Port: 1 Link DOWN [ 686.105904][ T64] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 686.408818][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 687.308177][ T41] usb 38-1: device descriptor read/8, error -110 [ 687.439915][T14364] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 687.459806][T14364] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2127'. [ 687.459853][T14364] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2127'. [ 687.459890][T14364] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 687.713645][T11718] kernel write not supported for file /gssd/clntXX/gssd (pid: 11718 comm: kworker/3:5) [ 687.848230][ T41] usb usb38-port1: attempt power cycle [ 689.128547][ T41] usb usb38-port1: unable to enumerate USB device [ 689.763411][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 689.774891][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 690.124683][T14388] kAFS: bad VL server IP address [ 690.352770][T14393] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 690.377586][T14393] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 690.378078][T14393] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 690.378691][T14393] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 690.388668][T14393] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 690.578625][T14393] pci 0000:00:01.0: Adding to iommu group 1 [ 690.679492][T14393] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 690.679515][T14393] pci 0000:00:01.0: vgaarb: bridge control possible [ 690.679527][T14393] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 691.976536][T14393] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 691.982936][T14393] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 691.983016][T14393] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 691.983261][T14393] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 691.996866][T14393] pci 0000:00:05.0: Adding to iommu group 5 [ 692.009809][T14393] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 692.019741][T14393] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 692.021641][T14393] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 692.022892][T14393] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 692.024029][T14393] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 692.031733][T14393] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 692.049349][T14393] [drm] Found bochs VGA, ID 0xb0c5. [ 692.049361][T14393] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 692.100575][T14393] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 692.309286][T14393] Console: switching to colour frame buffer device 160x50 [ 692.357672][T14393] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 692.367016][T14393] =================================================== ** replaying previous printk message ** [ 692.367016][T14393] ================================================================== [ 692.367061][T14393] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 692.367158][T14393] Read of size 1 at addr ffff888022089e40 by task syz.0.2136/14393 [ 692.367175][T14393] [ 692.367188][T14393] CPU: 3 UID: 0 PID: 14393 Comm: syz.0.2136 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 692.367218][T14393] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 692.367226][T14393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 692.367238][T14393] Call Trace: [ 692.367273][T14393] [ 692.367281][T14393] dump_stack_lvl+0x100/0x190 [ 692.367330][T14393] print_report+0x13d/0x4b0 [ 692.367375][T14393] ? __virt_addr_valid+0x239/0x430 [ 692.367401][T14393] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 692.367413][T14393] kasan_report+0xdf/0x1c0 [ 692.367429][T14393] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 692.367443][T14393] acpi_ns_get_attached_object+0x148/0x1b0 [ 692.367456][T14393] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 692.367469][T14393] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 692.367485][T14393] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 692.367499][T14393] ? acpi_ds_create_operand+0x267/0xc20 [ 692.367514][T14393] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 692.367526][T14393] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 692.367538][T14393] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 692.367554][T14393] ? __asan_memset+0x23/0x50 [ 692.367566][T14393] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 692.367583][T14393] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 692.367599][T14393] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 692.367615][T14393] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 692.367630][T14393] ? acpi_ut_trace_ptr+0x101/0x2a0 [ 692.367647][T14393] acpi_ds_exec_end_op+0xb78/0x1e60 [ 692.367662][T14393] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 692.367677][T14393] acpi_ps_parse_loop+0x5e1/0x26e0 [ 692.367694][T14393] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 692.367708][T14393] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 692.367722][T14393] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 692.367739][T14393] ? acpi_ut_create_thread_state+0x6d/0x170 [ 692.367756][T14393] acpi_ps_parse_aml+0x81e/0x1120 [ 692.367773][T14393] acpi_ps_execute_method+0x5c4/0xe90 [ 692.367784][T14393] acpi_ns_evaluate+0x640/0x1670 [ 692.367796][T14393] acpi_ut_evaluate_object+0xf7/0x610 [ 692.367809][T14393] acpi_rs_get_prt_method_data+0xa0/0x150 [ 692.367821][T14393] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 692.367834][T14393] ? acpi_ut_status_exit+0x111/0x1c0 [ 692.367863][T14393] ? acpi_rs_validate_parameters+0x104/0x210 [ 692.367884][T14393] acpi_get_irq_routing_table+0xb8/0x140 [ 692.367907][T14393] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 692.367931][T14393] ? preempt_schedule_thunk+0x16/0x40 [ 692.367952][T14393] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 692.367978][T14393] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 692.368001][T14393] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 692.368071][T14393] ? pci_conf1_read+0x138/0x240 [ 692.368097][T14393] acpi_pci_irq_lookup+0x8e/0x6b0 [ 692.368121][T14393] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 692.368144][T14393] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 692.368166][T14393] ? __driver_probe_device+0x210/0x460 [ 692.368218][T14393] ? __device_attach_driver+0x1df/0x320 [ 692.368245][T14393] ? bus_for_each_drv+0x159/0x1e0 [ 692.368267][T14393] ? __device_attach+0x1e4/0x4c0 [ 692.368296][T14393] acpi_pci_irq_enable+0x1f5/0x6f0 [ 692.368319][T14393] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 692.368343][T14393] ? __pfx_pci_enable_resources+0x10/0x10 [ 692.368368][T14393] ? __pfx___pci_set_power_state+0x10/0x10 [ 692.368401][T14393] pcibios_enable_device+0xb6/0xe0 [ 692.368431][T14393] do_pci_enable_device+0x21f/0x4a0 [ 692.368452][T14393] ? __pfx_do_pci_enable_device+0x10/0x10 [ 692.368472][T14393] ? pci_update_current_state+0x102/0x240 [ 692.368502][T14393] ? __pfx_pci_update_current_state+0x10/0x10 [ 692.368532][T14393] ? ksm_scan_thread+0x3e10/0x6f90 [ 692.368555][T14393] ? __kasan_kmalloc+0xaa/0xb0 [ 692.368583][T14393] pci_enable_device_flags+0x27c/0x370 [ 692.368608][T14393] ? __pfx_virtio_pci_probe+0x10/0x10 [ 692.368630][T14393] virtio_pci_probe+0x1d5/0x410 [ 692.368651][T14393] local_pci_probe+0xdd/0x1b0 [ 692.368680][T14393] pci_call_probe+0x176/0x800 [ 692.368699][T14393] ? pci_match_device+0x147/0x7d0 [ 692.368727][T14393] ? __pfx_pci_call_probe+0x10/0x10 [ 692.368748][T14393] ? __pfx_pci_match_device+0x10/0x10 [ 692.368776][T14393] ? pci_find_host_bridge+0x3c/0x80 [ 692.368812][T14393] pci_device_probe+0x25b/0x400 [ 692.368831][T14393] ? __pfx_pci_device_probe+0x10/0x10 [ 692.368852][T14393] ? sysfs_create_link+0x68/0xc0 [ 692.368879][T14393] ? __pfx_pci_device_probe+0x10/0x10 [ 692.368899][T14393] really_probe+0x241/0xa60 [ 692.368928][T14393] __driver_probe_device+0x210/0x460 [ 692.368955][T14393] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 692.368987][T14393] driver_probe_device+0x4a/0x140 [ 692.369015][T14393] __device_attach_driver+0x1df/0x320 [ 692.369044][T14393] ? __pfx___device_attach_driver+0x10/0x10 [ 692.369072][T14393] bus_for_each_drv+0x159/0x1e0 [ 692.369096][T14393] ? __pfx_bus_for_each_drv+0x10/0x10 [ 692.369119][T14393] ? lockdep_hardirqs_on+0x7d/0x110 [ 692.369140][T14393] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 692.369172][T14393] __device_attach+0x1e4/0x4c0 [ 692.369200][T14393] ? __pfx___device_attach+0x10/0x10 [ 692.369229][T14393] ? do_raw_spin_unlock+0x145/0x1e0 [ 692.369254][T14393] device_initial_probe+0xaf/0xf0 [ 692.369284][T14393] pci_bus_add_device+0xc5/0x100 [ 692.369308][T14393] pci_bus_add_devices+0x9a/0x1f0 [ 692.369334][T14393] pci_rescan_bus+0x2a/0x40 [ 692.369363][T14393] rescan_store+0xfb/0x130 [ 692.369393][T14393] ? __pfx_rescan_store+0x10/0x10 [ 692.369423][T14393] ? sysfs_file_kobj+0xe4/0x290 [ 692.369452][T14393] ? __pfx_rescan_store+0x10/0x10 [ 692.369481][T14393] bus_attr_store+0x74/0xb0 [ 692.369503][T14393] ? __pfx_bus_attr_store+0x10/0x10 [ 692.369523][T14393] sysfs_kf_write+0xf2/0x150 [ 692.369552][T14393] kernfs_fop_write_iter+0x3e0/0x5f0 [ 692.369578][T14393] ? __pfx_sysfs_kf_write+0x10/0x10 [ 692.369607][T14393] vfs_write+0x6af/0x1050 [ 692.369632][T14393] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 692.369659][T14393] ? __pfx_vfs_write+0x10/0x10 [ 692.369682][T14393] ? find_held_lock+0x2b/0x80 [ 692.369713][T14393] ksys_write+0x12a/0x250 [ 692.369738][T14393] ? __pfx_ksys_write+0x10/0x10 [ 692.369766][T14393] __do_fast_syscall_32+0x14b/0x8c0 [ 692.369792][T14393] do_fast_syscall_32+0x32/0x70 [ 692.369814][T14393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.369837][T14393] RIP: 0023:0xf742efbc [ 692.369851][T14393] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 692.369867][T14393] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 692.369878][T14393] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 692.369885][T14393] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.369891][T14393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.369897][T14393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 692.369904][T14393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.369913][T14393] [ 692.369917][T14393] [ 692.369920][T14393] Allocated by task 1: [ 692.369925][T14393] kasan_save_stack+0x30/0x50 [ 692.369938][T14393] kasan_save_track+0x14/0x30 [ 692.369950][T14393] __kasan_slab_alloc+0x89/0x90 [ 692.369963][T14393] kmem_cache_alloc_noprof+0x269/0x6a0 [ 692.369976][T14393] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 692.369989][T14393] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 692.370003][T14393] acpi_ds_build_internal_object+0x173/0x790 [ 692.370016][T14393] acpi_ds_create_node+0xe3/0x280 [ 692.370028][T14393] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 692.370041][T14393] acpi_ps_parse_loop+0x5e1/0x26e0 [ 692.370055][T14393] acpi_ps_parse_aml+0x81e/0x1120 [ 692.370069][T14393] acpi_ps_execute_table+0x393/0x500 [ 692.370078][T14393] acpi_ns_execute_table+0x596/0x970 [ 692.370089][T14393] acpi_ns_parse_table+0xcb/0x160 [ 692.370105][T14393] acpi_ns_load_table+0xc9/0x490 [ 692.370120][T14393] acpi_tb_load_namespace+0x2b0/0x8f0 [ 692.370143][T14393] acpi_load_tables+0x89/0x160 [ 692.370171][T14393] acpi_init+0x146/0x840 [ 692.370193][T14393] do_one_initcall+0x11c/0x6f0 [ 692.370211][T14393] kernel_init_freeable+0x6ea/0x7b0 [ 692.370261][T14393] kernel_init+0x21/0x1d0 [ 692.370284][T14393] ret_from_fork+0x730/0xd60 [ 692.370314][T14393] ret_from_fork_asm+0x1a/0x30 [ 692.370328][T14393] [ 692.370330][T14393] Freed by task 9717: [ 692.370336][T14393] kasan_save_stack+0x30/0x50 [ 692.370348][T14393] kasan_save_track+0x14/0x30 [ 692.370363][T14393] kasan_save_free_info+0x3b/0x70 [ 692.370373][T14393] __kasan_slab_free+0x5f/0x80 [ 692.370386][T14393] kmem_cache_free+0x127/0x6c0 [ 692.370396][T14393] acpi_os_release_object+0x1c/0x30 [ 692.370405][T14393] acpi_ut_delete_object_desc+0xea/0x130 [ 692.370424][T14393] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 692.370441][T14393] acpi_ut_update_object_reference+0x5f9/0x800 [ 692.370460][T14393] acpi_ut_remove_reference+0x192/0x1d0 [ 692.370479][T14393] acpi_rs_get_prt_method_data+0xcd/0x150 [ 692.370499][T14393] acpi_get_irq_routing_table+0xb8/0x140 [ 692.370520][T14393] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 692.370539][T14393] acpi_pci_irq_lookup+0x8e/0x6b0 [ 692.370555][T14393] acpi_pci_irq_disable+0x1a8/0x360 [ 692.370570][T14393] pcibios_disable_device+0x89/0xb0 [ 692.370586][T14393] do_pci_disable_device+0x9f/0x100 [ 692.370595][T14393] pci_disable_device+0x130/0x270 [ 692.370604][T14393] virtio_pci_remove+0xcf/0x110 [ 692.370614][T14393] pci_device_remove+0xb2/0x1d0 [ 692.370628][T14393] device_remove+0xcb/0x180 [ 692.370641][T14393] device_release_driver_internal+0x441/0x610 [ 692.370657][T14393] pci_stop_bus_device+0x120/0x160 [ 692.370666][T14393] pci_stop_and_remove_bus_device+0x58/0xa0 [ 692.370676][T14393] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 692.370687][T14393] remove_store+0x123/0x140 [ 692.370709][T14393] dev_attr_store+0x58/0x80 [ 692.370718][T14393] sysfs_kf_write+0xf2/0x150 [ 692.370731][T14393] kernfs_fop_write_iter+0x3e0/0x5f0 [ 692.370744][T14393] vfs_write+0x6af/0x1050 [ 692.370760][T14393] ksys_write+0x12a/0x250 [ 692.370778][T14393] __do_fast_syscall_32+0x14b/0x8c0 [ 692.370799][T14393] do_fast_syscall_32+0x32/0x70 [ 692.370819][T14393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.370842][T14393] [ 692.370846][T14393] The buggy address belongs to the object at ffff888022089e38 [ 692.370846][T14393] which belongs to the cache Acpi-Operand of size 72 [ 692.370867][T14393] The buggy address is located 8 bytes inside of [ 692.370867][T14393] freed 72-byte region [ffff888022089e38, ffff888022089e80) [ 692.370885][T14393] [ 692.370890][T14393] The buggy address belongs to the physical page: [ 692.370909][T14393] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880220897b8 pfn:0x22089 [ 692.370929][T14393] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 692.370946][T14393] page_type: f5(slab) [ 692.370963][T14393] raw: 00fff00000000200 ffff88801d44da40 ffffea0000879b90 ffffea0000878f10 [ 692.370980][T14393] raw: ffff8880220897b8 0000000200270011 00000000f5000000 0000000000000000 [ 692.370991][T14393] page dumped because: kasan: bad access detected [ 692.371025][T14393] page_owner tracks the page as allocated [ 692.371032][T14393] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2504960712 [ 692.371061][T14393] post_alloc_hook+0xfd/0x120 [ 692.371079][T14393] get_page_from_freelist+0x1113/0x35e0 [ 692.371099][T14393] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 692.371119][T14393] new_slab+0xb1/0x6d0 [ 692.371136][T14393] refill_objects+0xe3/0x410 [ 692.371155][T14393] __pcs_replace_empty_main+0x35e/0x650 [ 692.371174][T14393] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 692.371196][T14393] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 692.371235][T14393] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 692.371260][T14393] acpi_ds_build_internal_object+0x173/0x790 [ 692.371284][T14393] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 692.371311][T14393] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 692.371336][T14393] acpi_ds_exec_end_op+0xe41/0x1e60 [ 692.371360][T14393] acpi_ps_parse_loop+0x5e1/0x26e0 [ 692.371385][T14393] acpi_ps_parse_aml+0x81e/0x1120 [ 692.371412][T14393] acpi_ps_execute_table+0x393/0x500 [ 692.371430][T14393] page_owner free stack trace missing [ 692.371437][T14393] [ 692.371440][T14393] Memory state around the buggy address: [ 692.371449][T14393] ffff888022089d00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fa fb fb [ 692.371462][T14393] ffff888022089d80: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 692.371475][T14393] >ffff888022089e00: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 692.371486][T14393] ^ [ 692.371496][T14393] ffff888022089e80: fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc [ 692.371509][T14393] ffff888022089f00: fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 692.371519][T14393] ================================================================== [ 692.371552][T14393] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 692.934075][T14393] CPU: 3 UID: 0 PID: 14393 Comm: syz.0.2136 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 692.938825][T14393] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 692.941369][T14393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 692.945785][T14393] Call Trace: [ 692.947282][T14393] [ 692.948605][T14393] dump_stack_lvl+0x100/0x190 [ 692.950712][T14393] vpanic+0x553/0x970 [ 692.952486][T14393] ? __pfx_vpanic+0x10/0x10 [ 692.954519][T14393] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 692.957143][T14393] panic+0xd1/0xe0 [ 692.958820][T14393] ? __pfx_panic+0x10/0x10 [ 692.960818][T14393] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 692.963456][T14393] ? preempt_schedule+0x57/0xd0 [ 692.965610][T14393] check_panic_on_warn.cold+0x19/0x34 [ 692.967968][T14393] end_report.part.0+0x3a/0x90 [ 692.970286][T14393] kasan_report.cold+0xe/0x18 [ 692.972363][T14393] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 692.975009][T14393] acpi_ns_get_attached_object+0x148/0x1b0 [ 692.977610][T14393] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 692.980219][T14393] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 692.982513][T14393] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 692.985375][T14393] ? acpi_ds_create_operand+0x267/0xc20 [ 692.987870][T14393] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 692.990333][T14393] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 692.993014][T14393] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 692.995329][T14393] ? __asan_memset+0x23/0x50 [ 692.997382][T14393] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 693.000036][T14393] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 693.002552][T14393] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 693.005293][T14393] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 693.007894][T14393] ? acpi_ut_trace_ptr+0x101/0x2a0 [ 693.010175][T14393] acpi_ds_exec_end_op+0xb78/0x1e60 [ 693.012489][T14393] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 693.014964][T14393] acpi_ps_parse_loop+0x5e1/0x26e0 [ 693.017221][T14393] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 693.019669][T14393] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 693.022128][T14393] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 693.024777][T14393] ? acpi_ut_create_thread_state+0x6d/0x170 [ 693.027402][T14393] acpi_ps_parse_aml+0x81e/0x1120 [ 693.029635][T14393] acpi_ps_execute_method+0x5c4/0xe90 [ 693.031984][T14393] acpi_ns_evaluate+0x640/0x1670 [ 693.034179][T14393] acpi_ut_evaluate_object+0xf7/0x610 [ 693.036555][T14393] acpi_rs_get_prt_method_data+0xa0/0x150 [ 693.039052][T14393] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 693.041841][T14393] ? acpi_ut_status_exit+0x111/0x1c0 [ 693.044183][T14393] ? acpi_rs_validate_parameters+0x104/0x210 [ 693.046829][T14393] acpi_get_irq_routing_table+0xb8/0x140 [ 693.049292][T14393] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 693.052054][T14393] ? preempt_schedule_thunk+0x16/0x40 [ 693.054431][T14393] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 693.057003][T14393] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 693.059798][T14393] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 693.062380][T14393] ? pci_conf1_read+0x138/0x240 [ 693.064536][T14393] acpi_pci_irq_lookup+0x8e/0x6b0 [ 693.066779][T14393] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 693.069155][T14393] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 693.071711][T14393] ? __driver_probe_device+0x210/0x460 [ 693.073977][T14393] ? __device_attach_driver+0x1df/0x320 [ 693.076292][T14393] ? bus_for_each_drv+0x159/0x1e0 [ 693.078347][T14393] ? __device_attach+0x1e4/0x4c0 [ 693.080378][T14393] acpi_pci_irq_enable+0x1f5/0x6f0 [ 693.082488][T14393] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 693.084786][T14393] ? __pfx_pci_enable_resources+0x10/0x10 [ 693.087140][T14393] ? __pfx___pci_set_power_state+0x10/0x10 [ 693.089534][T14393] pcibios_enable_device+0xb6/0xe0 [ 693.091664][T14393] do_pci_enable_device+0x21f/0x4a0 [ 693.093895][T14393] ? __pfx_do_pci_enable_device+0x10/0x10 [ 693.096417][T14393] ? pci_update_current_state+0x102/0x240 [ 693.098935][T14393] ? __pfx_pci_update_current_state+0x10/0x10 [ 693.101621][T14393] ? ksm_scan_thread+0x3e10/0x6f90 [ 693.103878][T14393] ? __kasan_kmalloc+0xaa/0xb0 [ 693.106014][T14393] pci_enable_device_flags+0x27c/0x370 [ 693.108407][T14393] ? __pfx_virtio_pci_probe+0x10/0x10 [ 693.110793][T14393] virtio_pci_probe+0x1d5/0x410 [ 693.112949][T14393] local_pci_probe+0xdd/0x1b0 [ 693.115046][T14393] pci_call_probe+0x176/0x800 [ 693.117126][T14393] ? pci_match_device+0x147/0x7d0 [ 693.119387][T14393] ? __pfx_pci_call_probe+0x10/0x10 [ 693.121678][T14393] ? __pfx_pci_match_device+0x10/0x10 [ 693.124055][T14393] ? pci_find_host_bridge+0x3c/0x80 [ 693.126375][T14393] pci_device_probe+0x25b/0x400 [ 693.128529][T14393] ? __pfx_pci_device_probe+0x10/0x10 [ 693.130863][T14393] ? sysfs_create_link+0x68/0xc0 [ 693.133043][T14393] ? __pfx_pci_device_probe+0x10/0x10 [ 693.135261][T14393] really_probe+0x241/0xa60 [ 693.137113][T14393] __driver_probe_device+0x210/0x460 [ 693.139419][T14393] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 693.141895][T14393] driver_probe_device+0x4a/0x140 [ 693.144139][T14393] __device_attach_driver+0x1df/0x320 [ 693.146536][T14393] ? __pfx___device_attach_driver+0x10/0x10 [ 693.149127][T14393] bus_for_each_drv+0x159/0x1e0 [ 693.151298][T14393] ? __pfx_bus_for_each_drv+0x10/0x10 [ 693.153655][T14393] ? lockdep_hardirqs_on+0x7d/0x110 [ 693.155956][T14393] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 693.158460][T14393] __device_attach+0x1e4/0x4c0 [ 693.160517][T14393] ? __pfx___device_attach+0x10/0x10 [ 693.162696][T14393] ? do_raw_spin_unlock+0x145/0x1e0 [ 693.164875][T14393] device_initial_probe+0xaf/0xf0 [ 693.167014][T14393] pci_bus_add_device+0xc5/0x100 [ 693.169227][T14393] pci_bus_add_devices+0x9a/0x1f0 [ 693.171429][T14393] pci_rescan_bus+0x2a/0x40 [ 693.173412][T14393] rescan_store+0xfb/0x130 [ 693.175399][T14393] ? __pfx_rescan_store+0x10/0x10 [ 693.177550][T14393] ? sysfs_file_kobj+0xe4/0x290 [ 693.179688][T14393] ? __pfx_rescan_store+0x10/0x10 [ 693.181903][T14393] bus_attr_store+0x74/0xb0 [ 693.183867][T14393] ? __pfx_bus_attr_store+0x10/0x10 [ 693.186037][T14393] sysfs_kf_write+0xf2/0x150 [ 693.188089][T14393] kernfs_fop_write_iter+0x3e0/0x5f0 [ 693.190383][T14393] ? __pfx_sysfs_kf_write+0x10/0x10 [ 693.192647][T14393] vfs_write+0x6af/0x1050 [ 693.194525][T14393] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 693.197035][T14393] ? __pfx_vfs_write+0x10/0x10 [ 693.199112][T14393] ? find_held_lock+0x2b/0x80 [ 693.201092][T14393] ksys_write+0x12a/0x250 [ 693.202949][T14393] ? __pfx_ksys_write+0x10/0x10 [ 693.205104][T14393] __do_fast_syscall_32+0x14b/0x8c0 [ 693.207413][T14393] do_fast_syscall_32+0x32/0x70 [ 693.209504][T14393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 693.212276][T14393] RIP: 0023:0xf742efbc [ 693.214155][T14393] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 693.222379][T14393] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 693.225870][T14393] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 693.229479][T14393] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.232864][T14393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 693.236223][T14393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 693.239687][T14393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.243143][T14393] [ 693.245508][T14393] Kernel Offset: disabled [ 693.247424][T14393] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:36:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801ebf2580 RSI=ffffffff81eb9f07 RDI=ffff88801ebf2580 RBP=ffffc900006afda8 RSP=ffffc900006afa38 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3d3d3d3d3d3d3d3d R12=0000000000000000 R13=1ffff920000d5f52 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820d7c90 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880952a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801be018 CR3=000000005c7ff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000001a48860e214 RBX=ffff88802af24040 RCX=00000000000006e0 RDX=00000000000001a4 RSI=ffffffff81fd1a65 RDI=ffff88801e3a4b00 RBP=000000a12efbf980 RSP=ffffc90000567af8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000acf69 R13=0000000000000001 R14=0000000000000001 R15=ffff88802af24080 RIP=ffffffff81fd1a78 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880953a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1951344d682e726d 13caa47c0248d9ed ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3a04f182e968e90 fdd9c1855118bf9d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d4dfe6fd059baa0 951be269fffcf4b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a589f1975f014b27 91a87cd8bef66088 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003480 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 098a719d3716fc96 000001a4000001a4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f5344d4552581c2 695a83f85d1c1334 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34c30e00000001a4 000001a400000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a4000001a4 57fdbb3e000001a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcc24f9aa98a8f5e 372525c68a84cc2c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d1f64a863f0b42d 6d4bc5d0fd56fb80 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003cdc8b RBX=ffff88801dff4b00 RCX=ffffffff8be7c325 RDX=0000000000000001 RSI=ffffffff8e61a1c7 RDI=ffffffff8c832780 RBP=ffffed1003bfe960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed1005606825 R10=ffff88802b03412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8be7a7bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880954a0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bf46b5d828 CR3=000000004d968000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bd5605 RDI=ffffffff9cf197a0 RBP=ffffffff9cf19760 RSP=ffffc9000330e4b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000005b R14=000000000000000e R15=ffffc9000330e7d0 RIP=ffffffff85bd562f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880955a0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bf46b8b450 CR3=000000004d968000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=00000000fffffe00 Opmask02=00000000ffffffff Opmask03=0000000002082001 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bf46cc36b0 000055bf46cc36b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bf46b5ef90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4f7f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4f7f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 431d1c1a1416015c 43000611171d5c43 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000306573 7500312d6c617574 7269562d31647261 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f4f7f2200 00007f8f4f7f2200 0000000000002841 0000000000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000