Warning: Permanently added '[localhost]:36859' (ED25519) to the list of known hosts. 2026/07/08 17:27:58 parsed 1 programs 2026/07/08 17:27:58 serving rpc on tcp://39773 syzkaller login: [ 62.173480][ T5615] cgroup: Unknown subsys name 'net' [ 62.281267][ T5615] cgroup: Unknown subsys name 'cpuset' [ 62.287024][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.620637][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.059100][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.571210][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.575857][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.671924][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.675681][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.468937][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.471774][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.473985][ T5645] bridge_slave_0: entered allmulticast mode [ 67.477045][ T5645] bridge_slave_0: entered promiscuous mode [ 67.506695][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.509443][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.511782][ T5645] bridge_slave_1: entered allmulticast mode [ 67.514405][ T5645] bridge_slave_1: entered promiscuous mode [ 67.547796][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.568320][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.646335][ T5645] team0: Port device team_slave_0 added [ 67.663449][ T5645] team0: Port device team_slave_1 added [ 67.742812][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.751489][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.782600][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.790111][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.792429][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.804199][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.865090][ T5645] hsr_slave_0: entered promiscuous mode [ 67.867471][ T5645] hsr_slave_1: entered promiscuous mode [ 68.365662][ T5704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.371562][ T5704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.375502][ T5704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.384043][ T5704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.389089][ T5704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.424528][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.457945][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.473102][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.485684][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.499451][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.510205][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.520632][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.529547][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.882524][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.901967][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.911864][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.914933][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.929562][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.932444][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.208161][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.243735][ T5645] veth0_vlan: entered promiscuous mode [ 69.250133][ T5645] veth1_vlan: entered promiscuous mode [ 69.273571][ T5645] veth0_macvtap: entered promiscuous mode [ 69.280550][ T5645] veth1_macvtap: entered promiscuous mode [ 69.290790][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.297865][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.307829][ T5681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.311449][ T5681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.314982][ T5681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.318324][ T5681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/08 17:28:07 executed programs: 0 [ 69.502194][ T5704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.511217][ T5704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.514597][ T5704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.520072][ T5704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.525884][ T5704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.554462][ T5704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.567804][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.577720][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.579989][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.584191][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.594642][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.600998][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.604238][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.606614][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.609774][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.970775][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.413280][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.416183][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.418696][ T5741] bridge_slave_0: entered allmulticast mode [ 70.421564][ T5741] bridge_slave_0: entered promiscuous mode [ 70.433306][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.435782][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.438078][ T5737] bridge_slave_0: entered allmulticast mode [ 70.441306][ T5737] bridge_slave_0: entered promiscuous mode [ 70.444110][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.446845][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.449660][ T5741] bridge_slave_1: entered allmulticast mode [ 70.452284][ T5741] bridge_slave_1: entered promiscuous mode [ 70.467603][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.470445][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.472984][ T5737] bridge_slave_1: entered allmulticast mode [ 70.475677][ T5737] bridge_slave_1: entered promiscuous mode [ 70.520391][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.538238][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.542700][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.546703][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.549853][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.552568][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.555318][ T5742] bridge_slave_0: entered allmulticast mode [ 70.559126][ T5742] bridge_slave_0: entered promiscuous mode [ 70.592134][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.595019][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.597868][ T5742] bridge_slave_1: entered allmulticast mode [ 70.601854][ T5742] bridge_slave_1: entered promiscuous mode [ 70.624067][ T5741] team0: Port device team_slave_0 added [ 70.640682][ T5737] team0: Port device team_slave_0 added [ 70.644415][ T5741] team0: Port device team_slave_1 added [ 70.655472][ T5737] team0: Port device team_slave_1 added [ 70.666118][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.692975][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.709416][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.711475][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.719156][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.723232][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.725954][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.735173][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.739365][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.741633][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.751118][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.768297][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.771527][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.779229][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.793136][ T5742] team0: Port device team_slave_0 added [ 70.800968][ T5742] team0: Port device team_slave_1 added [ 70.812832][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.839325][ T5737] hsr_slave_0: entered promiscuous mode [ 70.841523][ T5737] hsr_slave_1: entered promiscuous mode [ 70.843534][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 70.845331][ T5737] Cannot create hsr debugfs directory [ 70.886746][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.888949][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.896344][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.900387][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.902474][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.909899][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.919815][ T5741] hsr_slave_0: entered promiscuous mode [ 70.923385][ T5741] hsr_slave_1: entered promiscuous mode [ 70.925487][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 70.927307][ T5741] Cannot create hsr debugfs directory [ 70.940703][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.029954][ T5742] hsr_slave_0: entered promiscuous mode [ 71.033003][ T5742] hsr_slave_1: entered promiscuous mode [ 71.035075][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 71.036765][ T5742] Cannot create hsr debugfs directory [ 71.292669][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.303321][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.307243][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.314432][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.317961][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.324201][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.335728][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.341744][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.374558][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.380192][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.387392][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.392979][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.395583][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.400474][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.403656][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.411354][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.491179][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.504069][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.518074][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.535906][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.538792][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.544843][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.554201][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.556714][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.566677][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.569620][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.573345][ T5747] Bluetooth: hci1: command tx timeout [ 71.586838][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.589092][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.648857][ T5747] Bluetooth: hci2: command tx timeout [ 71.658622][ T5747] Bluetooth: hci3: command tx timeout [ 71.703767][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.868052][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.905160][ T5741] veth0_vlan: entered promiscuous mode [ 71.910964][ T5741] veth1_vlan: entered promiscuous mode [ 71.916556][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.942143][ T5741] veth0_macvtap: entered promiscuous mode [ 71.950365][ T5741] veth1_macvtap: entered promiscuous mode [ 71.962586][ T5737] veth0_vlan: entered promiscuous mode [ 71.970449][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.973261][ T5737] veth1_vlan: entered promiscuous mode [ 71.981389][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.991833][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.998737][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.002740][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.006434][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.039974][ T5737] veth0_macvtap: entered promiscuous mode [ 72.047646][ T5737] veth1_macvtap: entered promiscuous mode [ 72.066592][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.071420][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.076459][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.093756][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.094753][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.096774][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.107148][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.110747][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.118040][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.121235][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.192412][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.195373][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.198846][ T5828] ------------[ cut here ]------------ [ 72.200569][ T5828] debug_locks && !(lock_is_held(&(&kvm->slots_lock)->dep_map) != 0) [ 72.200576][ T5828] WARNING: arch/x86/kvm/../../../virt/kvm/kvm_main.c:6027 at kvm_io_bus_unregister_dev+0x4b0/0x580, CPU#1: syz.2.19/5828 [ 72.206637][ T5828] Modules linked in: [ 72.207804][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 72.210859][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 72.214315][ T5828] RIP: 0010:kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.216199][ T5828] Code: 3f fc ff ff e8 a1 ce 86 00 48 c7 c7 40 f7 c1 8b e8 a5 29 e9 ff 48 89 ef e8 ed 00 00 00 b8 f4 ff ff ff eb a3 e8 81 ce 86 00 90 <0f> 0b 90 e9 cd fb ff ff 48 c7 c1 e0 bb 2f 90 80 e1 07 80 c1 03 38 [ 72.222013][ T5828] RSP: 0018:ffffc900032afc30 EFLAGS: 00010293 [ 72.223844][ T5828] RAX: ffffffff813e81af RBX: ffff88816b133688 RCX: ffff888160aba540 [ 72.226176][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.228644][ T5828] RBP: 0000000000000000 R08: ffffc900032afb7f R09: 0000000000000000 [ 72.230949][ T5828] R10: ffffc900032afb70 R11: ffffffff81404850 R12: dffffc0000000000 [ 72.233265][ T5828] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8881a5354000 [ 72.235612][ T5828] FS: 000055555b90c500(0000) GS:ffff8882a92b9000(0000) knlGS:0000000000000000 [ 72.238171][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.240264][ T5828] CR2: 0000001b33663fff CR3: 00000001bceb8000 CR4: 0000000000352ef0 [ 72.242759][ T5828] Call Trace: [ 72.243808][ T5828] [ 72.244698][ T5828] ? kvm_mmu_free_memory_cache+0x1c8/0x260 [ 72.246454][ T5828] mmio_test_destroy+0x66/0x90 [ 72.247946][ T5828] kvm_put_kvm+0x902/0xae0 [ 72.249480][ T5828] ? __pfx_kvm_vm_release+0x10/0x10 [ 72.251030][ T5828] kvm_vm_release+0x43/0x50 [ 72.252343][ T5828] __fput+0x418/0xa50 [ 72.253524][ T5828] task_work_run+0x1d9/0x270 [ 72.254969][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 72.256305][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.256726][ T5828] exit_to_user_mode_loop+0x193/0x6b0 [ 72.256738][ T5828] ? rcu_is_watching+0x15/0xb0 [ 72.256748][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.256757][ T5828] do_syscall_64+0x353/0x580 [ 72.260230][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.261356][ T5828] ? trace_irq_disable+0x3b/0x140 [ 72.271812][ T5828] ? clear_bhb_loop+0x40/0x90 [ 72.273584][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.275784][ T5828] RIP: 0033:0x7f2f43d9ce59 [ 72.277472][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.284878][ T5828] RSP: 002b:00007ffde9296e78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.287738][ T5828] RAX: 0000000000000000 RBX: 00007ffde9296f60 RCX: 00007f2f43d9ce59 [ 72.291011][ T5828] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.293743][ T5828] RBP: 0000000000011938 R08: 0000000000000001 R09: 0000000000000000 [ 72.296072][ T5828] R10: 0000001b32a20000 R11: 0000000000000246 R12: 00007ffde9296fa0 [ 72.298609][ T5828] R13: 00007f2f44015fac R14: 0000000000011971 R15: 00007f2f44015fa0 [ 72.300931][ T5828] [ 72.302024][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.304123][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 72.306770][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 72.309656][ T5828] Call Trace: [ 72.310642][ T5828] [ 72.311514][ T5828] vpanic+0x56c/0xa60 [ 72.312702][ T5828] ? __pfx__printk+0x10/0x10 [ 72.314053][ T5828] ? __pfx_vpanic+0x10/0x10 [ 72.315370][ T5828] ? is_bpf_text_address+0x292/0x2b0 [ 72.316917][ T5828] ? is_bpf_text_address+0x26/0x2b0 [ 72.318437][ T5828] panic+0xc5/0xd0 [ 72.319822][ T5828] ? __pfx_panic+0x10/0x10 [ 72.321241][ T5828] __warn+0x315/0x4c0 [ 72.322401][ T5828] ? kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.324306][ T5828] ? kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.326441][ T5828] __report_bug+0x28e/0x530 [ 72.328158][ T5828] ? kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.330314][ T5828] ? __pfx___report_bug+0x10/0x10 [ 72.332215][ T5828] ? radix_tree_next_chunk+0x9c1/0xae0 [ 72.334329][ T5828] ? radix_tree_next_chunk+0x9c1/0xae0 [ 72.336147][ T5828] ? kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.338291][ T5828] report_bug+0x16a/0x220 [ 72.339868][ T5828] ? kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.342098][ T5828] ? kvm_io_bus_unregister_dev+0x4b2/0x580 [ 72.344321][ T5828] handle_bug+0x9c/0x200 [ 72.345961][ T5828] exc_invalid_op+0x1a/0x50 [ 72.347671][ T5828] asm_exc_invalid_op+0x1a/0x20 [ 72.349411][ T5828] RIP: 0010:kvm_io_bus_unregister_dev+0x4b0/0x580 [ 72.351281][ T5828] Code: 3f fc ff ff e8 a1 ce 86 00 48 c7 c7 40 f7 c1 8b e8 a5 29 e9 ff 48 89 ef e8 ed 00 00 00 b8 f4 ff ff ff eb a3 e8 81 ce 86 00 90 <0f> 0b 90 e9 cd fb ff ff 48 c7 c1 e0 bb 2f 90 80 e1 07 80 c1 03 38 [ 72.356761][ T5828] RSP: 0018:ffffc900032afc30 EFLAGS: 00010293 [ 72.358508][ T5828] RAX: ffffffff813e81af RBX: ffff88816b133688 RCX: ffff888160aba540 [ 72.360757][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.363014][ T5828] RBP: 0000000000000000 R08: ffffc900032afb7f R09: 0000000000000000 [ 72.365246][ T5828] R10: ffffc900032afb70 R11: ffffffff81404850 R12: dffffc0000000000 [ 72.367509][ T5828] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8881a5354000 [ 72.369771][ T5828] ? __pfx_mmio_test_destroy+0x10/0x10 [ 72.371320][ T5828] ? kvm_io_bus_unregister_dev+0x4af/0x580 [ 72.373421][ T5828] ? kvm_mmu_free_memory_cache+0x1c8/0x260 [ 72.375451][ T5828] mmio_test_destroy+0x66/0x90 [ 72.376856][ T5828] kvm_put_kvm+0x902/0xae0 [ 72.378154][ T5828] ? __pfx_kvm_vm_release+0x10/0x10 [ 72.379661][ T5828] kvm_vm_release+0x43/0x50 [ 72.380961][ T5828] __fput+0x418/0xa50 [ 72.382212][ T5828] task_work_run+0x1d9/0x270 [ 72.383644][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 72.385201][ T5828] exit_to_user_mode_loop+0x193/0x6b0 [ 72.386774][ T5828] ? rcu_is_watching+0x15/0xb0 [ 72.388568][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.390936][ T5828] do_syscall_64+0x353/0x580 [ 72.392704][ T5828] ? trace_irq_disable+0x3b/0x140 [ 72.394687][ T5828] ? clear_bhb_loop+0x40/0x90 [ 72.396408][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.398204][ T5828] RIP: 0033:0x7f2f43d9ce59 [ 72.399572][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.406041][ T5828] RSP: 002b:00007ffde9296e78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.409130][ T5828] RAX: 0000000000000000 RBX: 00007ffde9296f60 RCX: 00007f2f43d9ce59 [ 72.411844][ T5828] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.413982][ T5828] RBP: 0000000000011938 R08: 0000000000000001 R09: 0000000000000000 [ 72.416629][ T5828] R10: 0000001b32a20000 R11: 0000000000000246 R12: 00007ffde9296fa0 [ 72.419301][ T5828] R13: 00007f2f44015fac R14: 0000000000011971 R15: 00007f2f44015fa0 [ 72.421650][ T5828] [ 72.423460][ T5828] Kernel Offset: disabled [ 72.424750][ T5828] Rebooting in 86400 seconds..