last executing test programs: 12.833127228s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm/parameters/halt_poll_ns_grow\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x1dcd6500}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.530710999s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr msr/read_msr\x00', 0x1b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/events/eprobes/my_read_msr/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\x00', 0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) pread64(r3, &(0x7f0000000280)=""/8, 0x8, 0x10) 12.10972896s ago: executing program 2 (id=13): syz_emit_vhci(&(0x7f0000001840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x413}}}, 0x7) 12.043139032s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='sunrpc\x00', &(0x7f0000000280)='./rpc_pipefs\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='-2 -3\n\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='tcp 2049\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000540)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='* /tmp 2147483647 0 65534 65534 0\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000640)='* 1 \\x00000000 2147483647 /tmp\n\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x1ff) mount(&(0x7f00000006c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000780)='addr=127.0.0.1,vers=4.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x10000, 0x0) getdents64(r6, &(0x7f0000000800)=""/256, 0x100) 11.423714279s ago: executing program 2 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xfee00000, 0x0, 0x30}) 5.564911232s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000780)={0x0, 0x1dcd6500}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 5.501169162s ago: executing program 32 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000780)={0x0, 0x1dcd6500}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 4.263553181s ago: executing program 3 (id=40): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) close(r0) 3.51917827s ago: executing program 1 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x11, r2, 0x40000) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 3.385832337s ago: executing program 1 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/69, 0x45}], 0x5}, 0x20) 3.275878654s ago: executing program 1 (id=47): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) unshare(0x42000000) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.103531979s ago: executing program 1 (id=48): r0 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mkdir(&(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='1\n', 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) r6 = openat(r4, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000f00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) r7 = openat(r4, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000001100)="6c6f63616c686f7374203120010000002032303030303030303030202f746d700a", 0x21) nanosleep(&(0x7f0000001200)={0x1}, 0x0) mkdir(&(0x7f0000001300)='./mnt\x00', 0x1ff) mount(&(0x7f0000001400)=@filename='127.0.0.1:/tmp\x00', &(0x7f0000001500)='./mnt\x00', &(0x7f0000001600)='nfs\x00', 0x0, &(0x7f0000001700)='port=2049,addr=127.0.0.1,vers=4.1,clientaddr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./mnt/file\x00', 0x42, 0x1ff) write(r8, &(0x7f0000001900)='hello\x00', 0x5) 2.964274085s ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracefs_dir/free_buffer\x00', 0x8081, 0xa) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r0) 2.872004341s ago: executing program 3 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file3\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./file3\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./reg_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./fifo_file\x00', 0x1000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) 2.871711003s ago: executing program 3 (id=51): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x4, 0xc8}}}, 0x6) 2.778595598s ago: executing program 3 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:1d.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0000:00:1d.7', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0000:00:1d.7', 0xc) 2.109395393s ago: executing program 3 (id=53): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64=r0], 0x7) 1.813288823s ago: executing program 4 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x30, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xb2}, @void, @void, @void, @void, @void}, 0x31) 1.337202806s ago: executing program 0 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='2\x00', 0x2) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000}) 1.297272281s ago: executing program 1 (id=55): syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002020000082505a5a4400001020301090241000101000000090400000202060000052406000005240000000d240f0101050000feff020000062407380700090582020000005004090503"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0xb}) 1.176143955s ago: executing program 4 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000000001000006020202020202010182"], 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @broadcast, @device_a, @initial, {0x0, 0x2}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x3}, 0x3d, {0xbd, 0x6}}}}, 0x26) 1.118854548s ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 854.65874ms ago: executing program 0 (id=58): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 772.145504ms ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file3\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./file3\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./reg_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./fifo_file\x00', 0x1000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) 711.860449ms ago: executing program 0 (id=60): syz_emit_ethernet(0xba, &(0x7f0000000080)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x80, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0xff, @private1, @loopback, [@hopopts={0x2f}, @routing={0x3c, 0x8, 0x0, 0x0, 0x0, [@empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}]}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 661.424425ms ago: executing program 0 (id=61): r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='addr\x00', &(0x7f0000000140)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='vers\x00', &(0x7f00000001c0)='4.2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='xprtsec\x00', &(0x7f0000000240)='tls\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 550.246322ms ago: executing program 4 (id=62): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000600)='\n03U', 0x4, 0xc120) pwrite64(r2, &(0x7f0000000700)='\b\x00\x00\x00', 0x4, 0xc14c) pwrite64(r2, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4, 0xc140) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='dwc3-haps', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='0000:00:02.0', 0xc) close(r4) 180.871751ms ago: executing program 4 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) read(r0, &(0x7f0000000200), 0x1000) 86.646409ms ago: executing program 4 (id=64): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='1', 0x1) close(r1) pwrite64(0xffffffffffffffff, &(0x7f0000000600)='\n03U', 0x4, 0xc120) pwrite64(0xffffffffffffffff, &(0x7f0000000700)='\b\x00\x00\x00', 0x4, 0xc14c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='0000:00:02.0', 0xc) 82.471583ms ago: executing program 1 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x8}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 0s ago: executing program 4 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) write(r1, &(0x7f0000000a00)='hello world\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000000a00)='hello again\n', 0xc) close(r2) kernel console output (not intermixed with test programs): e R15: 00007ffe5a06c070 [ 52.355848][ T5145] [ 52.356243][ T137] CPU: 0 UID: 0 PID: 137 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.356257][ T137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.356263][ T137] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.356282][ T137] Call Trace: [ 52.356285][ T137] [ 52.356289][ T137] dump_stack_lvl+0x100/0x190 [ 52.356302][ T137] should_fail_ex.cold+0x5/0xa [ 52.356314][ T137] should_failslab+0xc2/0x120 [ 52.356328][ T137] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.356347][ T137] ? __alloc_skb+0x140/0x710 [ 52.356363][ T137] __alloc_skb+0x140/0x710 [ 52.356375][ T137] ? __alloc_skb+0x5b7/0x710 [ 52.356388][ T137] ? __pfx___alloc_skb+0x10/0x10 [ 52.356403][ T137] ? kfree_skbmem+0x19f/0x210 [ 52.356415][ T137] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.356435][ T137] process_one_work+0xa23/0x1940 [ 52.356456][ T137] ? __pfx_process_one_work+0x10/0x10 [ 52.356474][ T137] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.356490][ T137] worker_thread+0x5ef/0xe50 [ 52.356510][ T137] ? kthread+0x13a/0x450 [ 52.356522][ T137] ? __pfx_worker_thread+0x10/0x10 [ 52.356537][ T137] kthread+0x370/0x450 [ 52.356550][ T137] ? __pfx_kthread+0x10/0x10 [ 52.356564][ T137] ret_from_fork+0x72b/0xd50 [ 52.356577][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 52.356591][ T137] ? __switch_to+0x800/0x10f0 [ 52.356607][ T137] ? __pfx_kthread+0x10/0x10 [ 52.356621][ T137] ret_from_fork_asm+0x1a/0x30 [ 52.356641][ T137] [ 52.356776][ T5145] socket: no more sockets [ 52.357807][ T137] FAULT_INJECTION: forcing a failure. [ 52.357807][ T137] name failslab, interval 1, probability 10, space 0, times 64 [ 52.357830][ T137] CPU: 3 UID: 0 PID: 137 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.357848][ T137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.357857][ T137] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.357880][ T137] Call Trace: [ 52.357885][ T137] [ 52.357891][ T137] dump_stack_lvl+0x100/0x190 [ 52.357909][ T137] should_fail_ex.cold+0x5/0xa [ 52.357927][ T137] should_failslab+0xc2/0x120 [ 52.357947][ T137] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.357967][ T137] ? __alloc_skb+0x140/0x710 [ 52.357987][ T137] __alloc_skb+0x140/0x710 [ 52.358005][ T137] ? __alloc_skb+0x5b7/0x710 [ 52.358023][ T137] ? __pfx___alloc_skb+0x10/0x10 [ 52.358045][ T137] ? kfree_skbmem+0x19f/0x210 [ 52.358063][ T137] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.358094][ T137] process_one_work+0xa23/0x1940 [ 52.358126][ T137] ? __pfx_process_one_work+0x10/0x10 [ 52.358154][ T137] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.358177][ T137] worker_thread+0x5ef/0xe50 [ 52.358213][ T137] ? kthread+0x13a/0x450 [ 52.358232][ T137] ? __pfx_worker_thread+0x10/0x10 [ 52.358252][ T137] kthread+0x370/0x450 [ 52.358271][ T137] ? __pfx_kthread+0x10/0x10 [ 52.358293][ T137] ret_from_fork+0x72b/0xd50 [ 52.358312][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 52.358332][ T137] ? __switch_to+0x800/0x10f0 [ 52.358355][ T137] ? __pfx_kthread+0x10/0x10 [ 52.358376][ T137] ret_from_fork_asm+0x1a/0x30 [ 52.358406][ T137] [ 52.358415][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 52.358429][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.358436][ T61] Workqueue: events nsim_fib_event_work [ 52.358449][ T61] Call Trace: [ 52.358453][ T61] [ 52.358457][ T61] dump_stack_lvl+0x100/0x190 [ 52.358470][ T61] should_fail_ex.cold+0x5/0xa [ 52.358482][ T61] should_failslab+0xc2/0x120 [ 52.358497][ T61] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.358508][ T61] ? nsim_fib_event_work+0x156d/0x6310 [ 52.358521][ T61] nsim_fib_event_work+0x156d/0x6310 [ 52.358539][ T61] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.358549][ T137] FAULT_INJECTION: forcing a failure. [ 52.358549][ T137] name failslab, interval 1, probability 10, space 0, times 63 [ 52.358556][ T61] process_one_work+0xa23/0x1940 [ 52.358577][ T61] ? __pfx_process_one_work+0x10/0x10 [ 52.358596][ T61] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.358608][ T61] worker_thread+0x5ef/0xe50 [ 52.358629][ T61] ? __pfx_worker_thread+0x10/0x10 [ 52.358645][ T61] ? kthread+0x13a/0x450 [ 52.358657][ T61] ? __pfx_worker_thread+0x10/0x10 [ 52.358671][ T61] kthread+0x370/0x450 [ 52.358684][ T61] ? __pfx_kthread+0x10/0x10 [ 52.358699][ T61] ret_from_fork+0x72b/0xd50 [ 52.358712][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 52.358726][ T61] ? __switch_to+0x800/0x10f0 [ 52.358741][ T61] ? __pfx_kthread+0x10/0x10 [ 52.358756][ T61] ret_from_fork_asm+0x1a/0x30 [ 52.358777][ T61] [ 52.359024][ T13] FAULT_INJECTION: forcing a failure. [ 52.359024][ T13] name failslab, interval 1, probability 10, space 0, times 62 [ 52.359056][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.359067][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.359074][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.359088][ T13] Call Trace: [ 52.359091][ T13] [ 52.359095][ T13] dump_stack_lvl+0x100/0x190 [ 52.359107][ T13] should_fail_ex.cold+0x5/0xa [ 52.359124][ T13] should_failslab+0xc2/0x120 [ 52.359138][ T13] __kmalloc_noprof+0xfc/0x820 [ 52.359150][ T13] ? __lock_acquire+0x49f/0x1a40 [ 52.359166][ T13] ? nsim_fib_event_nb+0x64c/0xe40 [ 52.359185][ T13] nsim_fib_event_nb+0x64c/0xe40 [ 52.359203][ T13] ? lock_acquire+0x1b9/0x370 [ 52.359220][ T13] notifier_call_chain+0x99/0x3f0 [ 52.359236][ T13] atomic_notifier_call_chain+0x71/0x1c0 [ 52.359251][ T13] call_fib_notifiers+0x33/0x70 [ 52.359268][ T13] fib6_add_rt2node+0x14e3/0x3df0 [ 52.359286][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 52.359305][ T13] ? fib6_add+0x60e/0x1d30 [ 52.359316][ T13] fib6_add+0x60e/0x1d30 [ 52.359329][ T13] ? do_raw_spin_lock+0x128/0x260 [ 52.359341][ T13] ? __pfx_fib6_add+0x10/0x10 [ 52.359352][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.359366][ T13] ip6_ins_rt+0xb5/0x110 [ 52.359379][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 52.359394][ T13] ? nlmsg_notify+0xbf/0x290 [ 52.359405][ T13] ? nlmsg_notify+0xdc/0x290 [ 52.359416][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.359432][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 52.359444][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 52.359453][ T13] ? __cancel_work+0x2b5/0x340 [ 52.359469][ T13] ? __cancel_work+0x245/0x340 [ 52.359486][ T13] ? __pfx___cancel_work+0x10/0x10 [ 52.359502][ T13] ? __lock_acquire+0x49f/0x1a40 [ 52.359520][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 52.359532][ T13] addrconf_dad_completed+0x195/0xff0 [ 52.359548][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.359565][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 52.359574][ T5145] FAULT_INJECTION: forcing a failure. [ 52.359574][ T5145] name failslab, interval 1, probability 10, space 0, times 62 [ 52.359577][ T13] addrconf_dad_work+0x83c/0x1360 [ 52.359592][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.359607][ T13] ? rcu_is_watching+0x12/0xc0 [ 52.359624][ T13] process_one_work+0xa23/0x1940 [ 52.359644][ T13] ? __pfx_process_one_work+0x10/0x10 [ 52.359663][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.359678][ T13] worker_thread+0x5ef/0xe50 [ 52.359697][ T13] ? kthread+0x13a/0x450 [ 52.359710][ T13] ? __pfx_worker_thread+0x10/0x10 [ 52.359724][ T13] kthread+0x370/0x450 [ 52.359737][ T13] ? __pfx_kthread+0x10/0x10 [ 52.359751][ T13] ret_from_fork+0x72b/0xd50 [ 52.359764][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 52.359778][ T13] ? __switch_to+0x800/0x10f0 [ 52.359794][ T13] ? __pfx_kthread+0x10/0x10 [ 52.359808][ T13] ret_from_fork_asm+0x1a/0x30 [ 52.359828][ T13] [ 52.359912][ T13] FAULT_INJECTION: forcing a failure. [ 52.359912][ T13] name failslab, interval 1, probability 10, space 0, times 61 [ 52.359932][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.359943][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.359950][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.359963][ T13] Call Trace: [ 52.359966][ T13] [ 52.359969][ T13] dump_stack_lvl+0x100/0x190 [ 52.359981][ T13] should_fail_ex.cold+0x5/0xa [ 52.359992][ T13] should_failslab+0xc2/0x120 [ 52.360006][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.360020][ T13] ? __alloc_skb+0x140/0x710 [ 52.360036][ T13] __alloc_skb+0x140/0x710 [ 52.360048][ T13] ? __alloc_skb+0x5b7/0x710 [ 52.360060][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 52.360073][ T13] ? __timer_delete+0xec/0x1b0 [ 52.360087][ T13] ? __pfx___timer_delete+0x10/0x10 [ 52.360104][ T13] __ipv6_ifa_notify+0x1f1/0xf90 [ 52.360119][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 52.360129][ T13] ? __cancel_work+0x2b5/0x340 [ 52.360159][ T13] ? __cancel_work+0x245/0x340 [ 52.360175][ T13] ? __pfx___cancel_work+0x10/0x10 [ 52.360191][ T13] ? __lock_acquire+0x49f/0x1a40 [ 52.360209][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 52.360222][ T13] addrconf_dad_completed+0x195/0xff0 [ 52.360238][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.360255][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 52.360268][ T13] addrconf_dad_work+0x83c/0x1360 [ 52.360282][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.360298][ T13] ? rcu_is_watching+0x12/0xc0 [ 52.360312][ T13] process_one_work+0xa23/0x1940 [ 52.360333][ T13] ? __pfx_process_one_work+0x10/0x10 [ 52.360352][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.360366][ T13] worker_thread+0x5ef/0xe50 [ 52.360386][ T13] ? kthread+0x13a/0x450 [ 52.360399][ T13] ? __pfx_worker_thread+0x10/0x10 [ 52.360413][ T13] kthread+0x370/0x450 [ 52.360427][ T13] ? __pfx_kthread+0x10/0x10 [ 52.360441][ T13] ret_from_fork+0x72b/0xd50 [ 52.360455][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 52.360468][ T13] ? __switch_to+0x800/0x10f0 [ 52.360484][ T13] ? __pfx_kthread+0x10/0x10 [ 52.360499][ T13] ret_from_fork_asm+0x1a/0x30 [ 52.360519][ T13] [ 52.360866][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.360879][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.360886][ T5841] Workqueue: mld mld_dad_work [ 52.360902][ T5841] Call Trace: [ 52.360906][ T5841] [ 52.360910][ T5841] dump_stack_lvl+0x100/0x190 [ 52.360922][ T5841] should_fail_ex.cold+0x5/0xa [ 52.360933][ T5841] should_failslab+0xc2/0x120 [ 52.360948][ T5841] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.360962][ T5841] ? __alloc_skb+0x140/0x710 [ 52.360977][ T5841] __alloc_skb+0x140/0x710 [ 52.360990][ T5841] ? __alloc_skb+0x5b7/0x710 [ 52.361002][ T5841] ? __pfx___alloc_skb+0x10/0x10 [ 52.361016][ T5841] ? __lock_acquire+0x49f/0x1a40 [ 52.361035][ T5841] mld_newpack.isra.0+0x18e/0xa20 [ 52.361051][ T5841] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 52.361068][ T5841] ? rcu_is_watching+0x12/0xc0 [ 52.361082][ T5841] ? add_grhead+0x299/0x340 [ 52.361095][ T5841] add_grhead+0x299/0x340 [ 52.361110][ T5841] add_grec+0x1389/0x1930 [ 52.361129][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 52.361147][ T5841] ? __pfx_add_grec+0x10/0x10 [ 52.361164][ T5841] mld_send_initial_cr+0x156/0x320 [ 52.361180][ T5841] mld_dad_work+0x32/0x1f0 [ 52.361195][ T5841] process_one_work+0xa23/0x1940 [ 52.361215][ T5841] ? __pfx_process_one_work+0x10/0x10 [ 52.361235][ T5841] ? __pfx_mld_dad_work+0x10/0x10 [ 52.361251][ T5841] worker_thread+0x5ef/0xe50 [ 52.361269][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 52.361285][ T5841] ? kthread+0x13a/0x450 [ 52.361298][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 52.361312][ T5841] kthread+0x370/0x450 [ 52.361325][ T5841] ? __pfx_kthread+0x10/0x10 [ 52.361340][ T5841] ret_from_fork+0x72b/0xd50 [ 52.361353][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 52.361366][ T5841] ? __switch_to+0x800/0x10f0 [ 52.361382][ T5841] ? __pfx_kthread+0x10/0x10 [ 52.361397][ T5841] ret_from_fork_asm+0x1a/0x30 [ 52.361428][ T5841] [ 52.361436][ T137] CPU: 3 UID: 0 PID: 137 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.361454][ T137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.361463][ T137] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.361485][ T137] Call Trace: [ 52.361490][ T137] [ 52.361496][ T137] dump_stack_lvl+0x100/0x190 [ 52.361513][ T137] should_fail_ex.cold+0x5/0xa [ 52.361528][ T137] should_failslab+0xc2/0x120 [ 52.361547][ T137] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.361568][ T137] ? __alloc_skb+0x140/0x710 [ 52.361590][ T137] __alloc_skb+0x140/0x710 [ 52.361608][ T137] ? __alloc_skb+0x5b7/0x710 [ 52.361627][ T137] ? __pfx___alloc_skb+0x10/0x10 [ 52.361648][ T137] ? kfree_skbmem+0x19f/0x210 [ 52.361665][ T13] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 52.361666][ T137] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.361697][ T137] process_one_work+0xa23/0x1940 [ 52.361727][ T137] ? __pfx_process_one_work+0x10/0x10 [ 52.361756][ T137] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.361779][ T137] worker_thread+0x5ef/0xe50 [ 52.361808][ T137] ? kthread+0x13a/0x450 [ 52.361826][ T137] ? __pfx_worker_thread+0x10/0x10 [ 52.361846][ T137] kthread+0x370/0x450 [ 52.361865][ T137] ? __pfx_kthread+0x10/0x10 [ 52.361886][ T137] ret_from_fork+0x72b/0xd50 [ 52.361905][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 52.361925][ T137] ? __switch_to+0x800/0x10f0 [ 52.361948][ T137] ? __pfx_kthread+0x10/0x10 [ 52.361970][ T137] ret_from_fork_asm+0x1a/0x30 [ 52.362001][ T137] [ 52.363492][ T5145] CPU: 2 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.363505][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.363511][ T5145] Call Trace: [ 52.363516][ T5145] [ 52.363520][ T5145] dump_stack_lvl+0x100/0x190 [ 52.363533][ T5145] should_fail_ex.cold+0x5/0xa [ 52.363545][ T5145] should_failslab+0xc2/0x120 [ 52.363559][ T5145] __kmalloc_noprof+0xfc/0x820 [ 52.363572][ T5145] ? tomoyo_encode2+0xfb/0x3c0 [ 52.363591][ T5145] tomoyo_encode2+0xfb/0x3c0 [ 52.363608][ T5145] tomoyo_unix_entry+0x343/0x640 [ 52.363624][ T5145] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 52.363647][ T5145] tomoyo_socket_connect_permission+0x31a/0x360 [ 52.363664][ T5145] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 52.363682][ T5145] ? __might_fault+0xc5/0x140 [ 52.363697][ T5145] security_socket_connect+0xd3/0x230 [ 52.363710][ T5145] __sys_connect_file+0x8f/0x1a0 [ 52.363724][ T5145] __sys_connect+0x141/0x170 [ 52.363737][ T5145] ? __pfx___sys_connect+0x10/0x10 [ 52.363757][ T5145] __x64_sys_connect+0x72/0xb0 [ 52.363770][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.363782][ T5145] do_syscall_64+0x115/0x840 [ 52.363794][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.363810][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.363826][ T5145] RIP: 0033:0x7fb80a804407 [ 52.363839][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.363854][ T5145] RSP: 002b:00007ffe5a06bf00 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 52.363871][ T5145] RAX: ffffffffffffffda RBX: 00007fb80a6b4c80 RCX: 00007fb80a804407 [ 52.363881][ T5145] RDX: 000000000000006e RSI: 00007fb80a90b560 RDI: 0000000000000003 [ 52.363890][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000000 R09: 0000000000000000 [ 52.363896][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.363902][ T5145] R13: 0000000000000017 R14: 0000000000000032 R15: 00007ffe5a06c070 [ 52.363915][ T5145] [ 52.364082][ T5145] FAULT_INJECTION: forcing a failure. [ 52.364082][ T5145] name failslab, interval 1, probability 10, space 0, times 56 [ 52.386068][ T137] FAULT_INJECTION: forcing a failure. [ 52.386068][ T137] name failslab, interval 1, probability 10, space 0, times 55 [ 52.386627][ T5145] CPU: 2 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.386642][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.386648][ T5145] Call Trace: [ 52.386653][ T5145] [ 52.386657][ T5145] dump_stack_lvl+0x100/0x190 [ 52.386674][ T5145] should_fail_ex.cold+0x5/0xa [ 52.386686][ T5145] should_failslab+0xc2/0x120 [ 52.386702][ T5145] __kmalloc_noprof+0xfc/0x820 [ 52.386716][ T5145] ? tomoyo_encode2+0xfb/0x3c0 [ 52.386736][ T5145] tomoyo_encode2+0xfb/0x3c0 [ 52.386753][ T5145] tomoyo_unix_entry+0x343/0x640 [ 52.386769][ T5145] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 52.386793][ T5145] tomoyo_socket_connect_permission+0x31a/0x360 [ 52.386810][ T5145] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 52.386828][ T5145] ? __might_fault+0xc5/0x140 [ 52.386843][ T5145] security_socket_connect+0xd3/0x230 [ 52.386856][ T5145] __sys_connect_file+0x8f/0x1a0 [ 52.386871][ T5145] __sys_connect+0x141/0x170 [ 52.386884][ T5145] ? __pfx___sys_connect+0x10/0x10 [ 52.386905][ T5145] __x64_sys_connect+0x72/0xb0 [ 52.386916][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.386930][ T5145] do_syscall_64+0x115/0x840 [ 52.386943][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.386978][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.386990][ T5145] RIP: 0033:0x7fb80a804407 [ 52.387001][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.387011][ T5145] RSP: 002b:00007ffe5a06bf00 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 52.387022][ T5145] RAX: ffffffffffffffda RBX: 00007fb80a6b4c80 RCX: 00007fb80a804407 [ 52.387028][ T5145] RDX: 000000000000006e RSI: 00007fb80a90b560 RDI: 0000000000000003 [ 52.387034][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000000 R09: 0000000000000000 [ 52.387040][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.387046][ T5145] R13: 0000000000000017 R14: 0000000000000033 R15: 00007ffe5a06c070 [ 52.387059][ T5145] [ 52.387233][ T5145] FAULT_INJECTION: forcing a failure. [ 52.387233][ T5145] name failslab, interval 1, probability 10, space 0, times 54 [ 52.390979][ T137] CPU: 3 UID: 0 PID: 137 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.391015][ T137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.391027][ T137] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.391054][ T137] Call Trace: [ 52.391060][ T137] [ 52.391067][ T137] dump_stack_lvl+0x100/0x190 [ 52.391088][ T137] should_fail_ex.cold+0x5/0xa [ 52.391107][ T137] should_failslab+0xc2/0x120 [ 52.391129][ T137] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.391151][ T137] ? __alloc_skb+0x140/0x710 [ 52.391174][ T137] __alloc_skb+0x140/0x710 [ 52.391192][ T137] ? __alloc_skb+0x5b7/0x710 [ 52.391215][ T137] ? __pfx___alloc_skb+0x10/0x10 [ 52.391236][ T137] ? kfree_skbmem+0x19f/0x210 [ 52.391255][ T137] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.391286][ T137] process_one_work+0xa23/0x1940 [ 52.391318][ T137] ? __pfx_process_one_work+0x10/0x10 [ 52.391346][ T137] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.391369][ T137] worker_thread+0x5ef/0xe50 [ 52.391398][ T137] ? kthread+0x13a/0x450 [ 52.391417][ T137] ? __pfx_worker_thread+0x10/0x10 [ 52.391437][ T137] kthread+0x370/0x450 [ 52.391457][ T137] ? __pfx_kthread+0x10/0x10 [ 52.391478][ T137] ret_from_fork+0x72b/0xd50 [ 52.391498][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 52.391517][ T137] ? __switch_to+0x800/0x10f0 [ 52.391542][ T137] ? __pfx_kthread+0x10/0x10 [ 52.391563][ T137] ret_from_fork_asm+0x1a/0x30 [ 52.391595][ T137] [ 52.405848][ T29] FAULT_INJECTION: forcing a failure. [ 52.405848][ T29] name failslab, interval 1, probability 10, space 0, times 51 [ 52.406456][ T5145] CPU: 2 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.406471][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.406477][ T5145] Call Trace: [ 52.406481][ T5145] [ 52.406485][ T5145] dump_stack_lvl+0x100/0x190 [ 52.406501][ T5145] should_fail_ex.cold+0x5/0xa [ 52.406514][ T5145] should_failslab+0xc2/0x120 [ 52.406529][ T5145] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 52.406543][ T5145] ? __d_alloc+0x35/0xa50 [ 52.406557][ T5145] __d_alloc+0x35/0xa50 [ 52.406570][ T5145] d_alloc_pseudo+0x1c/0xc0 [ 52.406584][ T5145] alloc_file_pseudo+0x118/0x290 [ 52.406599][ T5145] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 52.406612][ T5145] ? alloc_fd+0x471/0x7a0 [ 52.406625][ T5145] sock_alloc_file+0x50/0x210 [ 52.406641][ T5145] __sys_socket+0x1c0/0x260 [ 52.406653][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.406668][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.406678][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.406692][ T5145] do_syscall_64+0x115/0x840 [ 52.406704][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.406716][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.406727][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.406737][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.406747][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.406757][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.406763][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.406769][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.406775][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.406781][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000032 R15: 00007ffe5a06c070 [ 52.406794][ T5145] [ 52.408311][ T5145] FAULT_INJECTION: forcing a failure. [ 52.408311][ T5145] name failslab, interval 1, probability 10, space 0, times 48 [ 52.411347][ T5746] FAULT_INJECTION: forcing a failure. [ 52.411347][ T5746] name failslab, interval 1, probability 10, space 0, times 45 [ 52.411566][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.411587][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.411596][ T5145] Call Trace: [ 52.411602][ T5145] [ 52.411608][ T5145] dump_stack_lvl+0x100/0x190 [ 52.411630][ T5145] should_fail_ex.cold+0x5/0xa [ 52.411648][ T5145] should_failslab+0xc2/0x120 [ 52.411673][ T5676] FAULT_INJECTION: forcing a failure. [ 52.411673][ T5676] name failslab, interval 1, probability 10, space 0, times 45 [ 52.411671][ T5145] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.411692][ T5145] ? __alloc_skb+0x5b7/0x710 [ 52.411712][ T5145] ? __alloc_skb+0x140/0x710 [ 52.411734][ T5145] __alloc_skb+0x140/0x710 [ 52.411752][ T5145] ? __alloc_skb+0x5b7/0x710 [ 52.411770][ T5145] ? __pfx___alloc_skb+0x10/0x10 [ 52.411790][ T5145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.411811][ T5145] alloc_skb_with_frags+0xdd/0x760 [ 52.411839][ T5145] sock_alloc_send_pskb+0x801/0x980 [ 52.411865][ T5145] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 52.411889][ T5145] ? __lock_acquire+0x49f/0x1a40 [ 52.411915][ T5145] unix_dgram_sendmsg+0x3c7/0x1810 [ 52.411938][ T5145] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 52.411964][ T5145] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 52.411986][ T5145] ? unix_dgram_connect+0x24d/0xbf0 [ 52.412006][ T5145] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 52.412031][ T5145] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.412051][ T5145] __sys_sendto+0x48b/0x4e0 [ 52.412069][ T5145] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 52.412090][ T5145] ? __pfx___sys_sendto+0x10/0x10 [ 52.412115][ T5145] ? __sys_connect+0xe4/0x170 [ 52.412146][ T5145] __x64_sys_sendto+0xe0/0x1c0 [ 52.412164][ T5145] ? do_syscall_64+0x90/0x840 [ 52.412183][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.412206][ T5145] do_syscall_64+0x115/0x840 [ 52.412223][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.412242][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.412258][ T5145] RIP: 0033:0x7fb80a804407 [ 52.412272][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.412286][ T5145] RSP: 002b:00007ffe5a06bf30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 52.412301][ T5145] RAX: ffffffffffffffda RBX: 00007fb80a6b4c80 RCX: 00007fb80a804407 [ 52.412311][ T5145] RDX: 0000000000000078 RSI: 00007ffe5a06c070 RDI: 0000000000000003 [ 52.412320][ T5145] RBP: 00007ffe5a06c4a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.412328][ T5145] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe5a06c4b8 [ 52.412338][ T5145] R13: 00007ffe5a06c070 R14: 000000000000005d R15: 00007ffe5a06c070 [ 52.412358][ T5145] [ 52.412509][ T5145] FAULT_INJECTION: forcing a failure. [ 52.412509][ T5145] name failslab, interval 1, probability 10, space 0, times 44 [ 52.412528][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.412545][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.412553][ T5145] Call Trace: [ 52.412558][ T5145] [ 52.412563][ T5145] dump_stack_lvl+0x100/0x190 [ 52.412582][ T5145] should_fail_ex.cold+0x5/0xa [ 52.412599][ T5145] should_failslab+0xc2/0x120 [ 52.412620][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.412638][ T5145] ? __pfx_map_id_range_down+0x10/0x10 [ 52.412660][ T5145] ? security_inode_alloc+0x3b/0x2c0 [ 52.412682][ T5145] security_inode_alloc+0x3b/0x2c0 [ 52.412700][ T5145] inode_init_always_gfp+0xc77/0xfb0 [ 52.412719][ T5145] alloc_inode+0x8e/0x250 [ 52.412739][ T5145] sock_alloc+0x44/0x280 [ 52.412760][ T5145] ? security_socket_create+0x7f/0x250 [ 52.412778][ T5145] __sock_create+0xc2/0x860 [ 52.412798][ T5145] __sys_socket+0x14d/0x260 [ 52.412816][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.412838][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.412854][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.412872][ T5145] do_syscall_64+0x115/0x840 [ 52.412889][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.412905][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.412920][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.412932][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.412946][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.412959][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.412968][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.412978][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.412986][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.412995][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000058 R15: 00007ffe5a06c070 [ 52.413016][ T5145] [ 52.413031][ T5145] socket: no more sockets [ 52.413109][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.413132][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.413142][ T5746] Call Trace: [ 52.413148][ T5746] [ 52.413156][ T5746] dump_stack_lvl+0x100/0x190 [ 52.413176][ T5746] should_fail_ex.cold+0x5/0xa [ 52.413188][ T5746] should_failslab+0xc2/0x120 [ 52.413203][ T5746] __kmalloc_noprof+0xfc/0x820 [ 52.413215][ T5746] ? rcu_is_watching+0x12/0xc0 [ 52.413217][ T5145] FAULT_INJECTION: forcing a failure. [ 52.413217][ T5145] name failslab, interval 1, probability 10, space 0, times 43 [ 52.413228][ T5746] ? tomoyo_realpath_from_path+0xb6/0x690 [ 52.413246][ T5746] tomoyo_realpath_from_path+0xb6/0x690 [ 52.413265][ T5746] tomoyo_path_perm+0x276/0x460 [ 52.413278][ T5746] ? tomoyo_path_perm+0x262/0x460 [ 52.413292][ T5746] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 52.413319][ T5746] ? kasan_quarantine_put+0x104/0x240 [ 52.413335][ T5746] ? lockdep_hardirqs_on+0x78/0x100 [ 52.413350][ T5746] security_inode_getattr+0x116/0x280 [ 52.413364][ T5746] do_statx_fd+0x120/0x3b0 [ 52.413379][ T5746] ? __pfx_do_statx_fd+0x10/0x10 [ 52.413392][ T5746] ? putname+0xb6/0x110 [ 52.413411][ T5746] ? __might_fault+0x111/0x140 [ 52.413424][ T5746] __ia32_sys_statx+0x199/0x1f0 [ 52.413440][ T5746] __do_fast_syscall_32+0xe7/0x970 [ 52.413454][ T5746] ? lockdep_hardirqs_on+0x78/0x100 [ 52.413474][ T5746] do_fast_syscall_32+0x32/0x70 [ 52.413497][ T5746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.413512][ T5746] RIP: 0023:0xf6fdefec [ 52.413521][ T5746] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.413531][ T5746] RSP: 002b:00000000ff891ae0 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 52.413541][ T5746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f71ff4d7 [ 52.413548][ T5746] RDX: 0000000000001800 RSI: 00000000000007ff RDI: 00000000ff891b7c [ 52.413554][ T5746] RBP: 00000000ff891cd0 R08: 0000000000000000 R09: 0000000000000000 [ 52.413559][ T5746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 52.413565][ T5746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.413578][ T5746] [ 52.413582][ T5746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 52.413586][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.413607][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.413617][ T29] Workqueue: events nsim_fib_event_work [ 52.413639][ T29] Call Trace: [ 52.413644][ T29] [ 52.413650][ T29] dump_stack_lvl+0x100/0x190 [ 52.413671][ T29] should_fail_ex.cold+0x5/0xa [ 52.413688][ T29] should_failslab+0xc2/0x120 [ 52.413711][ T29] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.413726][ T29] ? __kasan_kmalloc+0xaa/0xb0 [ 52.413748][ T29] ? nsim_fib6_rt_nh_add+0x4a/0x290 [ 52.413777][ T29] nsim_fib6_rt_nh_add+0x4a/0x290 [ 52.413811][ T29] nsim_fib_event_work+0x16ed/0x6310 [ 52.413837][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 52.413864][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.413887][ T29] ? rcu_is_watching+0x12/0xc0 [ 52.413911][ T29] process_one_work+0xa23/0x1940 [ 52.413945][ T29] ? __pfx_process_one_work+0x10/0x10 [ 52.413976][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.413995][ T29] worker_thread+0x5ef/0xe50 [ 52.414027][ T29] ? kthread+0x13a/0x450 [ 52.414048][ T29] ? __pfx_worker_thread+0x10/0x10 [ 52.414070][ T29] kthread+0x370/0x450 [ 52.414091][ T29] ? __pfx_kthread+0x10/0x10 [ 52.414113][ T29] ret_from_fork+0x72b/0xd50 [ 52.414136][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 52.414174][ T29] ? __switch_to+0x800/0x10f0 [ 52.414200][ T29] ? __pfx_kthread+0x10/0x10 [ 52.414224][ T29] ret_from_fork_asm+0x1a/0x30 [ 52.414258][ T29] [ 52.414812][ T5156] FAULT_INJECTION: forcing a failure. [ 52.414812][ T5156] name failslab, interval 1, probability 10, space 0, times 41 [ 52.415276][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.415297][ T5676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.415305][ T5676] Call Trace: [ 52.415310][ T5676] [ 52.415315][ T5676] dump_stack_lvl+0x100/0x190 [ 52.415333][ T5676] should_fail_ex.cold+0x5/0xa [ 52.415349][ T5676] should_failslab+0xc2/0x120 [ 52.415367][ T5676] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.415386][ T5676] ? __alloc_skb+0x140/0x710 [ 52.415408][ T5676] __alloc_skb+0x140/0x710 [ 52.415426][ T5676] ? __pfx___alloc_skb+0x10/0x10 [ 52.415461][ T5676] ? __tcp_push_pending_frames+0xc4/0x3b0 [ 52.415494][ T5676] tcp_stream_alloc_skb+0x34/0x660 [ 52.415519][ T5676] tcp_sendmsg_locked+0x13b2/0x44d0 [ 52.415545][ T5676] ? __lock_acquire+0x49f/0x1a40 [ 52.415572][ T5676] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 52.415594][ T5676] ? do_raw_spin_lock+0x128/0x260 [ 52.415610][ T5676] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.415629][ T5676] ? __local_bh_enable_ip+0x9e/0x120 [ 52.415647][ T5676] tcp_sendmsg+0x2e/0x50 [ 52.415666][ T5676] ? __pfx_tcp_sendmsg+0x10/0x10 [ 52.415685][ T5676] inet_sendmsg+0xb9/0x140 [ 52.415705][ T5676] sock_write_iter+0x4ea/0x5b0 [ 52.415719][ T5676] ? __pfx_inet_sendmsg+0x10/0x10 [ 52.415736][ T5676] ? __pfx_sock_write_iter+0x10/0x10 [ 52.415755][ T5676] ? bpf_lsm_file_permission+0x9/0x10 [ 52.415768][ T5676] ? security_file_permission+0x76/0x210 [ 52.415794][ T5676] ? rw_verify_area+0xce/0x6d0 [ 52.415816][ T5676] vfs_write+0x6ac/0x1050 [ 52.415829][ T5676] ? __pfx_sock_write_iter+0x10/0x10 [ 52.415845][ T5676] ? __pfx_vfs_write+0x10/0x10 [ 52.415859][ T5676] ? find_held_lock+0x2b/0x80 [ 52.415884][ T5676] ksys_write+0x1f8/0x250 [ 52.415897][ T5676] ? __pfx_ksys_write+0x10/0x10 [ 52.415915][ T5676] __do_fast_syscall_32+0xe7/0x970 [ 52.415936][ T5676] do_fast_syscall_32+0x32/0x70 [ 52.415954][ T5676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.415971][ T5676] RIP: 0023:0xf704efec [ 52.415982][ T5676] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.415996][ T5676] RSP: 002b:00000000ffdfacc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 52.416008][ T5676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000005829d720 [ 52.416017][ T5676] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.416025][ T5676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.416033][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.416041][ T5676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.416059][ T5676] [ 52.418007][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.418027][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.418036][ T5145] Call Trace: [ 52.418041][ T5145] [ 52.418047][ T5145] dump_stack_lvl+0x100/0x190 [ 52.418066][ T5145] should_fail_ex.cold+0x5/0xa [ 52.418083][ T5145] should_failslab+0xc2/0x120 [ 52.418104][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.418123][ T5145] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.418143][ T137] FAULT_INJECTION: forcing a failure. [ 52.418143][ T137] name failslab, interval 1, probability 10, space 0, times 38 [ 52.418143][ T5145] ? security_file_alloc+0x34/0x2c0 [ 52.418169][ T5145] security_file_alloc+0x34/0x2c0 [ 52.418190][ T5145] init_file+0x95/0x480 [ 52.418216][ T5145] alloc_empty_file+0x79/0x1c0 [ 52.418236][ T5145] alloc_file_pseudo+0x183/0x290 [ 52.418272][ T5145] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 52.418295][ T5145] ? alloc_fd+0x471/0x7a0 [ 52.418326][ T5145] sock_alloc_file+0x50/0x210 [ 52.418349][ T5145] __sys_socket+0x1c0/0x260 [ 52.418366][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.418389][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.418405][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.418423][ T5145] do_syscall_64+0x115/0x840 [ 52.418441][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.418460][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.418475][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.418487][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.418501][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.418516][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.418526][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.418535][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.418545][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.418554][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000058 R15: 00007ffe5a06c070 [ 52.418575][ T5145] [ 52.418789][ T5145] FAULT_INJECTION: forcing a failure. [ 52.418789][ T5145] name failslab, interval 1, probability 10, space 0, times 37 [ 52.418809][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.418826][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.418834][ T5145] Call Trace: [ 52.418839][ T5145] [ 52.418845][ T5145] dump_stack_lvl+0x100/0x190 [ 52.418862][ T5145] should_fail_ex.cold+0x5/0xa [ 52.418879][ T5145] should_failslab+0xc2/0x120 [ 52.418900][ T5145] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 52.418921][ T5145] ? __d_alloc+0x35/0xa50 [ 52.418941][ T5145] __d_alloc+0x35/0xa50 [ 52.418985][ T5145] d_alloc_pseudo+0x1c/0xc0 [ 52.419007][ T5145] alloc_file_pseudo+0x118/0x290 [ 52.419029][ T5145] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 52.419048][ T5145] ? alloc_fd+0x471/0x7a0 [ 52.419067][ T5145] sock_alloc_file+0x50/0x210 [ 52.419089][ T5145] __sys_socket+0x1c0/0x260 [ 52.419106][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.419129][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.419144][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.419163][ T5145] do_syscall_64+0x115/0x840 [ 52.419180][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.419204][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.419220][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.419233][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.419247][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.419261][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.419271][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.419281][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.419290][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.419299][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000058 R15: 00007ffe5a06c070 [ 52.419321][ T5145] [ 52.419401][ T5145] FAULT_INJECTION: forcing a failure. [ 52.419401][ T5145] name failslab, interval 1, probability 10, space 0, times 36 [ 52.419420][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.419440][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.419448][ T5145] Call Trace: [ 52.419453][ T5145] [ 52.419459][ T5145] dump_stack_lvl+0x100/0x190 [ 52.419477][ T5145] should_fail_ex.cold+0x5/0xa [ 52.419494][ T5145] should_failslab+0xc2/0x120 [ 52.419529][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.419550][ T5145] ? __pfx_map_id_range_down+0x10/0x10 [ 52.419572][ T5145] ? security_inode_alloc+0x3b/0x2c0 [ 52.419593][ T5145] security_inode_alloc+0x3b/0x2c0 [ 52.419612][ T5145] inode_init_always_gfp+0xc77/0xfb0 [ 52.419631][ T5145] alloc_inode+0x8e/0x250 [ 52.419651][ T5145] sock_alloc+0x44/0x280 [ 52.419686][ T5145] ? security_socket_create+0x7f/0x250 [ 52.419706][ T5145] __sock_create+0xc2/0x860 [ 52.419725][ T5145] __sys_socket+0x14d/0x260 [ 52.419742][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.419764][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.419780][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.419799][ T5145] do_syscall_64+0x115/0x840 [ 52.419816][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.419835][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.419850][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.419862][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.419877][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.419891][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.419900][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.419909][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.419919][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.419928][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000058 R15: 00007ffe5a06c070 [ 52.419948][ T5145] [ 52.420017][ T5145] socket: no more sockets [ 52.422113][ T137] CPU: 1 UID: 0 PID: 137 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.422134][ T137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.422144][ T137] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.422186][ T137] Call Trace: [ 52.422192][ T137] [ 52.422199][ T137] dump_stack_lvl+0x100/0x190 [ 52.422219][ T137] should_fail_ex.cold+0x5/0xa [ 52.422239][ T137] should_failslab+0xc2/0x120 [ 52.422263][ T137] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.422286][ T137] ? __alloc_skb+0x140/0x710 [ 52.422310][ T137] __alloc_skb+0x140/0x710 [ 52.422330][ T137] ? __alloc_skb+0x5b7/0x710 [ 52.422351][ T137] ? __pfx___alloc_skb+0x10/0x10 [ 52.422373][ T137] ? kfree_skbmem+0x19f/0x210 [ 52.422394][ T137] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.422427][ T137] process_one_work+0xa23/0x1940 [ 52.422461][ T137] ? __pfx_process_one_work+0x10/0x10 [ 52.422491][ T137] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.422517][ T137] worker_thread+0x5ef/0xe50 [ 52.422549][ T137] ? kthread+0x13a/0x450 [ 52.422570][ T137] ? __pfx_worker_thread+0x10/0x10 [ 52.422592][ T137] kthread+0x370/0x450 [ 52.422613][ T137] ? __pfx_kthread+0x10/0x10 [ 52.422635][ T137] ret_from_fork+0x72b/0xd50 [ 52.422657][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 52.422679][ T137] ? __switch_to+0x800/0x10f0 [ 52.422705][ T137] ? __pfx_kthread+0x10/0x10 [ 52.422726][ T137] ret_from_fork_asm+0x1a/0x30 [ 52.422754][ T137] [ 52.424018][ T5746] FAULT_INJECTION: forcing a failure. [ 52.424018][ T5746] name failslab, interval 1, probability 10, space 0, times 26 [ 52.424658][ T5145] FAULT_INJECTION: forcing a failure. [ 52.424658][ T5145] name failslab, interval 1, probability 10, space 0, times 25 [ 52.426126][ T846] FAULT_INJECTION: forcing a failure. [ 52.426126][ T846] name failslab, interval 1, probability 10, space 0, times 23 [ 52.426168][ T846] CPU: 2 UID: 0 PID: 846 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 52.426181][ T846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.426189][ T846] Workqueue: mld mld_dad_work [ 52.426208][ T846] Call Trace: [ 52.426212][ T846] [ 52.426216][ T846] dump_stack_lvl+0x100/0x190 [ 52.426230][ T846] should_fail_ex.cold+0x5/0xa [ 52.426243][ T846] should_failslab+0xc2/0x120 [ 52.426259][ T846] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.426274][ T846] ? dst_alloc+0x99/0x1a0 [ 52.426290][ T846] ? __pfx_ip6_dst_gc+0x10/0x10 [ 52.426308][ T846] dst_alloc+0x99/0x1a0 [ 52.426329][ T846] icmp6_dst_alloc+0x79/0x4f0 [ 52.426346][ T846] mld_sendpack+0x5ae/0xec0 [ 52.426364][ T846] ? __pfx_mld_sendpack+0x10/0x10 [ 52.426387][ T846] mld_send_initial_cr+0x219/0x320 [ 52.426404][ T846] mld_dad_work+0x32/0x1f0 [ 52.426420][ T846] process_one_work+0xa23/0x1940 [ 52.426443][ T846] ? __pfx_process_one_work+0x10/0x10 [ 52.426463][ T846] ? __pfx_mld_dad_work+0x10/0x10 [ 52.426481][ T846] worker_thread+0x5ef/0xe50 [ 52.426500][ T846] ? __pfx_worker_thread+0x10/0x10 [ 52.426517][ T846] ? kthread+0x13a/0x450 [ 52.426531][ T846] ? __pfx_worker_thread+0x10/0x10 [ 52.426546][ T846] kthread+0x370/0x450 [ 52.426560][ T846] ? __pfx_kthread+0x10/0x10 [ 52.426576][ T846] ret_from_fork+0x72b/0xd50 [ 52.426591][ T846] ? __pfx_ret_from_fork+0x10/0x10 [ 52.426605][ T846] ? __switch_to+0x800/0x10f0 [ 52.426623][ T846] ? __pfx_kthread+0x10/0x10 [ 52.426638][ T846] ret_from_fork_asm+0x1a/0x30 [ 52.426661][ T846] [ 52.427257][ T5156] CPU: 2 UID: 0 PID: 5156 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 52.427270][ T5156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.427276][ T5156] Call Trace: [ 52.427279][ T5156] [ 52.427283][ T5156] dump_stack_lvl+0x100/0x190 [ 52.427296][ T5156] should_fail_ex.cold+0x5/0xa [ 52.427308][ T5156] should_failslab+0xc2/0x120 [ 52.427326][ T5156] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.427339][ T5156] ? stack_trace_save+0x8e/0xc0 [ 52.427354][ T5156] ? alloc_empty_file+0x5b/0x1c0 [ 52.427369][ T5156] alloc_empty_file+0x5b/0x1c0 [ 52.427383][ T5156] path_openat+0xe7/0x4280 [ 52.427394][ T5156] ? __kasan_slab_alloc+0x89/0x90 [ 52.427422][ T5156] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 52.427435][ T5156] ? do_getname+0x35/0x390 [ 52.427447][ T5156] ? do_sys_openat2+0xc7/0x1e0 [ 52.427461][ T5156] ? __x64_sys_openat+0x12d/0x210 [ 52.427475][ T5156] ? do_syscall_64+0x115/0x840 [ 52.427488][ T5156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.427503][ T5156] ? __pfx_path_openat+0x10/0x10 [ 52.427517][ T5156] do_file_open+0x20e/0x430 [ 52.427529][ T5156] ? __pfx_do_file_open+0x10/0x10 [ 52.427549][ T5156] ? alloc_fd+0x471/0x7a0 [ 52.427561][ T5156] ? do_getname+0x191/0x390 [ 52.427575][ T5156] do_sys_openat2+0x10f/0x1e0 [ 52.427589][ T5156] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.427605][ T5156] ? __sys_sendmsg+0x17f/0x210 [ 52.427621][ T5156] __x64_sys_openat+0x12d/0x210 [ 52.427636][ T5156] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.427655][ T5156] do_syscall_64+0x115/0x840 [ 52.427667][ T5156] ? clear_bhb_loop+0x40/0x90 [ 52.427680][ T5156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.427691][ T5156] RIP: 0033:0x7f644aea7407 [ 52.427701][ T5156] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.427711][ T5156] RSP: 002b:00007ffe87a466e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 52.427722][ T5156] RAX: ffffffffffffffda RBX: 00007f644b66c880 RCX: 00007f644aea7407 [ 52.427728][ T5156] RDX: 0000000000080141 RSI: 0000558606f6e02e RDI: ffffffffffffff9c [ 52.427734][ T5156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.427740][ T5156] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 52.427747][ T5156] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 52.427760][ T5156] [ 52.427826][ T5841] FAULT_INJECTION: forcing a failure. [ 52.427826][ T5841] name failslab, interval 1, probability 10, space 0, times 21 [ 52.427865][ T5156] udevd[5156]: could not touch /run/udev/queue: Cannot allocate memory [ 52.428150][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.428168][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.428176][ T5746] Call Trace: [ 52.428181][ T5746] [ 52.428187][ T5746] dump_stack_lvl+0x100/0x190 [ 52.428206][ T5746] should_fail_ex.cold+0x5/0xa [ 52.428224][ T5746] should_failslab+0xc2/0x120 [ 52.428247][ T5746] __kmalloc_noprof+0xfc/0x820 [ 52.428265][ T5746] ? rcu_is_watching+0x12/0xc0 [ 52.428282][ T5746] ? tomoyo_realpath_from_path+0xb6/0x690 [ 52.428302][ T5746] tomoyo_realpath_from_path+0xb6/0x690 [ 52.428321][ T5746] tomoyo_path_perm+0x276/0x460 [ 52.428339][ T5746] ? tomoyo_path_perm+0x262/0x460 [ 52.428353][ T5746] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 52.428384][ T5746] security_inode_getattr+0x116/0x280 [ 52.428398][ T5746] vfs_statx+0x11f/0x3f0 [ 52.428411][ T5746] ? __pfx_vfs_statx+0x10/0x10 [ 52.428427][ T5746] do_statx+0xf1/0x170 [ 52.428441][ T5746] ? __pfx_do_statx+0x10/0x10 [ 52.428461][ T5746] ? strncpy_from_user+0x19d/0x2d0 [ 52.428478][ T5746] ? do_getname+0x191/0x390 [ 52.428492][ T5746] __ia32_sys_statx+0x140/0x1f0 [ 52.428496][ T41] FAULT_INJECTION: forcing a failure. [ 52.428496][ T41] name failslab, interval 1, probability 10, space 0, times 21 [ 52.428508][ T5746] __do_fast_syscall_32+0xe7/0x970 [ 52.428524][ T5746] do_fast_syscall_32+0x32/0x70 [ 52.428538][ T5746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.428551][ T5746] RIP: 0023:0xf6fdefec [ 52.428559][ T5746] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.428570][ T5746] RSP: 002b:00000000ff891ab0 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 52.428580][ T5746] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ff891de0 [ 52.428586][ T5746] RDX: 0000000000000900 RSI: 00000000000007ff RDI: 00000000ff891b4c [ 52.428592][ T5746] RBP: 00000000ff891ca0 R08: 0000000000000000 R09: 0000000000000000 [ 52.428598][ T5746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.428604][ T5746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.428617][ T5746] [ 52.428636][ T13] FAULT_INJECTION: forcing a failure. [ 52.428636][ T13] name failslab, interval 1, probability 10, space 0, times 19 [ 52.428684][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.428704][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.428715][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.428738][ T13] Call Trace: [ 52.428744][ T13] [ 52.428750][ T13] dump_stack_lvl+0x100/0x190 [ 52.428771][ T13] should_fail_ex.cold+0x5/0xa [ 52.428792][ T13] should_failslab+0xc2/0x120 [ 52.428816][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.428840][ T13] ? __alloc_skb+0x140/0x710 [ 52.428868][ T13] __alloc_skb+0x140/0x710 [ 52.428889][ T13] ? __alloc_skb+0x5b7/0x710 [ 52.428910][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 52.428932][ T13] ? __lock_acquire+0x49f/0x1a40 [ 52.428961][ T13] mld_newpack.isra.0+0x18e/0xa20 [ 52.428991][ T13] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 52.429015][ T13] ? lock_acquire+0x1b9/0x370 [ 52.429049][ T13] ? add_grhead+0x299/0x340 [ 52.429071][ T13] add_grhead+0x299/0x340 [ 52.429096][ T13] add_grec+0x1389/0x1930 [ 52.429120][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 52.429144][ T13] ? __ipv6_ifa_notify+0x505/0xf90 [ 52.429165][ T13] ? __pfx_add_grec+0x10/0x10 [ 52.429195][ T13] mld_send_initial_cr+0x156/0x320 [ 52.429221][ T13] ipv6_mc_dad_complete+0xa7/0x1d0 [ 52.429248][ T13] addrconf_dad_completed+0xd91/0xff0 [ 52.429273][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.429301][ T5746] FAULT_INJECTION: forcing a failure. [ 52.429301][ T5746] name failslab, interval 1, probability 10, space 0, times 18 [ 52.429304][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 52.429327][ T13] addrconf_dad_work+0x83c/0x1360 [ 52.429361][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.429387][ T13] ? rcu_is_watching+0x12/0xc0 [ 52.429410][ T13] process_one_work+0xa23/0x1940 [ 52.429447][ T13] ? __pfx_process_one_work+0x10/0x10 [ 52.429480][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.429504][ T13] worker_thread+0x5ef/0xe50 [ 52.429536][ T13] ? kthread+0x13a/0x450 [ 52.429556][ T13] ? __pfx_worker_thread+0x10/0x10 [ 52.429580][ T13] kthread+0x370/0x450 [ 52.429601][ T13] ? __pfx_kthread+0x10/0x10 [ 52.429623][ T13] ret_from_fork+0x72b/0xd50 [ 52.429641][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 52.429659][ T13] ? __switch_to+0x800/0x10f0 [ 52.429680][ T13] ? __pfx_kthread+0x10/0x10 [ 52.429699][ T13] ret_from_fork_asm+0x1a/0x30 [ 52.429727][ T13] [ 52.429735][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.429748][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.429754][ T5746] Call Trace: [ 52.429757][ T5746] [ 52.429762][ T5746] dump_stack_lvl+0x100/0x190 [ 52.429775][ T5746] should_fail_ex.cold+0x5/0xa [ 52.429786][ T5746] should_failslab+0xc2/0x120 [ 52.429801][ T5746] __kmalloc_noprof+0xfc/0x820 [ 52.429815][ T5746] ? tomoyo_encode2+0xfb/0x3c0 [ 52.429832][ T5746] tomoyo_encode2+0xfb/0x3c0 [ 52.429850][ T5746] tomoyo_encode+0x29/0x50 [ 52.429864][ T5746] tomoyo_realpath_from_path+0x18c/0x690 [ 52.429883][ T5746] tomoyo_path_number_perm+0x23c/0x580 [ 52.429897][ T5746] ? tomoyo_path_number_perm+0x22e/0x580 [ 52.429910][ T5746] ? memory_min_write+0xd1/0xe0 [ 52.429927][ T5746] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 52.429944][ T5746] ? find_held_lock+0x2b/0x80 [ 52.429958][ T5746] ? d_splice_alias_ops+0x626/0x15c0 [ 52.429979][ T5746] ? current_check_access_path+0x269/0x430 [ 52.429997][ T5746] ? __pfx_current_check_access_path+0x10/0x10 [ 52.430011][ T5746] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.430025][ T5746] ? simple_lookup+0xfc/0x1d0 [ 52.430035][ T5746] ? lookup_one_qstr_excl+0xaf/0x250 [ 52.430051][ T5746] tomoyo_path_mkdir+0x9b/0xe0 [ 52.430061][ T5746] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 52.430076][ T5746] security_path_mkdir+0x154/0x2e0 [ 52.430093][ T5746] filename_mkdirat+0x168/0x5e0 [ 52.430107][ T5746] ? __pfx_filename_mkdirat+0x10/0x10 [ 52.430118][ T5746] ? strncpy_from_user+0x19d/0x2d0 [ 52.430135][ T5746] ? do_getname+0x191/0x390 [ 52.430149][ T5746] __ia32_sys_mkdirat+0x88/0xc0 [ 52.430161][ T5746] __do_fast_syscall_32+0xe7/0x970 [ 52.430177][ T5746] do_fast_syscall_32+0x32/0x70 [ 52.430190][ T5746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.430203][ T5746] RIP: 0023:0xf6fdefec [ 52.430212][ T5746] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.430222][ T5746] RSP: 002b:00000000ff892dd8 EFLAGS: 00000286 ORIG_RAX: 0000000000000128 [ 52.430231][ T5746] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ff892e74 [ 52.430238][ T5746] RDX: 00000000000001ff RSI: 0000000000003a98 RDI: 00000000ff892e74 [ 52.430244][ T5746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.430250][ T5746] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 52.430256][ T5746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.430268][ T5746] [ 52.430279][ T13] FAULT_INJECTION: forcing a failure. [ 52.430279][ T13] name failslab, interval 1, probability 10, space 0, times 15 [ 52.430595][ T5156] FAULT_INJECTION: forcing a failure. [ 52.430595][ T5156] name failslab, interval 1, probability 10, space 0, times 15 [ 52.430609][ T5156] CPU: 2 UID: 0 PID: 5156 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 52.430621][ T5156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.430626][ T5156] Call Trace: [ 52.430630][ T5156] [ 52.430633][ T5156] dump_stack_lvl+0x100/0x190 [ 52.430646][ T5156] should_fail_ex.cold+0x5/0xa [ 52.430658][ T5156] should_failslab+0xc2/0x120 [ 52.430672][ T5156] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.430685][ T5156] ? do_getname+0x35/0x390 [ 52.430701][ T5156] do_getname+0x35/0x390 [ 52.430715][ T5156] do_readlinkat+0xa9/0x370 [ 52.430728][ T5156] ? __pfx_do_readlinkat+0x10/0x10 [ 52.430739][ T5156] ? ksys_read+0x1ac/0x250 [ 52.430748][ T5156] ? __pfx_ksys_read+0x10/0x10 [ 52.430760][ T5156] __x64_sys_readlink+0x78/0xc0 [ 52.430774][ T5156] ? lockdep_hardirqs_on+0x78/0x100 [ 52.430787][ T5156] do_syscall_64+0x115/0x840 [ 52.430799][ T5156] ? clear_bhb_loop+0x40/0x90 [ 52.430811][ T5156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.430822][ T5156] RIP: 0033:0x7f644af153a7 [ 52.430830][ T5156] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 52.430840][ T5156] RSP: 002b:00007ffe87a461c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 52.430850][ T5156] RAX: ffffffffffffffda RBX: 00007ffe87a463d0 RCX: 00007f644af153a7 [ 52.430856][ T5156] RDX: 0000000000000200 RSI: 00007ffe87a461d0 RDI: 00007ffe87a463d0 [ 52.430862][ T5156] RBP: 0000558632644910 R08: 0000000000000064 R09: 0000000000000000 [ 52.430868][ T5156] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe87a461d0 [ 52.430875][ T5156] R13: 0000558606f89100 R14: 0000000000000001 R15: 00007ffe87a469f0 [ 52.430887][ T5156] [ 52.431115][ T5746] FAULT_INJECTION: forcing a failure. [ 52.431115][ T5746] name failslab, interval 1, probability 10, space 0, times 14 [ 52.431151][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.431163][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.431169][ T5746] Call Trace: [ 52.431172][ T5746] [ 52.431176][ T5746] dump_stack_lvl+0x100/0x190 [ 52.431188][ T5746] should_fail_ex.cold+0x5/0xa [ 52.431200][ T5746] should_failslab+0xc2/0x120 [ 52.431214][ T5746] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 52.431229][ T5746] ? __get_vm_area_node+0x101/0x330 [ 52.431247][ T5746] __get_vm_area_node+0x101/0x330 [ 52.431264][ T5746] __vmalloc_node_range_noprof+0x228/0x1630 [ 52.431281][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.431300][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.431329][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.431351][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.431369][ T5746] ? lock_acquire+0x1b9/0x370 [ 52.431391][ T5746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.431412][ T5746] ? rcu_is_watching+0x12/0xc0 [ 52.431429][ T5746] ? trace_contention_end+0x126/0x160 [ 52.431445][ T5746] ? __mutex_lock+0x26d/0x1bd0 [ 52.431463][ T5746] ? compat_do_ebt_get_ctl+0x1cd/0xbb0 [ 52.431481][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.431510][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.431528][ T5746] __vmalloc_node_noprof+0xad/0xf0 [ 52.431552][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.431573][ T5746] xt_compat_init_offsets+0xe2/0x1f0 [ 52.431608][ T5746] compat_table_info+0x11b/0x870 [ 52.431626][ T5746] ? net_generic+0xea/0x2a0 [ 52.431642][ T5746] ? net_generic+0xea/0x2a0 [ 52.431666][ T5746] compat_do_ebt_get_ctl+0x270/0xbb0 [ 52.431688][ T5746] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 52.431711][ T5746] ? bpf_lsm_capable+0x9/0x10 [ 52.431723][ T5746] ? security_capable+0x80/0x260 [ 52.431736][ T5746] do_ebt_get_ctl+0x243/0x7a0 [ 52.431749][ T5746] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 52.431761][ T5746] ? __ia32_compat_sys_socketcall+0x65b/0x770 [ 52.431785][ T5746] ? nf_sockopt_find.isra.0+0x222/0x290 [ 52.431802][ T5746] nf_getsockopt+0x7c/0xe0 [ 52.431815][ T5746] ip_getsockopt+0x192/0x1e0 [ 52.431850][ T5746] ? __pfx_ip_getsockopt+0x10/0x10 [ 52.431869][ T5746] tcp_getsockopt+0xa1/0x110 [ 52.431886][ T5746] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 52.431904][ T5746] do_sock_getsockopt+0x50a/0x6e0 [ 52.431917][ T5746] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 52.431927][ T5746] ? errseq_sample+0x51/0x70 [ 52.431946][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.431961][ T5746] ? lock_acquire+0x1b9/0x370 [ 52.431985][ T5746] __sys_getsockopt+0x133/0x1d0 [ 52.432003][ T5746] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 52.432020][ T5746] __ia32_compat_sys_socketcall+0x6af/0x770 [ 52.432038][ T5746] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.432065][ T5746] __do_fast_syscall_32+0xe7/0x970 [ 52.432078][ T5746] ? lockdep_hardirqs_on+0x78/0x100 [ 52.432104][ T5746] do_fast_syscall_32+0x32/0x70 [ 52.432119][ T5746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.432133][ T5746] RIP: 0023:0xf6fdefec [ 52.432142][ T5746] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.432152][ T5746] RSP: 002b:00000000ff8926d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 52.432162][ T5746] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ff892708 [ 52.432168][ T5746] RDX: 00000000f73a6ff4 RSI: 00000000ff892790 RDI: 00000000ff89278c [ 52.432174][ T5746] RBP: 00000000ff892790 R08: 0000000000000000 R09: 0000000000000000 [ 52.432181][ T5746] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 52.432187][ T5746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.432200][ T5746] [ 52.432372][ C2] FAULT_INJECTION: forcing a failure. [ 52.432372][ C2] name failslab, interval 1, probability 10, space 0, times 14 [ 52.432592][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.432613][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.432623][ T5841] Workqueue: mld mld_dad_work [ 52.432646][ T5841] Call Trace: [ 52.432651][ T5841] [ 52.432656][ T5841] dump_stack_lvl+0x100/0x190 [ 52.432674][ T5841] should_fail_ex.cold+0x5/0xa [ 52.432691][ T5841] should_failslab+0xc2/0x120 [ 52.432715][ T5841] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.432736][ T5841] ? __alloc_skb+0x140/0x710 [ 52.432788][ T5841] __alloc_skb+0x140/0x710 [ 52.432809][ T5841] ? __alloc_skb+0x5b7/0x710 [ 52.432827][ T5841] ? __pfx___alloc_skb+0x10/0x10 [ 52.432848][ T5841] ? __lock_acquire+0x49f/0x1a40 [ 52.432877][ T5841] mld_newpack.isra.0+0x18e/0xa20 [ 52.432902][ T5841] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 52.432941][ T5841] ? rcu_is_watching+0x12/0xc0 [ 52.432961][ T5841] ? add_grhead+0x299/0x340 [ 52.432977][ T5841] add_grhead+0x299/0x340 [ 52.432996][ T5841] add_grec+0x1389/0x1930 [ 52.433015][ T5841] ? __pfx___mutex_lock+0x10/0x10 [ 52.433037][ T5841] ? __pfx_add_grec+0x10/0x10 [ 52.433060][ T5841] mld_send_initial_cr+0x156/0x320 [ 52.433080][ T5841] mld_dad_work+0x32/0x1f0 [ 52.433103][ T5841] process_one_work+0xa23/0x1940 [ 52.433131][ T5841] ? __pfx_process_one_work+0x10/0x10 [ 52.433161][ T5841] ? __pfx_mld_dad_work+0x10/0x10 [ 52.433188][ T5841] worker_thread+0x5ef/0xe50 [ 52.433218][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 52.433238][ T5841] ? kthread+0x13a/0x450 [ 52.433255][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 52.433273][ T5841] kthread+0x370/0x450 [ 52.433291][ T5841] ? __pfx_kthread+0x10/0x10 [ 52.433310][ T5841] ret_from_fork+0x72b/0xd50 [ 52.433328][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 52.433346][ T5841] ? __switch_to+0x800/0x10f0 [ 52.433367][ T5841] ? __pfx_kthread+0x10/0x10 [ 52.433386][ T5841] ret_from_fork_asm+0x1a/0x30 [ 52.433415][ T5841] [ 52.433425][ T41] CPU: 3 UID: 0 PID: 41 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.433446][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.433456][ T41] Workqueue: mld mld_dad_work [ 52.433480][ T41] Call Trace: [ 52.433486][ T41] [ 52.433492][ T41] dump_stack_lvl+0x100/0x190 [ 52.433511][ T41] should_fail_ex.cold+0x5/0xa [ 52.433531][ T41] should_failslab+0xc2/0x120 [ 52.433552][ T41] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.433573][ T41] ? dst_alloc+0x99/0x1a0 [ 52.433595][ T41] ? __pfx_ip6_dst_gc+0x10/0x10 [ 52.433619][ T41] dst_alloc+0x99/0x1a0 [ 52.433630][ T137] FAULT_INJECTION: forcing a failure. [ 52.433630][ T137] name failslab, interval 1, probability 10, space 0, times 14 [ 52.433640][ T41] icmp6_dst_alloc+0x79/0x4f0 [ 52.433664][ T41] mld_sendpack+0x5ae/0xec0 [ 52.433691][ T41] ? __pfx_mld_sendpack+0x10/0x10 [ 52.433725][ T41] mld_send_initial_cr+0x219/0x320 [ 52.433749][ T41] mld_dad_work+0x32/0x1f0 [ 52.433772][ T41] process_one_work+0xa23/0x1940 [ 52.433804][ T41] ? __pfx_process_one_work+0x10/0x10 [ 52.433833][ T41] ? __pfx_mld_dad_work+0x10/0x10 [ 52.433859][ T41] worker_thread+0x5ef/0xe50 [ 52.433890][ T41] ? kthread+0x13a/0x450 [ 52.433909][ T41] ? __pfx_worker_thread+0x10/0x10 [ 52.433931][ T41] kthread+0x370/0x450 [ 52.433952][ T41] ? __pfx_kthread+0x10/0x10 [ 52.433974][ T41] ret_from_fork+0x72b/0xd50 [ 52.433994][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 52.434015][ T41] ? __switch_to+0x800/0x10f0 [ 52.434039][ T41] ? __pfx_kthread+0x10/0x10 [ 52.434062][ T41] ret_from_fork_asm+0x1a/0x30 [ 52.434094][ T41] [ 52.434103][ T137] CPU: 1 UID: 0 PID: 137 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.434121][ T137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.434130][ T137] Workqueue: events_unbound cfg80211_wiphy_work [ 52.434154][ T137] Call Trace: [ 52.434158][ T137] [ 52.434164][ T137] dump_stack_lvl+0x100/0x190 [ 52.434180][ T137] should_fail_ex.cold+0x5/0xa [ 52.434197][ T137] should_failslab+0xc2/0x120 [ 52.434217][ T137] __kmalloc_noprof+0xfc/0x820 [ 52.434233][ T137] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 52.434253][ T137] ? ieee80211_bss_info_update+0x310/0xab0 [ 52.434289][ T137] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 52.434314][ T137] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.434345][ T137] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.434371][ T137] ? __lock_acquire+0x49f/0x1a40 [ 52.434406][ T137] ? do_raw_spin_lock+0x128/0x260 [ 52.434422][ T137] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 52.434449][ T137] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.434474][ T137] ? mark_held_locks+0x40/0x70 [ 52.434520][ T137] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 52.434541][ T137] ? __asan_memcpy+0x3c/0x60 [ 52.434558][ T137] ieee80211_inform_bss+0x159/0x1170 [ 52.434581][ T137] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 52.434621][ T137] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 52.434643][ T137] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 52.434663][ T137] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 52.434683][ T137] ? unwind_next_frame+0x3be/0x2090 [ 52.434707][ T137] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 52.434727][ T137] ? ret_from_fork_asm+0x1a/0x30 [ 52.434758][ T137] ? stack_trace_save+0x8e/0xc0 [ 52.434776][ T137] ? __pfx_stack_trace_save+0x10/0x10 [ 52.434803][ T137] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 52.434822][ T137] cfg80211_inform_bss_data+0x230/0x3b60 [ 52.434842][ T137] ? __kmalloc_noprof+0x322/0x820 [ 52.434857][ T137] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.434879][ T137] ? cfg80211_wiphy_work+0x2b7/0x550 [ 52.434898][ T137] ? process_one_work+0xa23/0x1940 [ 52.434916][ T137] ? worker_thread+0x5ef/0xe50 [ 52.434934][ T137] ? kthread+0x370/0x450 [ 52.434950][ T137] ? ret_from_fork+0x72b/0xd50 [ 52.434990][ T137] ? ret_from_fork_asm+0x1a/0x30 [ 52.435013][ T137] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 52.435036][ T137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.435057][ T137] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 52.435083][ T137] ? __lock_acquire+0x49f/0x1a40 [ 52.435104][ T137] ? __lock_acquire+0x49f/0x1a40 [ 52.435132][ T137] ? __lock_acquire+0x49f/0x1a40 [ 52.435152][ T137] ? find_held_lock+0x2b/0x80 [ 52.435169][ T137] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 52.435194][ T137] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 52.435223][ T137] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 52.435255][ T137] ieee80211_bss_info_update+0x310/0xab0 [ 52.435283][ T137] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 52.435312][ T137] ? rcu_is_watching+0x12/0xc0 [ 52.435332][ T137] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 52.435354][ T137] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 52.435383][ T137] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 52.435420][ T137] ieee80211_iface_work+0xa9a/0x1070 [ 52.435452][ T137] cfg80211_wiphy_work+0x2b7/0x550 [ 52.435478][ T137] process_one_work+0xa23/0x1940 [ 52.435513][ T137] ? __pfx_process_one_work+0x10/0x10 [ 52.435544][ T137] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 52.435571][ T137] worker_thread+0x5ef/0xe50 [ 52.435603][ T137] ? kthread+0x13a/0x450 [ 52.435622][ T137] ? __pfx_worker_thread+0x10/0x10 [ 52.435644][ T137] kthread+0x370/0x450 [ 52.435665][ T137] ? __pfx_kthread+0x10/0x10 [ 52.435687][ T137] ret_from_fork+0x72b/0xd50 [ 52.435708][ T137] ? __pfx_ret_from_fork+0x10/0x10 [ 52.435730][ T137] ? __switch_to+0x800/0x10f0 [ 52.435755][ T137] ? __pfx_kthread+0x10/0x10 [ 52.435777][ T137] ret_from_fork_asm+0x1a/0x30 [ 52.435816][ T137] [ 52.435827][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.435847][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.435856][ T5145] Call Trace: [ 52.435862][ T5145] [ 52.435868][ T5145] dump_stack_lvl+0x100/0x190 [ 52.435888][ T5145] should_fail_ex.cold+0x5/0xa [ 52.435906][ T5145] should_failslab+0xc2/0x120 [ 52.435927][ T5145] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.435947][ T5145] ? __alloc_skb+0x5b7/0x710 [ 52.435967][ T5145] ? __alloc_skb+0x140/0x710 [ 52.435991][ T5145] __alloc_skb+0x140/0x710 [ 52.436010][ T5145] ? __alloc_skb+0x5b7/0x710 [ 52.436029][ T5145] ? __pfx___alloc_skb+0x10/0x10 [ 52.436054][ T5145] alloc_skb_with_frags+0xdd/0x760 [ 52.436080][ T5145] sock_alloc_send_pskb+0x801/0x980 [ 52.436107][ T5145] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 52.436127][ T5145] ? find_held_lock+0x2b/0x80 [ 52.436146][ T5145] ? sock_def_readable+0x1d2/0x600 [ 52.436165][ T5145] ? sock_def_readable+0x1d2/0x600 [ 52.436192][ T5145] unix_dgram_sendmsg+0x3c7/0x1810 [ 52.436219][ T5145] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 52.436246][ T5145] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 52.436270][ T5145] ? unix_dgram_connect+0x24d/0xbf0 [ 52.436290][ T5145] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 52.436316][ T5145] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.436337][ T5145] __sys_sendto+0x48b/0x4e0 [ 52.436356][ T5145] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 52.436378][ T5145] ? __pfx___sys_sendto+0x10/0x10 [ 52.436403][ T5145] ? __sys_connect+0xe4/0x170 [ 52.436432][ T5841] FAULT_INJECTION: forcing a failure. [ 52.436432][ T5841] name failslab, interval 1, probability 10, space 0, times 9 [ 52.436435][ T5145] __x64_sys_sendto+0xe0/0x1c0 [ 52.436454][ T5145] ? do_syscall_64+0x90/0x840 [ 52.436472][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.436490][ T5145] do_syscall_64+0x115/0x840 [ 52.436508][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.436526][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.436542][ T5145] RIP: 0033:0x7fb80a804407 [ 52.436557][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.436571][ T5145] RSP: 002b:00007ffe5a06bf30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 52.436604][ T5145] RAX: ffffffffffffffda RBX: 00007fb80a6b4c80 RCX: 00007fb80a804407 [ 52.436614][ T5145] RDX: 000000000000008c RSI: 00007ffe5a06c070 RDI: 0000000000000003 [ 52.436624][ T5145] RBP: 00007ffe5a06c4a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.436634][ T5145] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe5a06c4b8 [ 52.436644][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000071 R15: 00007ffe5a06c070 [ 52.436664][ T5145] [ 52.437118][ C2] CPU: 2 UID: 0 PID: 5746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.437133][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.437139][ C2] Call Trace: [ 52.437143][ C2] [ 52.437148][ C2] dump_stack_lvl+0x100/0x190 [ 52.437162][ C2] should_fail_ex.cold+0x5/0xa [ 52.437174][ C2] should_failslab+0xc2/0x120 [ 52.437189][ C2] __kmalloc_noprof+0xfc/0x820 [ 52.437203][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 52.437222][ C2] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 52.437228][ T5145] FAULT_INJECTION: forcing a failure. [ 52.437228][ T5145] name failslab, interval 1, probability 10, space 0, times 8 [ 52.437237][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.437257][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 52.437280][ C2] ? bpf_ksym_find+0x124/0x1c0 [ 52.437294][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 52.437310][ C2] ? is_bpf_text_address+0x94/0x1a0 [ 52.437332][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 52.437348][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 52.437366][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.437384][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 52.437400][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.437423][ C2] ? lock_acquire+0x1b9/0x370 [ 52.437440][ C2] ? find_held_lock+0x2b/0x80 [ 52.437452][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 52.437467][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 52.437482][ C2] ? bpf_ksym_find+0x124/0x1c0 [ 52.437498][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.437533][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 52.437553][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 52.437571][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 52.437589][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.437606][ C2] ? should_failslab+0xc2/0x120 [ 52.437620][ C2] ? __kmalloc_cache_node_noprof+0x94/0x6c0 [ 52.437634][ C2] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 52.437651][ C2] ? __vmalloc_node_noprof+0xad/0xf0 [ 52.437666][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 52.437681][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 52.437697][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.437715][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 52.437729][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 52.437741][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.437756][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 52.437770][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 52.437787][ C2] ieee80211_rx_list+0xf19/0x2160 [ 52.437802][ C2] ? lock_acquire+0x1b9/0x370 [ 52.437819][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 52.437835][ C2] ieee80211_rx_napi+0xdc/0x400 [ 52.437846][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 52.437857][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 52.437870][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.437884][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 52.437902][ C2] tasklet_action_common+0x2de/0x3d0 [ 52.437919][ C2] handle_softirqs+0x1ea/0x9b0 [ 52.437943][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 52.437957][ C2] ? _raw_spin_unlock+0x28/0x50 [ 52.437968][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 52.437984][ C2] __irq_exit_rcu+0x162/0x210 [ 52.437996][ C2] irq_exit_rcu+0x9/0x30 [ 52.438007][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 52.438020][ C2] [ 52.438023][ C2] [ 52.438027][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 52.438039][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 52.438056][ C2] Code: 16 f9 5d 00 48 89 df 5b e9 9d 73 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 23 5a 12 48 8b 34 24 65 48 8b 15 a1 23 5a [ 52.438067][ C2] RSP: 0018:ffffc9000408f378 EFLAGS: 00000293 [ 52.438075][ C2] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174dfec [ 52.438082][ C2] RDX: ffff888028ecca80 RSI: ffffffff8174dff6 RDI: ffff888028ecca80 [ 52.438089][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 52.438095][ C2] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000200 [ 52.438101][ C2] R13: ffffffff8d4e9900 R14: 0000000000000001 R15: 0000000000000000 [ 52.438111][ C2] ? dump_stack_lvl+0x16c/0x190 [ 52.438122][ C2] ? dump_stack_lvl+0x176/0x190 [ 52.438134][ C2] dump_stack_lvl+0x17c/0x190 [ 52.438146][ C2] should_fail_ex.cold+0x5/0xa [ 52.438157][ C2] should_failslab+0xc2/0x120 [ 52.438172][ C2] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 52.438187][ C2] ? __get_vm_area_node+0x101/0x330 [ 52.438205][ C2] __get_vm_area_node+0x101/0x330 [ 52.438221][ C2] __vmalloc_node_range_noprof+0x228/0x1630 [ 52.438238][ C2] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.438252][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.438270][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.438287][ C2] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.438300][ C2] ? lock_acquire+0x1b9/0x370 [ 52.438318][ C2] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.438338][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.438351][ C2] ? trace_contention_end+0x126/0x160 [ 52.438362][ C2] ? __mutex_lock+0x26d/0x1bd0 [ 52.438375][ C2] ? compat_do_ebt_get_ctl+0x1cd/0xbb0 [ 52.438388][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.438405][ C2] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.438418][ C2] __vmalloc_node_noprof+0xad/0xf0 [ 52.438433][ C2] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.438447][ C2] xt_compat_init_offsets+0xe2/0x1f0 [ 52.438461][ C2] compat_table_info+0x11b/0x870 [ 52.438472][ C2] ? net_generic+0xea/0x2a0 [ 52.438482][ C2] ? net_generic+0xea/0x2a0 [ 52.438496][ C2] compat_do_ebt_get_ctl+0x270/0xbb0 [ 52.438510][ C2] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 52.438527][ C2] ? bpf_lsm_capable+0x9/0x10 [ 52.438539][ C2] ? security_capable+0x80/0x260 [ 52.438552][ C2] do_ebt_get_ctl+0x243/0x7a0 [ 52.438565][ C2] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 52.438577][ C2] ? __ia32_compat_sys_socketcall+0x65b/0x770 [ 52.438601][ C2] ? nf_sockopt_find.isra.0+0x222/0x290 [ 52.438617][ C2] nf_getsockopt+0x7c/0xe0 [ 52.438632][ C2] ip_getsockopt+0x192/0x1e0 [ 52.438648][ C2] ? __pfx_ip_getsockopt+0x10/0x10 [ 52.438666][ C2] tcp_getsockopt+0xa1/0x110 [ 52.438682][ C2] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 52.438701][ C2] do_sock_getsockopt+0x50a/0x6e0 [ 52.438714][ C2] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 52.438725][ C2] ? errseq_sample+0x51/0x70 [ 52.438743][ C2] ? __lock_acquire+0x49f/0x1a40 [ 52.438759][ C2] ? lock_acquire+0x1b9/0x370 [ 52.438782][ C2] __sys_getsockopt+0x133/0x1d0 [ 52.438800][ C2] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 52.438817][ C2] __ia32_compat_sys_socketcall+0x6af/0x770 [ 52.438836][ C2] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.438870][ C2] __do_fast_syscall_32+0xe7/0x970 [ 52.438891][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 52.438914][ C2] do_fast_syscall_32+0x32/0x70 [ 52.438938][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.438979][ C2] RIP: 0023:0xf6fdefec [ 52.438988][ C2] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.439000][ C2] RSP: 002b:00000000ff8926d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 52.439010][ C2] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ff892708 [ 52.439017][ C2] RDX: 00000000f73a6ff4 RSI: 00000000ff892790 RDI: 00000000ff89278c [ 52.439023][ C2] RBP: 00000000ff892790 R08: 0000000000000000 R09: 0000000000000000 [ 52.439030][ C2] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 52.439036][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.439049][ C2] [ 52.439383][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.439406][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.439416][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.439424][ T5746] syz-executor: vmalloc error: size 48, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 52.439434][ T13] [ 52.439438][ T13] Call Trace: [ 52.439443][ T13] [ 52.439450][ T13] dump_stack_lvl+0x100/0x190 [ 52.439468][ T13] should_fail_ex.cold+0x5/0xa [ 52.439485][ T13] should_failslab+0xc2/0x120 [ 52.439506][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.439529][ T13] ? __alloc_skb+0x140/0x710 [ 52.439555][ T13] __alloc_skb+0x140/0x710 [ 52.439602][ T13] ? __alloc_skb+0x5b7/0x710 [ 52.439622][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 52.439642][ T13] ? __timer_delete+0xec/0x1b0 [ 52.439666][ T13] ? __pfx___timer_delete+0x10/0x10 [ 52.439694][ T13] __ipv6_ifa_notify+0x1f1/0xf90 [ 52.439716][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 52.439733][ T13] ? __cancel_work+0x2b5/0x340 [ 52.439757][ T13] ? __cancel_work+0x245/0x340 [ 52.439781][ T13] ? __pfx___cancel_work+0x10/0x10 [ 52.439803][ T13] ? __lock_acquire+0x49f/0x1a40 [ 52.439831][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 52.439852][ T13] addrconf_dad_completed+0x195/0xff0 [ 52.439879][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.439910][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 52.439931][ T13] addrconf_dad_work+0x83c/0x1360 [ 52.439956][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.439983][ T13] ? rcu_is_watching+0x12/0xc0 [ 52.440007][ T13] process_one_work+0xa23/0x1940 [ 52.440043][ T13] ? __pfx_process_one_work+0x10/0x10 [ 52.440076][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.440101][ T13] worker_thread+0x5ef/0xe50 [ 52.440135][ T13] ? kthread+0x13a/0x450 [ 52.440157][ T13] ? __pfx_worker_thread+0x10/0x10 [ 52.440180][ T13] kthread+0x370/0x450 [ 52.440202][ T13] ? __pfx_kthread+0x10/0x10 [ 52.440227][ T13] ret_from_fork+0x72b/0xd50 [ 52.440250][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 52.440273][ T13] ? __switch_to+0x800/0x10f0 [ 52.440300][ T13] ? __pfx_kthread+0x10/0x10 [ 52.440325][ T13] ret_from_fork_asm+0x1a/0x30 [ 52.440366][ T13] [ 52.440526][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.440545][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.440554][ T5145] Call Trace: [ 52.440559][ T5145] [ 52.440566][ T5145] dump_stack_lvl+0x100/0x190 [ 52.440585][ T5145] should_fail_ex.cold+0x5/0xa [ 52.440603][ T5145] should_failslab+0xc2/0x120 [ 52.440624][ T5145] __kmalloc_noprof+0xfc/0x820 [ 52.440643][ T5145] ? tomoyo_encode2+0xfb/0x3c0 [ 52.440670][ T5145] tomoyo_encode2+0xfb/0x3c0 [ 52.440695][ T5145] tomoyo_unix_entry+0x343/0x640 [ 52.440718][ T5145] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 52.440753][ T5145] tomoyo_socket_connect_permission+0x31a/0x360 [ 52.440777][ T5145] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 52.440804][ T5145] ? __might_fault+0xc5/0x140 [ 52.440827][ T5145] security_socket_connect+0xd3/0x230 [ 52.440846][ T5145] __sys_connect_file+0x8f/0x1a0 [ 52.440867][ T5145] __sys_connect+0x141/0x170 [ 52.440886][ T5145] ? __pfx___sys_connect+0x10/0x10 [ 52.440918][ T5145] __x64_sys_connect+0x72/0xb0 [ 52.440935][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.440953][ T5145] do_syscall_64+0x115/0x840 [ 52.440971][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.440990][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.441006][ T5145] RIP: 0033:0x7fb80a804407 [ 52.441019][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.441033][ T5145] RSP: 002b:00007ffe5a06bf00 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 52.441047][ T5145] RAX: ffffffffffffffda RBX: 00007fb80a6b4c80 RCX: 00007fb80a804407 [ 52.441057][ T5145] RDX: 000000000000006e RSI: 00007fb80a90b560 RDI: 0000000000000003 [ 52.441067][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000000 R09: 0000000000000000 [ 52.441077][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.441086][ T5145] R13: 0000000000000069 R14: 0000000000000071 R15: 00007ffe5a06c070 [ 52.441103][ T5145] [ 52.441192][ T13] FAULT_INJECTION: forcing a failure. [ 52.441192][ T13] name failslab, interval 1, probability 10, space 0, times 2 [ 52.441266][ T5145] FAULT_INJECTION: forcing a failure. [ 52.441266][ T5145] name failslab, interval 1, probability 10, space 0, times 2 [ 52.441285][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.441302][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.441310][ T5145] Call Trace: [ 52.441315][ T5145] [ 52.441320][ T5145] dump_stack_lvl+0x100/0x190 [ 52.441338][ T5145] should_fail_ex.cold+0x5/0xa [ 52.441355][ T5145] should_failslab+0xc2/0x120 [ 52.441375][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.441393][ T5145] ? __pfx_map_id_range_down+0x10/0x10 [ 52.441415][ T5145] ? security_inode_alloc+0x3b/0x2c0 [ 52.441437][ T5145] security_inode_alloc+0x3b/0x2c0 [ 52.441456][ T5145] inode_init_always_gfp+0xc77/0xfb0 [ 52.441475][ T5145] alloc_inode+0x8e/0x250 [ 52.441495][ T5145] sock_alloc+0x44/0x280 [ 52.441516][ T5145] ? security_socket_create+0x7f/0x250 [ 52.441533][ T5145] __sock_create+0xc2/0x860 [ 52.441553][ T5145] __sys_socket+0x14d/0x260 [ 52.441570][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.441594][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.441609][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.441627][ T5145] do_syscall_64+0x115/0x840 [ 52.441645][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.441663][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.441679][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.441692][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.441706][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.441720][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.441730][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.441739][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.441748][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.441758][ T5145] R13: 00007ffe5a06c070 R14: 0000000000000022 R15: 00007ffe5a06c070 [ 52.441779][ T5145] [ 52.441794][ T5145] socket: no more sockets [ 52.441813][ T5145] FAULT_INJECTION: forcing a failure. [ 52.441813][ T5145] name failslab, interval 1, probability 10, space 0, times 1 [ 52.441831][ T5145] CPU: 3 UID: 0 PID: 5145 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.441847][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.441856][ T5145] Call Trace: [ 52.441861][ T5145] [ 52.441866][ T5145] dump_stack_lvl+0x100/0x190 [ 52.441884][ T5145] should_fail_ex.cold+0x5/0xa [ 52.441901][ T5145] should_failslab+0xc2/0x120 [ 52.441921][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.441939][ T5145] ? __pfx_map_id_range_down+0x10/0x10 [ 52.441960][ T5145] ? security_inode_alloc+0x3b/0x2c0 [ 52.441981][ T5145] security_inode_alloc+0x3b/0x2c0 [ 52.442000][ T5145] inode_init_always_gfp+0xc77/0xfb0 [ 52.442018][ T5145] alloc_inode+0x8e/0x250 [ 52.442037][ T5145] sock_alloc+0x44/0x280 [ 52.442058][ T5145] ? security_socket_create+0x7f/0x250 [ 52.442076][ T5145] __sock_create+0xc2/0x860 [ 52.442096][ T5145] __sys_socket+0x14d/0x260 [ 52.442113][ T5145] ? __pfx___sys_socket+0x10/0x10 [ 52.442136][ T5145] __x64_sys_socket+0x72/0xb0 [ 52.442152][ T5145] ? lockdep_hardirqs_on+0x78/0x100 [ 52.442170][ T5145] do_syscall_64+0x115/0x840 [ 52.442188][ T5145] ? clear_bhb_loop+0x40/0x90 [ 52.442212][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.442227][ T5145] RIP: 0033:0x7fb80a87f707 [ 52.442240][ T5145] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 52.442254][ T5145] RSP: 002b:00007ffe5a06bf48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 52.442268][ T5145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fb80a87f707 [ 52.442278][ T5145] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 52.442288][ T5145] RBP: 00007fb80a90b560 R08: 0000000000000073 R09: 0000000000000001 [ 52.442297][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 52.442306][ T5145] R13: 00007ffe5a06c070 R14: 000000000000001e R15: 00007ffe5a06c070 [ 52.442327][ T5145] [ 52.442341][ T5145] socket: no more sockets [ 52.443084][ T5746] ,cpuset=/,mems_allowed=0-1 [ 52.443217][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.443229][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.443236][ T5746] Call Trace: [ 52.443239][ T5746] [ 52.443243][ T5746] dump_stack_lvl+0x100/0x190 [ 52.443257][ T5746] warn_alloc.cold+0x94/0xa8 [ 52.443268][ T5746] ? __pfx_warn_alloc+0x10/0x10 [ 52.443279][ T5746] ? __kasan_kmalloc+0x8a/0xb0 [ 52.443298][ T5746] ? __get_vm_area_node+0x208/0x330 [ 52.443316][ T5746] __vmalloc_node_range_noprof+0xccd/0x1630 [ 52.443339][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.443357][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.443374][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.443388][ T5746] ? lock_acquire+0x1b9/0x370 [ 52.443406][ T5746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.443422][ T5746] ? rcu_is_watching+0x12/0xc0 [ 52.443435][ T5746] ? trace_contention_end+0x126/0x160 [ 52.443445][ T5746] ? __mutex_lock+0x26d/0x1bd0 [ 52.443458][ T5746] ? compat_do_ebt_get_ctl+0x1cd/0xbb0 [ 52.443471][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.443488][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.443500][ T5746] __vmalloc_node_noprof+0xad/0xf0 [ 52.443515][ T5746] ? xt_compat_init_offsets+0xe2/0x1f0 [ 52.443529][ T5746] xt_compat_init_offsets+0xe2/0x1f0 [ 52.443543][ T5746] compat_table_info+0x11b/0x870 [ 52.443554][ T5746] ? net_generic+0xea/0x2a0 [ 52.443564][ T5746] ? net_generic+0xea/0x2a0 [ 52.443578][ T5746] compat_do_ebt_get_ctl+0x270/0xbb0 [ 52.443591][ T5746] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 52.443607][ T5746] ? bpf_lsm_capable+0x9/0x10 [ 52.443619][ T5746] ? security_capable+0x80/0x260 [ 52.443648][ T5746] do_ebt_get_ctl+0x243/0x7a0 [ 52.443663][ T5746] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 52.443676][ T5746] ? __ia32_compat_sys_socketcall+0x65b/0x770 [ 52.443701][ T5746] ? nf_sockopt_find.isra.0+0x222/0x290 [ 52.443717][ T5746] nf_getsockopt+0x7c/0xe0 [ 52.443731][ T5746] ip_getsockopt+0x192/0x1e0 [ 52.443747][ T5746] ? __pfx_ip_getsockopt+0x10/0x10 [ 52.443765][ T5746] tcp_getsockopt+0xa1/0x110 [ 52.443782][ T5746] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 52.443800][ T5746] do_sock_getsockopt+0x50a/0x6e0 [ 52.443813][ T5746] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 52.443823][ T5746] ? errseq_sample+0x51/0x70 [ 52.443841][ T5746] ? __lock_acquire+0x49f/0x1a40 [ 52.443857][ T5746] ? lock_acquire+0x1b9/0x370 [ 52.443881][ T5746] __sys_getsockopt+0x133/0x1d0 [ 52.443899][ T5746] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 52.443916][ T5746] __ia32_compat_sys_socketcall+0x6af/0x770 [ 52.443934][ T5746] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.443961][ T5746] __do_fast_syscall_32+0xe7/0x970 [ 52.443974][ T5746] ? lockdep_hardirqs_on+0x78/0x100 [ 52.443988][ T5746] do_fast_syscall_32+0x32/0x70 [ 52.444002][ T5746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.444016][ T5746] RIP: 0023:0xf6fdefec [ 52.444024][ T5746] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.444035][ T5746] RSP: 002b:00000000ff8926d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 52.444044][ T5746] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000ff892708 [ 52.444051][ T5746] RDX: 00000000f73a6ff4 RSI: 00000000ff892790 RDI: 00000000ff89278c [ 52.444057][ T5746] RBP: 00000000ff892790 R08: 0000000000000000 R09: 0000000000000000 [ 52.444063][ T5746] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 52.444069][ T5746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.444082][ T5746] [ 52.444089][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.444104][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.444111][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.444126][ T13] Call Trace: [ 52.444129][ T13] [ 52.444134][ T13] dump_stack_lvl+0x100/0x190 [ 52.444146][ T13] should_fail_ex.cold+0x5/0xa [ 52.444158][ T13] should_failslab+0xc2/0x120 [ 52.444172][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.444186][ T13] ? fib6_add_1+0x33b/0x1700 [ 52.444200][ T13] fib6_add_1+0x33b/0x1700 [ 52.444214][ T13] fib6_add+0x1c5/0x1d30 [ 52.444229][ T13] ? do_raw_spin_lock+0x128/0x260 [ 52.444241][ T13] ? __pfx_fib6_add+0x10/0x10 [ 52.444251][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.444266][ T13] ip6_ins_rt+0xb5/0x110 [ 52.444280][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 52.444294][ T13] ? nlmsg_notify+0xbf/0x290 [ 52.444306][ T13] ? nlmsg_notify+0xdc/0x290 [ 52.444316][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.444337][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 52.444349][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 52.444358][ T13] ? __cancel_work+0x2b5/0x340 [ 52.444382][ T13] ? __cancel_work+0x245/0x340 [ 52.444406][ T13] ? __pfx___cancel_work+0x10/0x10 [ 52.444434][ T13] ? __lock_acquire+0x49f/0x1a40 [ 52.444465][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 52.444482][ T13] addrconf_dad_completed+0x195/0xff0 [ 52.444506][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.444534][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 52.444553][ T13] addrconf_dad_work+0x83c/0x1360 [ 52.444577][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.444600][ T13] ? rcu_is_watching+0x12/0xc0 [ 52.444623][ T13] process_one_work+0xa23/0x1940 [ 52.444656][ T13] ? __pfx_process_one_work+0x10/0x10 [ 52.444688][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.444708][ T13] worker_thread+0x5ef/0xe50 [ 52.444728][ T13] ? kthread+0x13a/0x450 [ 52.444741][ T13] ? __pfx_worker_thread+0x10/0x10 [ 52.444755][ T13] kthread+0x370/0x450 [ 52.444769][ T13] ? __pfx_kthread+0x10/0x10 [ 52.444783][ T13] ret_from_fork+0x72b/0xd50 [ 52.444797][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 52.444810][ T13] ? __switch_to+0x800/0x10f0 [ 52.444827][ T13] ? __pfx_kthread+0x10/0x10 [ 52.444843][ T13] ret_from_fork_asm+0x1a/0x30 [ 52.444863][ T13] [ 52.444872][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 52.444892][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.444902][ T5841] Workqueue: mld mld_dad_work [ 52.444923][ T5746] Mem-Info: [ 52.444925][ T5841] [ 52.444945][ T5841] Call Trace: [ 52.444953][ T5841] [ 52.444959][ T5841] dump_stack_lvl+0x100/0x190 [ 52.444976][ T5841] should_fail_ex.cold+0x5/0xa [ 52.444992][ T5841] should_failslab+0xc2/0x120 [ 52.445012][ T5841] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.445029][ T5841] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 52.445052][ T5841] dst_cow_metrics_generic+0x4c/0x1e0 [ 52.445072][ T5841] icmp6_dst_alloc+0x418/0x4f0 [ 52.445095][ T5841] mld_sendpack+0x5ae/0xec0 [ 52.445121][ T5841] ? __pfx_mld_sendpack+0x10/0x10 [ 52.445158][ T5841] mld_send_initial_cr+0x219/0x320 [ 52.445183][ T5841] mld_dad_work+0x32/0x1f0 [ 52.445207][ T5841] process_one_work+0xa23/0x1940 [ 52.445242][ T5841] ? __pfx_process_one_work+0x10/0x10 [ 52.445274][ T5841] ? __pfx_mld_dad_work+0x10/0x10 [ 52.445300][ T5841] worker_thread+0x5ef/0xe50 [ 52.445330][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 52.445355][ T5841] ? kthread+0x13a/0x450 [ 52.445376][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 52.445399][ T5841] kthread+0x370/0x450 [ 52.445421][ T5841] ? __pfx_kthread+0x10/0x10 [ 52.445447][ T5841] ret_from_fork+0x72b/0xd50 [ 52.445469][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 52.445492][ T5841] ? __switch_to+0x800/0x10f0 [ 52.445519][ T5841] ? __pfx_kthread+0x10/0x10 [ 52.445543][ T5841] ret_from_fork_asm+0x1a/0x30 [ 52.445577][ T5841] [ 53.786436][ T5107] Bluetooth: hci3: command tx timeout [ 53.788155][ T5746] active_anon:5547 inactive_anon:134 isolated_anon:0 [ 53.788155][ T5746] active_file:7 inactive_file:52133 isolated_file:0 [ 53.788155][ T5746] unevictable:1768 dirty:407 writeback:0 [ 53.788155][ T5746] slab_reclaimable:9679 slab_unreclaimable:51309 [ 53.788155][ T5746] mapped:23464 shmem:2289 pagetables:974 [ 53.788155][ T5746] sec_pagetables:297 bounce:0 [ 53.788155][ T5746] kernel_misc_reclaimable:0 [ 53.788155][ T5746] free:42620 free_pcp:12377 free_cma:0 [ 53.797538][ T5107] Bluetooth: hci2: command tx timeout [ 53.797567][ T5107] Bluetooth: hci0: command tx timeout [ 55.866771][ T5759] Bluetooth: hci0: command tx timeout [ 55.867004][ T5107] Bluetooth: hci2: command tx timeout [ 55.867026][ T5107] Bluetooth: hci3: command tx timeout [ 55.869552][ T5746] Node 0 active_anon:56kB inactive_anon:4kB active_file:28kB inactive_file:436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1120kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 57.466985][ T5746] Node 1 active_anon:22304kB inactive_anon:520kB active_file:0kB inactive_file:208232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93964kB dirty:1728kB writeback:0kB shmem:5620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4128kB pagetables:2896kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 57.480599][ T5746] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:524kB local_pcp:228kB free_cma:0kB [ 57.491790][ T5746] lowmem_reserve[]: 0 280 280 280 280 [ 57.493924][ T5746] Node 0 DMA32 free:15908kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56kB inactive_anon:4kB active_file:28kB inactive_file:436kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:8852kB local_pcp:1212kB free_cma:0kB [ 57.507269][ T5746] lowmem_reserve[]: 0 0 0 0 0 [ 57.509173][ T5746] Node 1 DMA32 free:149984kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22204kB inactive_anon:520kB active_file:0kB inactive_file:208232kB unevictable:3536kB writepending:1740kB zspages:2736kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:40940kB local_pcp:11508kB free_cma:0kB [ 57.521786][ T5746] lowmem_reserve[]: 0 0 0 0 0 [ 57.523761][ T5746] Node 0 DMA: 56*4kB (UM) 13*8kB (UM) 10*16kB (UM) 9*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2056kB [ 57.529734][ T5746] Node 0 DMA32: 3*4kB (E) 25*8kB (UE) 3*16kB (ME) 51*32kB (UME) 29*64kB (UME) 23*128kB (UME) 12*256kB (ME) 10*512kB (ME) 1*1024kB (U) 0*2048kB 0*4096kB = 15908kB [ 57.536477][ T5746] Node 1 DMA32: 2*4kB (ME) 3*8kB (UME) 2*16kB (UM) 1*32kB (M) 2*64kB (ME) 2*128kB (ME) 2*256kB (UM) 3*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 35*4096kB (M) = 149984kB [ 57.543206][ T5746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.547674][ T5746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.551520][ T5746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.556567][ T5746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.560412][ T5746] 54620 total pagecache pages [ 57.562367][ T5746] 159 pages in swap cache [ 57.564058][ T5746] Free swap = 120760kB [ 57.565851][ T5746] Total swap = 124996kB [ 57.567610][ T5746] 524155 pages RAM [ 57.569177][ T5746] 0 pages HighMem/MovableOnly [ 57.571167][ T5746] 211525 pages reserved [ 57.572876][ T5746] 0 pages cma reserved [ 57.706273][ T43] audit: type=1800 audit(1785413771.321:2): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.30" name="bulk_qlen" dev="configfs" ino=8944 res=0 errno=0 [ 57.744486][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.864897][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.904497][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.910489][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.914780][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.918012][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.921139][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.012844][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.030712][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.037292][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.044405][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.050658][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.055614][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.129557][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.268754][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.341381][ T6002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.351126][ T13] bridge_slave_1: left allmulticast mode [ 58.354257][ T5975] syz.3.32 (5975): drop_caches: 2 [ 58.356416][ T13] bridge_slave_1: left promiscuous mode [ 58.358382][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.359192][ T5976] syz.3.32 (5976): drop_caches: 2 [ 58.360360][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.369801][ T13] bridge_slave_0: left allmulticast mode [ 58.372067][ T13] bridge_slave_0: left promiscuous mode [ 58.374480][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.509537][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.517046][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.521079][ T13] bond0 (unregistering): Released all slaves [ 58.567840][ T6008] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 58.738189][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.797125][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.799432][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.802175][ T5977] bridge_slave_0: entered allmulticast mode [ 58.804879][ T5977] bridge_slave_0: entered promiscuous mode [ 58.827884][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.830819][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.833683][ T5977] bridge_slave_1: entered allmulticast mode [ 58.837457][ T5977] bridge_slave_1: entered promiscuous mode [ 58.873878][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.897733][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.945243][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.948777][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.951343][ T5982] bridge_slave_0: entered allmulticast mode [ 58.954495][ T5982] bridge_slave_0: entered promiscuous mode [ 58.961153][ T5977] team0: Port device team_slave_0 added [ 58.964406][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.967578][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.970128][ T5982] bridge_slave_1: entered allmulticast mode [ 58.973194][ T5982] bridge_slave_1: entered promiscuous mode [ 58.989616][ T5977] team0: Port device team_slave_1 added [ 59.033093][ T13] hsr_slave_0: left promiscuous mode [ 59.037065][ T13] hsr_slave_1: left promiscuous mode [ 59.040573][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.043634][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.050786][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.056872][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.072868][ T13] veth1_macvtap: left promiscuous mode [ 59.075297][ T13] veth0_macvtap: left promiscuous mode [ 59.078030][ T13] veth1_vlan: left promiscuous mode [ 59.079366][ T6034] dwc3 dwc3.2.auto: Configuration mismatch. dr_mode forced to gadget [ 59.080339][ T13] veth0_vlan: left promiscuous mode [ 59.090787][ T6034] dwc3 dwc3.2.auto: DWC3 controller soft reset failed. [ 59.096764][ T6034] dwc3 dwc3.2.auto: error -ETIMEDOUT: failed to initialize core [ 59.100858][ T6034] dwc3 dwc3.2.auto: probe with driver dwc3 failed with error -110 [ 59.255861][ T13] team0 (unregistering): Port device team_slave_1 removed [ 59.263077][ T13] team0 (unregistering): Port device team_slave_0 removed [ 59.325887][ T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.367108][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.370545][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.373296][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.383900][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.389794][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.392699][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.403656][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.410072][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.434195][ T5982] team0: Port device team_slave_0 added [ 59.447492][ T5982] team0: Port device team_slave_1 added [ 59.475948][ T846] usb 8-1: Using ep0 maxpacket: 8 [ 59.481865][ T846] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 59.487150][ T846] usb 8-1: config 0 has no interface number 0 [ 59.489708][ T846] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 59.490968][ T5977] hsr_slave_0: entered promiscuous mode [ 59.494030][ T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.496152][ T5977] hsr_slave_1: entered promiscuous mode [ 59.500772][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 59.501377][ T846] usb 8-1: config 0 descriptor?? [ 59.502424][ T5977] Cannot create hsr debugfs directory [ 59.516872][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.519164][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.527189][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.537185][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.540294][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.543025][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.553653][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.620536][ T5982] hsr_slave_0: entered promiscuous mode [ 59.623890][ T5982] hsr_slave_1: entered promiscuous mode [ 59.626797][ T846] viperboard 8-1:0.143: version 0.00 found at bus 008 address 002 [ 59.628197][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 59.631584][ T5982] Cannot create hsr debugfs directory [ 59.648952][ T846] viperboard-i2c viperboard-i2c.4.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 59.652205][ T846] viperboard-i2c viperboard-i2c.4.auto: probe with driver viperboard-i2c failed with error -5 [ 59.677445][ T6050] hub 1-0:1.0: USB hub found [ 59.679480][ T6050] hub 1-0:1.0: 2 ports detected [ 59.799573][ T41] usb 8-1: USB disconnect, device number 2 [ 59.942264][ T5982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.952383][ T5977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.967927][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.973165][ T5977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.988516][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.991315][ T5977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.998972][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.001961][ T5977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.007968][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.016068][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.033630][ T5982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.113781][ T5982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.116290][ T5107] Bluetooth: hci1: command tx timeout [ 60.143994][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.153724][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.159244][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.161484][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.178635][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.181066][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.206633][ T5982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.296742][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.301723][ T13] bridge_slave_1: left allmulticast mode [ 60.303618][ T13] bridge_slave_1: left promiscuous mode [ 60.306034][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.310111][ T13] bridge_slave_0: left allmulticast mode [ 60.311846][ T13] bridge_slave_0: left promiscuous mode [ 60.313626][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.451960][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.457669][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.463353][ T13] bond0 (unregistering): Released all slaves [ 60.484122][ T6097] uhci_hcd 0000:00:1d.0: remove, state 4 [ 60.487353][ T6097] usb usb1: USB disconnect, device number 1 [ 60.514283][ T6097] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 60.543893][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.545331][ T6102] ehci-pci 0000:00:1d.7: remove, state 1 [ 60.552078][ T6102] usb usb2: USB disconnect, device number 1 [ 60.555246][ T6102] usb 2-1: USB disconnect, device number 2 [ 60.561924][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.565205][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.581751][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.589844][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.604894][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.647341][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.654490][ T5982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.689855][ T6102] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 60.773379][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.801451][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.811189][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.820625][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.823528][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.837646][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.840157][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.859659][ T13] hsr_slave_0: left promiscuous mode [ 60.867119][ T13] hsr_slave_1: left promiscuous mode [ 60.869028][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.871340][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.878329][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.880577][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.888915][ T13] veth1_macvtap: left promiscuous mode [ 60.890418][ T6097] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 60.890626][ T13] veth0_macvtap: left promiscuous mode [ 60.894186][ T13] veth1_vlan: left promiscuous mode [ 60.896032][ T13] veth0_vlan: left promiscuous mode [ 60.897414][ T6097] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 60.904332][ T6097] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 60.925912][ T6097] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 60.931111][ T6097] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 60.934549][ T6097] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 60.938044][ T6097] usb usb1: Product: EHCI Host Controller [ 60.940474][ T6097] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 60.943005][ T6097] usb usb1: SerialNumber: 0000:00:1d.7 [ 60.969842][ T6097] hub 1-0:1.0: USB hub found [ 60.973157][ T6097] hub 1-0:1.0: 6 ports detected [ 61.022183][ T6097] hub 3-0:1.0: USB hub found [ 61.025194][ T6097] hub 3-0:1.0: 2 ports detected [ 61.070282][ T6097] hub 4-0:1.0: USB hub found [ 61.071988][ T6097] hub 4-0:1.0: 2 ports detected [ 61.074934][ T13] team0 (unregistering): Port device team_slave_1 removed [ 61.090433][ T13] team0 (unregistering): Port device team_slave_0 removed [ 61.245372][ T5977] veth0_vlan: entered promiscuous mode [ 61.251360][ T5977] veth1_vlan: entered promiscuous mode [ 61.255819][ T5858] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 61.266810][ T5977] veth0_macvtap: entered promiscuous mode [ 61.278905][ T5977] veth1_macvtap: entered promiscuous mode [ 61.300892][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.311986][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.325090][ T5557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.332691][ T5557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.338755][ T5557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.341834][ T5557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.346207][ T6079] NFSD: Unable to initialize client recovery tracking! (-110) [ 61.349207][ T6079] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 61.354299][ T6079] NFSD: starting 90-second grace period (net f00003f7) [ 61.400479][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.403698][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.426186][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.429909][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.443182][ T5858] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 61.447020][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 61.451891][ T5858] usb 1-1: Product: QEMU USB Tablet [ 61.453680][ T5858] usb 1-1: Manufacturer: QEMU [ 61.455317][ T5858] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 61.479724][ T5858] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input5 [ 61.496599][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.514152][ T6139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.521482][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.557792][ T5858] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 61.562212][ T5982] veth0_vlan: entered promiscuous mode [ 61.570351][ T5982] veth1_vlan: entered promiscuous mode [ 61.588249][ T5982] veth0_macvtap: entered promiscuous mode [ 61.592254][ T5982] veth1_macvtap: entered promiscuous mode [ 61.603444][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.610370][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.618043][ T5557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.621523][ T5557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.627428][ T5557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.631136][ T5557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.666139][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 61.670054][ T24] usb 8-1: config 0 has no interfaces? [ 61.679412][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 61.683803][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.687208][ T24] usb 8-1: Product: syz [ 61.688946][ T24] usb 8-1: Manufacturer: syz [ 61.692066][ T24] usb 8-1: SerialNumber: syz [ 61.721975][ T24] usb 8-1: config 0 descriptor?? [ 61.743152][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.746701][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.769650][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.772612][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.997332][ T6147] FAULT_INJECTION: forcing a failure. [ 61.997332][ T6147] name fail_futex, interval 1, probability 0, space 0, times 1 [ 62.002204][ T6147] CPU: 2 UID: 0 PID: 6147 Comm: syz.0.54 Not tainted syzkaller #0 PREEMPT(full) [ 62.002226][ T6147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.002237][ T6147] Call Trace: [ 62.002245][ T6147] [ 62.002254][ T6147] dump_stack_lvl+0x100/0x190 [ 62.002281][ T6147] should_fail_ex.cold+0x5/0xa [ 62.002305][ T6147] get_futex_key+0x1d2/0x14f0 [ 62.002328][ T6147] ? __pfx_get_futex_key+0x10/0x10 [ 62.002343][ T6147] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 62.002369][ T6147] ? __smp_call_single_queue+0x17e/0x450 [ 62.002397][ T6147] ? __pfx___smp_call_single_queue+0x10/0x10 [ 62.002428][ T6147] futex_wait_setup+0x91/0x540 [ 62.002461][ T6147] __futex_wait+0x19f/0x300 [ 62.002487][ T6147] ? __pfx___futex_wait+0x10/0x10 [ 62.002504][ T6147] ? __pfx_try_to_wake_up+0x10/0x10 [ 62.002521][ T6147] ? futex_hash+0x311/0x400 [ 62.002540][ T6147] ? __pfx_futex_wake_mark+0x10/0x10 [ 62.002568][ T6147] ? find_held_lock+0x2b/0x80 [ 62.002588][ T6147] ? futex_wake+0x4ea/0x5e0 [ 62.002616][ T6147] futex_wait+0xe6/0x370 [ 62.002642][ T6147] ? __pfx_futex_wait+0x10/0x10 [ 62.002670][ T6147] ? rcu_read_lock_any_held+0x6a/0xa0 [ 62.002703][ T6147] ? find_held_lock+0x2b/0x80 [ 62.002729][ T6147] ? ksys_write+0x190/0x250 [ 62.002748][ T6147] ? ksys_write+0x190/0x250 [ 62.002770][ T6147] do_futex+0x265/0x440 [ 62.002792][ T6147] ? __pfx_do_futex+0x10/0x10 [ 62.002813][ T6147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.002843][ T6147] __ia32_sys_futex_time32+0x2f4/0x470 [ 62.002869][ T6147] ? fput+0x79/0x100 [ 62.002889][ T6147] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 62.002939][ T6147] ? ksys_write+0x1ac/0x250 [ 62.002959][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 62.002986][ T6147] __do_fast_syscall_32+0xe7/0x970 [ 62.003016][ T6147] do_fast_syscall_32+0x32/0x70 [ 62.003043][ T6147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.003068][ T6147] RIP: 0023:0xf7fc8fec [ 62.003087][ T6147] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 62.003096][ T6147] RSP: 002b:00000000f54865bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 62.003113][ T6147] RAX: ffffffffffffffda RBX: 00000000f7484f88 RCX: 0000000000000080 [ 62.003125][ T6147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7484f8c [ 62.003137][ T6147] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 62.003146][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.003156][ T6147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.003180][ T6147] [ 62.121447][ T6151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.184709][ T6153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.189174][ T5107] Bluetooth: hci1: command tx timeout [ 62.194749][ T6151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.199519][ T6151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.236011][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.237598][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.241612][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.297673][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.304462][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.383513][ T5557] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.387757][ T5557] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.392328][ T5557] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.395802][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 62.397787][ T5833] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.397879][ T5557] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.401144][ T5833] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 62.407858][ T5833] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.414327][ T5833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 62.417835][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.420699][ T5833] usb 6-1: Product: syz [ 62.422184][ T5833] usb 6-1: Manufacturer: syz [ 62.423821][ T5833] usb 6-1: SerialNumber: syz [ 62.440175][ T5833] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 62.446291][ T5833] usb-storage 6-1:1.0: USB Mass Storage device detected [ 62.449569][ T6160] random: crng reseeded on system resumption [ 62.452685][ T5833] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 62.643574][ T1042] usb 6-1: USB disconnect, device number 2 [ 62.753795][ T6169] e1000e 0000:00:02.0 eth1: removed PHC [ 62.873528][ T6169] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 63.066696][ T6175] dwc3 dwc3.3.auto: this is not a DesignWare USB3 DRD Core [ 63.208979][ T6192] dwc3 dwc3.3.auto: this is not a DesignWare USB3 DRD Core [ 63.251492][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 63.262933][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.273243][ T6197] bridge_slave_1 (unregistering): left allmulticast mode [ 63.276636][ T6197] bridge_slave_1 (unregistering): left promiscuous mode [ 63.279750][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.302650][ T6200] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 63.304853][ T6200] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 63.313231][ T6200] ================================================================== [ 63.315766][ T6200] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 63.318201][ T6200] Read of size 8 at addr ffff888029f537f0 by task syz.4.66/6200 [ 63.321442][ T6200] [ 63.322661][ T6200] CPU: 3 UID: 0 PID: 6200 Comm: syz.4.66 Not tainted syzkaller #0 PREEMPT(full) [ 63.322678][ T6200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.322686][ T6200] Call Trace: [ 63.322691][ T6200] [ 63.322696][ T6200] dump_stack_lvl+0x100/0x190 [ 63.322712][ T6200] print_report+0x13d/0x4b0 [ 63.322729][ T6200] ? __virt_addr_valid+0x239/0x430 [ 63.322743][ T6200] ? dummy_free_request+0x8a/0x90 [ 63.322761][ T6200] kasan_report+0xdf/0x1c0 [ 63.322777][ T6200] ? dummy_free_request+0x8a/0x90 [ 63.322795][ T6200] dummy_free_request+0x8a/0x90 [ 63.322813][ T6200] uvc_function_bind+0x181a/0x1939 [ 63.322826][ T6200] ? __pfx_uvc_function_bind+0x10/0x10 [ 63.322838][ T6200] usb_add_function+0x219/0x890 [ 63.322855][ T6200] configfs_composite_bind+0xd83/0x1960 [ 63.322874][ T6200] gadget_bind_driver+0x28c/0xbf0 [ 63.322886][ T6200] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 63.322919][ T6200] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.322934][ T6200] really_probe+0x241/0xa60 [ 63.322951][ T6200] __driver_probe_device+0x20e/0x450 [ 63.322967][ T6200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.322984][ T6200] driver_probe_device+0x4a/0x140 [ 63.323000][ T6200] __driver_attach+0x21f/0x5b0 [ 63.323015][ T6200] ? __pfx___driver_attach+0x10/0x10 [ 63.323029][ T6200] bus_for_each_dev+0x13e/0x1d0 [ 63.323042][ T6200] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.323053][ T6200] ? bus_add_driver+0x2b5/0x5b0 [ 63.323067][ T6200] bus_add_driver+0x305/0x5b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 63.323080][ T6200] driver_register+0x1e2/0x360 [ 63.323096][ T6200] usb_gadget_register_driver_owner+0x132/0x210 [ 63.323109][ T6200] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 63.323124][ T6200] configfs_write_iter+0x302/0x4e0 [ 63.323136][ T6200] vfs_write+0x6ac/0x1050 [ 63.323147][ T6200] ? __pfx_configfs_write_iter+0x10/0x10 [ 63.323158][ T6200] ? __pfx_vfs_write+0x10/0x10 [ 63.323167][ T6200] ? find_held_lock+0x2b/0x80 [ 63.323184][ T6200] ksys_write+0x12a/0x250 [ 63.323194][ T6200] ? __pfx_ksys_write+0x10/0x10 [ 63.323205][ T6200] __do_fast_syscall_32+0xe7/0x970 [ 63.323221][ T6200] do_fast_syscall_32+0x32/0x70 [ 63.323235][ T6200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.323250][ T6200] RIP: 0023:0xf7f85fec [ 63.323264][ T6200] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 63.323269][ T6200] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 63.323280][ T6200] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 63.323287][ T6200] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 63.323293][ T6200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.323300][ T6200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.323306][ T6200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.323315][ T6200] [ 63.323319][ T6200] [ 63.410033][ T6200] Allocated by task 5458: [ 63.411395][ T6200] kasan_save_stack+0x30/0x50 [ 63.412883][ T6200] kasan_save_track+0x14/0x30 [ 63.414365][ T6200] __kasan_kmalloc+0xaa/0xb0 [ 63.415853][ T6200] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 63.417538][ T6200] __hw_addr_create+0x57/0x220 [ 63.419049][ T6200] __hw_addr_add_ex+0x32b/0x650 [ 63.420571][ T6200] dev_mc_add+0xb6/0x110 [ 63.421914][ T6200] igmp_group_added+0x83a/0x9a0 [ 63.423453][ T6200] ____ip_mc_inc_group+0x7e3/0x10d0 [ 63.424996][ T6200] ip_mc_up+0x154/0x390 [ 63.426239][ T6200] inetdev_event+0x6c3/0x17f0 [ 63.427739][ T6200] notifier_call_chain+0x99/0x3f0 [ 63.429320][ T6200] call_netdevice_notifiers_info+0xbe/0x110 [ 63.431182][ T6200] __dev_notify_flags+0x12c/0x2e0 [ 63.432762][ T6200] netif_change_flags+0x108/0x160 [ 63.434339][ T6200] dev_change_flags+0xba/0x260 [ 63.435817][ T6200] devinet_ioctl+0x110b/0x1f10 [ 63.437307][ T6200] inet_ioctl+0x3aa/0x3f0 [ 63.438620][ T6200] sock_do_ioctl+0x118/0x280 [ 63.440091][ T6200] sock_ioctl+0x599/0x6b0 [ 63.441453][ T6200] __x64_sys_ioctl+0x18e/0x210 [ 63.442992][ T6200] do_syscall_64+0x115/0x840 [ 63.444454][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.446239][ T6200] [ 63.447017][ T6200] The buggy address belongs to the object at ffff888029f53700 [ 63.447017][ T6200] which belongs to the cache kmalloc-128 of size 128 [ 63.451282][ T6200] The buggy address is located 136 bytes to the right of [ 63.451282][ T6200] allocated 104-byte region [ffff888029f53700, ffff888029f53768) [ 63.455764][ T6200] [ 63.456528][ T6200] The buggy address belongs to the physical page: [ 63.458527][ T6200] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029f53000 pfn:0x29f53 [ 63.461576][ T6200] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 63.464151][ T6200] page_type: f5(slab) [ 63.465460][ T6200] raw: 00fff00000000200 ffff88801bc42a00 ffffea00009e4ed0 ffffea000098ab10 [ 63.468108][ T6200] raw: ffff888029f53000 000000080010000e 00000000f5000000 0000000000000000 [ 63.470645][ T6200] page dumped because: kasan: bad access detected [ 63.472644][ T6200] page_owner tracks the page as allocated [ 63.474415][ T6200] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5158, tgid 5158 (udevd), ts 20912006889, free_ts 20799520213 [ 63.480516][ T6200] post_alloc_hook+0xfd/0x120 [ 63.481999][ T6200] get_page_from_freelist+0xf48/0x3530 [ 63.483710][ T6200] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 63.485553][ T6200] new_slab+0xa2/0x640 [ 63.486840][ T6200] refill_objects+0xe3/0x410 [ 63.488295][ T6200] __pcs_replace_empty_main+0x376/0x680 [ 63.490048][ T6200] __kmalloc_cache_noprof+0x479/0x6c0 [ 63.491727][ T6200] kernfs_fop_open+0x9fa/0xd50 [ 63.493245][ T6200] do_dentry_open+0x6ab/0x14d0 [ 63.494742][ T6200] vfs_open+0x82/0x3f0 [ 63.496035][ T6200] path_openat+0x2873/0x4280 [ 63.497497][ T6200] do_file_open+0x20e/0x430 [ 63.498927][ T6200] do_sys_openat2+0x10f/0x1e0 [ 63.500403][ T6200] __x64_sys_openat+0x12d/0x210 [ 63.501917][ T6200] do_syscall_64+0x115/0x840 [ 63.503387][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.505223][ T6200] page last free pid 5161 tgid 5161 stack trace: [ 63.507183][ T6200] __free_frozen_pages+0x79f/0x1090 [ 63.508808][ T6200] qlist_free_all+0x47/0xf0 [ 63.510263][ T6200] kasan_quarantine_reduce+0x1a0/0x1f0 [ 63.511977][ T6200] __kasan_slab_alloc+0x69/0x90 [ 63.513517][ T6200] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 63.515219][ T6200] security_file_alloc+0x34/0x2c0 [ 63.516791][ T6200] init_file+0x95/0x480 [ 63.518109][ T6200] alloc_empty_file+0x79/0x1c0 [ 63.519610][ T6200] path_openat+0xe7/0x4280 [ 63.521006][ T6200] do_file_open+0x20e/0x430 [ 63.522428][ T6200] do_sys_openat2+0x10f/0x1e0 [ 63.523919][ T6200] __x64_sys_openat+0x12d/0x210 [ 63.525442][ T6200] do_syscall_64+0x115/0x840 [ 63.526889][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.528769][ T6200] [ 63.529529][ T6200] Memory state around the buggy address: [ 63.531281][ T6200] ffff888029f53680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.533778][ T6200] ffff888029f53700: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 63.536252][ T6200] >ffff888029f53780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.538738][ T6200] ^ [ 63.541122][ T6200] ffff888029f53800: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 63.543604][ T6200] ffff888029f53880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.546136][ T6200] ================================================================== [ 63.575269][ T6200] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 63.577545][ T6200] CPU: 3 UID: 0 PID: 6200 Comm: syz.4.66 Not tainted syzkaller #0 PREEMPT(full) [ 63.580337][ T6200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.583437][ T6200] Call Trace: [ 63.584476][ T6200] [ 63.585416][ T6200] dump_stack_lvl+0x100/0x190 [ 63.586893][ T6200] vpanic+0x552/0x970 [ 63.588174][ T6200] ? __pfx_vpanic+0x10/0x10 [ 63.589610][ T6200] ? mark_held_locks+0x40/0x70 [ 63.591132][ T6200] ? dummy_free_request+0x8a/0x90 [ 63.592742][ T6200] panic+0xd1/0xe0 [ 63.593895][ T6200] ? __pfx_panic+0x10/0x10 [ 63.595307][ T6200] ? dummy_free_request+0x8a/0x90 [ 63.596897][ T6200] ? preempt_schedule_common+0x42/0xc0 [ 63.598596][ T6200] check_panic_on_warn.cold+0x19/0x34 [ 63.600280][ T6200] end_report.part.0+0x3a/0x90 [ 63.601790][ T6200] kasan_report.cold+0xe/0x18 [ 63.603302][ T6200] ? dummy_free_request+0x8a/0x90 [ 63.604867][ T6200] dummy_free_request+0x8a/0x90 [ 63.606343][ T6200] uvc_function_bind+0x181a/0x1939 [ 63.607963][ T6200] ? __pfx_uvc_function_bind+0x10/0x10 [ 63.609671][ T6200] usb_add_function+0x219/0x890 [ 63.611169][ T6200] configfs_composite_bind+0xd83/0x1960 [ 63.612880][ T6200] gadget_bind_driver+0x28c/0xbf0 [ 63.614403][ T6200] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 63.616138][ T6200] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.617832][ T6200] really_probe+0x241/0xa60 [ 63.619237][ T6200] __driver_probe_device+0x20e/0x450 [ 63.620848][ T6200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.622711][ T6200] driver_probe_device+0x4a/0x140 [ 63.624300][ T6200] __driver_attach+0x21f/0x5b0 [ 63.625804][ T6200] ? __pfx___driver_attach+0x10/0x10 [ 63.627462][ T6200] bus_for_each_dev+0x13e/0x1d0 [ 63.628999][ T6200] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.630676][ T6200] ? bus_add_driver+0x2b5/0x5b0 [ 63.632225][ T6200] bus_add_driver+0x305/0x5b0 [ 63.633968][ T6200] driver_register+0x1e2/0x360 [ 63.635463][ T6200] usb_gadget_register_driver_owner+0x132/0x210 [ 63.637424][ T6200] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 63.639185][ T6200] configfs_write_iter+0x302/0x4e0 [ 63.640789][ T6200] vfs_write+0x6ac/0x1050 [ 63.642146][ T6200] ? __pfx_configfs_write_iter+0x10/0x10 [ 63.643925][ T6200] ? __pfx_vfs_write+0x10/0x10 [ 63.645421][ T6200] ? find_held_lock+0x2b/0x80 [ 63.646922][ T6200] ksys_write+0x12a/0x250 [ 63.648292][ T6200] ? __pfx_ksys_write+0x10/0x10 [ 63.649820][ T6200] __do_fast_syscall_32+0xe7/0x970 [ 63.651440][ T6200] do_fast_syscall_32+0x32/0x70 [ 63.653007][ T6200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.654983][ T6200] RIP: 0023:0xf7f85fec [ 63.656287][ T6200] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 63.658356][ T6200] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 63.660915][ T6200] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 63.663397][ T6200] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 63.665689][ T6200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.667866][ T6200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.670311][ T6200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.672794][ T6200] [ 63.674444][ T6200] Kernel Offset: disabled [ 63.675839][ T6200] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:16:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc90003c4f688 RCX=ffffc90003c4f5dc RDX=1ffff92000789eff RSI=ffffffff81c5cfc7 RDI=ffffc90003c4f754 RBP=ffffc90003c4f718 RSP=ffffc90003c4f688 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c5cc R12=ffffffff81f3d740 R13=ffffc90003c4f748 R14=0000000000000000 R15=ffff88802249ca80 RIP=ffffffff81af1958 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc095fc16b0 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000003fff Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0960c1b20 000055aade6eba90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000008 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000050 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000600010015 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000200000048 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200010015 0000000100020015 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 362e3435322e3936 312031687465205d 505241204650425b 203a646370636864 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3133312e32362e34 35322e3936312031 687465205d505241 204650425b203a64 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd85c41a36 00007ffd85c41a2a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a3364303178303d 0000000000000000 0000000000000000 00007ffd85c41a36 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd85c41a2a 00007ffd85c419ad 00007ffd85c419a2 00007ffd85c41994 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd85c41987 00007ffd85c41979 00007ffd85c4196c 00007ffd85c41959 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd85c4194b 00007ffd85c4193b 00007ffd85c4192c 00007ffd85c41923 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014dced54cc e821e36200000000 000080fe00010014 00000003fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a20652032332064 203020310a322032 20656400640a640a 5f6220645f626300 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff8bb7d1c5 RBX=0000000000000001 RCX=ffffffff91d56206 RDX=ffffc90003d3ff01 RSI=ffffc90003d3ff00 RDI=ffffc90003d3ff00 RBP=ffffc90003d3f360 RSP=ffffc90003d3f2a0 R8 =ffffffff91d5620a R9 =0000000000000007 R10=0000000000000200 R11=0000000000018f8e R12=ffffc90003d3f368 R13=ffffc90003d3f318 R14=ffffc90003d3ff08 R15=ffffc90003d3f34c RIP=ffffffff81b7fb03 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fba556eeb4c CR3=000000004ff54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90003a0ff48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c400a00 RDI=0000000000000014 RBP=ffffc90003a0ff38 RSP=ffffc90003a0ff00 R8 =0000000000000000 R9 =fffffbfff224545a R10=ffffffff9122a2d7 R11=0000000000000000 R12=ffff888026b7a540 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b68bc8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f726e860 CR3=000000004c5c9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc90003a9f298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000030323654 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9b6f31f0 R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561225686138 CR3=000000006ab84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=000000000000003f Opmask02=000000000101003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd85c515d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aade6efe64 000055aade6efe10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd85c31558 00007ffd85c418b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc095f2fef0 0000000000001808 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001808 00007ffd85c31558 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 ffffffffffffff88 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69626572004d52 4c4147495300676e 697361656c657200 4d52455447495300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c474057004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00060014 0cc13e74976b4a28 00000000000080fe 0001001400000007 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000ad100000ad1 ffffffffffffffff 000600141a60a5b7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7f577b900000000 000080fe00010014 00000008fd80400a f38e37776a6b408e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000ac800000ac8 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000600140cc13e74 976b4a2800000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a20652032332064 203020310a322032 20656400640a640a 5f6220645f626300 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000