last executing test programs: 12.265360777s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 12.077719182s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='ram\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='2097152\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='11223344-5566-7788-9900-aabbccddeeff\x00', 0x25) write(0xffffffffffffffff, &(0x7f0000000440)='pfn0.0\x00', 0x7) 3.632183318s ago: executing program 0 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, 0xfffffffffffffffc}) write(0x1, &(0x7f0000000000)='\x00', 0x1) madvise(0xfffffffffffffffc, 0x2000, 0x14) madvise(0xfffffffffffffffc, 0x2000, 0x15) 3.572595125s ago: executing program 32 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, 0xfffffffffffffffc}) write(0x1, &(0x7f0000000000)='\x00', 0x1) madvise(0xfffffffffffffffc, 0x2000, 0x14) madvise(0xfffffffffffffffc, 0x2000, 0x15) 3.531696225s ago: executing program 3 (id=70): r0 = socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xfffffffffffffffb, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x4, 0x0, r3, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close_range(r0, r4, 0x0) 3.367726394s ago: executing program 3 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) 3.081336847s ago: executing program 3 (id=80): mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 2.98797189s ago: executing program 3 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='ram\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='namespace0.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='pfn0.0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) 2.93077848s ago: executing program 3 (id=85): creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001080)='./file0\x00', 0x0, 0x1001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='file0', 0x5) 2.846528989s ago: executing program 3 (id=87): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10102) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 772.007711ms ago: executing program 2 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r3, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0) 771.811136ms ago: executing program 4 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000041000701fefffffffeffffff017c0000040042800c00018006000600800a000008000280040005"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 771.60272ms ago: executing program 4 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) 691.074072ms ago: executing program 4 (id=116): mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n', 0x9) 631.168647ms ago: executing program 4 (id=117): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x100000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) mkdir(&(0x7f00000000c0)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./config/cluster\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000240)='./config/cluster/ocfs2/node\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0xa) close(r2) write(0xffffffffffffffff, &(0x7f0000000380)='7777', 0x4) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\x00', 0x2) close(r4) mkdir(&(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/region0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/region0/block_bytes\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='512\x00', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/ocfs2/heartbeat/region0/start_block\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1\x00', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/region0/blocks\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='2\x00', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/ocfs2/heartbeat/region0/dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='3\x00', 0x2) close(r8) 630.865605ms ago: executing program 2 (id=118): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 630.651944ms ago: executing program 4 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff) write(r1, &(0x7f0000000800)='0x01', 0x4) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 569.434431ms ago: executing program 4 (id=121): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='ffffffff', 0x8) close(r0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1ff) mount(&(0x7f0000000a40)=@filename='none\x00', &(0x7f0000000a80)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000b40)='file vhci_hcd.c +p', 0x12) close(r1) syz_usbip_server_init(0x5) r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000440)}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000480)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000004c0)}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000500)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000540)='\x00\x00\x00\x00'}) 480.392368ms ago: executing program 2 (id=123): mkdir(0x0, 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 480.257372ms ago: executing program 1 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='ram\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='11223344-5566-7788-9900-aabbccddeeff\x00', 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='namespace0.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='pfn0.0\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='pfn0.0\x00', 0x7) 391.98648ms ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) 327.45434ms ago: executing program 2 (id=126): mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd_dir/portlist\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 327.281008ms ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x20, 0x1, 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xffff0000, 0xffff, 0xf000, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1}, {0x0, 0xffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x60000010, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfee00900}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000300)={0xa000000000000000, 0x0, 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 266.982242ms ago: executing program 1 (id=128): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x100000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) mkdir(&(0x7f00000000c0)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./config/cluster\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000240)='./config/cluster/ocfs2/node\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1\x00', 0xa) close(r2) write(0xffffffffffffffff, &(0x7f0000000380)='7777', 0x4) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r3, &(0x7f0000000400), 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\x00', 0x2) close(r4) mkdir(&(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/region0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/region0/block_bytes\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='512\x00', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/ocfs2/heartbeat/region0/start_block\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1\x00', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/ocfs2/heartbeat/region0/blocks\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='2\x00', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/cluster/ocfs2/heartbeat/region0/dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='3\x00', 0x2) close(r8) 266.731757ms ago: executing program 1 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='ram\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000380)='2097152\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='namespace0.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='pfn0.0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) 141.590848ms ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff) write(r1, &(0x7f0000000800)='0x01', 0x4) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 81.786464ms ago: executing program 1 (id=131): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) 0s ago: executing program 1 (id=132): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x77359400}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=133): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001b00)='dummy_udc.0\x00', 0xb) close(r0) kernel console output (not intermixed with test programs): failslab, interval 1, probability 100, space 0, times 19 [ 53.760909][ T6026] taskstats_exit+0x6d3/0xca0 [ 53.760923][ T6026] ? __pfx_taskstats_exit+0x10/0x10 [ 53.760940][ T6026] do_exit+0x65c/0x2ae0 [ 53.760957][ T6026] ? __pfx___might_resched+0x10/0x10 [ 53.760977][ T6026] ? __pfx_do_exit+0x10/0x10 [ 53.761002][ T6026] ? do_raw_spin_lock+0x128/0x260 [ 53.761023][ T6026] ? find_held_lock+0x2b/0x80 [ 53.761048][ T6026] ? get_signal+0x7e0/0x21e0 [ 53.761074][ T6026] do_group_exit+0xd5/0x2a0 [ 53.761091][ T6026] get_signal+0x1ec7/0x21e0 [ 53.761112][ T6026] ? __pfx_get_signal+0x10/0x10 [ 53.761134][ T6026] arch_do_signal_or_restart+0x91/0x7e0 [ 53.761148][ T6026] ? __sys_accept4+0x1cb/0x200 [ 53.761159][ T6026] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.761176][ T6026] ? __pfx___sys_accept4+0x10/0x10 [ 53.761190][ T6026] exit_to_user_mode_loop+0x139/0x6f0 [ 53.761205][ T6026] ? rcu_is_watching+0x12/0xc0 [ 53.761223][ T6026] do_syscall_64+0x666/0x870 [ 53.761235][ T6026] ? clear_bhb_loop+0x40/0x90 [ 53.761248][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.761262][ T6026] RIP: 0033:0x7fa0c3f9df99 [ 53.761271][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.761281][ T6026] RSP: 002b:00007fa0c4e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 53.761292][ T6026] RAX: fffffffffffffe00 RBX: 00007fa0c4225fa0 RCX: 00007fa0c3f9df99 [ 53.761299][ T6026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.761305][ T6026] RBP: 00007fa0c4034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 53.761311][ T6026] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 53.761317][ T6026] R13: 00007fa0c4226038 R14: 00007fa0c4225fa0 R15: 00007fffb19f8bd8 [ 53.761330][ T6026] [ 53.761336][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.761348][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.761354][ C3] Call Trace: [ 53.761357][ C3] [ 53.761361][ C3] dump_stack_lvl+0x100/0x190 [ 53.761375][ C3] should_fail_ex.cold+0x5/0xa [ 53.761388][ C3] should_failslab+0xc2/0x120 [ 53.761402][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.761415][ C3] ? __alloc_skb+0x140/0x710 [ 53.761430][ C3] __alloc_skb+0x140/0x710 [ 53.761441][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.761452][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.761465][ C3] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.761481][ C3] alloc_skb_with_frags+0xdd/0x760 [ 53.761497][ C3] ? lock_acquire+0x1b9/0x370 [ 53.761511][ C3] sock_alloc_send_pskb+0x801/0x980 [ 53.761523][ C3] ? find_held_lock+0x2b/0x80 [ 53.761542][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.761555][ C3] ? dst_release+0x9a/0x330 [ 53.761566][ C3] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.761582][ C3] __ip6_append_data+0x272f/0x4bd0 [ 53.761598][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.761614][ C3] ? __pfx___ip6_append_data+0x10/0x10 [ 53.761627][ C3] ? __pfx_ip6_mtu+0x10/0x10 [ 53.761636][ C3] ? ip6_setup_cork+0x5be/0x14c0 [ 53.761650][ C3] ip6_append_data+0x10b/0x410 [ 53.761663][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.761675][ C3] icmp6_send+0x1681/0x3c60 [ 53.761686][ C3] ? kmem_cache_free+0x127/0x6b0 [ 53.761698][ C3] ? run_timer_base+0x114/0x190 [ 53.761714][ C3] ? __pfx_icmp6_send+0x10/0x10 [ 53.761724][ C3] ? handle_mm_fault+0x37b/0xa30 [ 53.761739][ C3] ? do_user_addr_fault+0x591/0x12f0 [ 53.761755][ C3] ? exc_page_fault+0x6f/0xd0 [ 53.761765][ C3] ? asm_exc_page_fault+0x4/0x30 [ 53.761796][ C3] ? __lock_acquire+0x49f/0x1a40 [ 53.761816][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.761829][ C3] ? ip6_link_failure+0x31/0x580 [ 53.761840][ C3] ip6_link_failure+0x31/0x580 [ 53.761850][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.761862][ C3] ndisc_error_report+0xd2/0x1b0 [ 53.761880][ C3] neigh_invalidate+0x224/0x580 [ 53.761895][ C3] neigh_timer_handler+0xb06/0x1230 [ 53.761913][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.761928][ C3] call_timer_fn+0x19a/0x610 [ 53.761940][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.761954][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.761969][ C3] ? mark_held_locks+0x40/0x70 [ 53.761983][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.761998][ C3] __run_timers+0x757/0xb00 [ 53.762013][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.762031][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.762049][ C3] run_timer_base+0x114/0x190 [ 53.762062][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.762076][ C3] run_timer_softirq+0x1a/0x50 [ 53.762088][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.762104][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.762118][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.762134][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.762146][ C3] __irq_exit_rcu+0x162/0x210 [ 53.762159][ C3] irq_exit_rcu+0x9/0x30 [ 53.762172][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.762185][ C3] [ 53.762188][ C3] [ 53.762192][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.762204][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.762220][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.762230][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.762238][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.762245][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.762251][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.762257][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.762263][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.762273][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.762290][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.762307][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.762326][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.762342][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.762356][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.762369][ C3] console_unlock+0x103/0x260 [ 53.762375][ C2] FAULT_INJECTION: forcing a failure. [ 53.762375][ C2] name failslab, interval 1, probability 100, space 0, times 18 [ 53.762385][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.762401][ C3] ? lock_acquire+0x101/0x370 [ 53.762416][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.762433][ C3] vprintk_emit+0x407/0x6b0 [ 53.762450][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.762470][ C3] _printk+0xcf/0x110 [ 53.762480][ C3] ? __pfx__printk+0x10/0x10 [ 53.762493][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.762507][ C3] should_fail_ex+0x4e4/0x640 [ 53.762522][ C3] should_failslab+0xc2/0x120 [ 53.762536][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.762548][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.762564][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.762582][ C3] ptlock_alloc+0x1f/0x70 [ 53.762598][ C3] pte_alloc_one+0x82/0x3d0 [ 53.762610][ C3] do_fault+0x86c/0x1750 [ 53.762626][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.762645][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.762659][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.762678][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.762697][ C3] ? __pfx__printk+0x10/0x10 [ 53.762711][ C3] handle_mm_fault+0x37b/0xa30 [ 53.762730][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.762750][ C3] exc_page_fault+0x6f/0xd0 [ 53.762761][ C3] asm_exc_page_fault+0x26/0x30 [ 53.762772][ C3] RIP: 0033:0x7f1726472836 [ 53.762780][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.762790][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.762797][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.762803][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.762810][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.762816][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.762822][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.762829][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.762842][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.762859][ C3] [ 53.762867][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.762885][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.762893][ T5137] Call Trace: [ 53.762899][ T5137] [ 53.762904][ T5137] dump_stack_lvl+0x100/0x190 [ 53.762925][ T5137] should_fail_ex.cold+0x5/0xa [ 53.762943][ T5137] should_failslab+0xc2/0x120 [ 53.762950][ C3] FAULT_INJECTION: forcing a failure. [ 53.762950][ C3] name failslab, interval 1, probability 100, space 0, times 17 [ 53.762964][ T5137] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.762983][ T5137] ? sock_alloc_inode+0x26/0x2c0 [ 53.763005][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.763027][ T5137] sock_alloc_inode+0x26/0x2c0 [ 53.763048][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.763069][ T5137] alloc_inode+0x68/0x250 [ 53.763091][ T5137] sock_alloc+0x44/0x280 [ 53.763109][ T5137] ? security_socket_create+0x7f/0x250 [ 53.763131][ T5137] __sock_create+0xc2/0x860 [ 53.763158][ T5137] __sys_socket+0x14d/0x260 [ 53.763174][ T5137] ? __pfx___sys_socket+0x10/0x10 [ 53.763194][ T5137] __x64_sys_socket+0x72/0xb0 [ 53.763208][ T5137] ? lockdep_hardirqs_on+0x78/0x100 [ 53.763233][ T5137] do_syscall_64+0x115/0x870 [ 53.763249][ T5137] ? clear_bhb_loop+0x40/0x90 [ 53.763268][ T5137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.763283][ T5137] RIP: 0033:0x7f89f2818707 [ 53.763296][ T5137] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.763309][ T5137] RSP: 002b:00007fff54558908 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.763323][ T5137] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89f2818707 [ 53.763333][ T5137] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.763341][ T5137] RBP: 00007f89f28a4560 R08: 0000000000000073 R09: 0000000000000001 [ 53.763350][ T5137] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.763359][ T5137] R13: 00007fff54558a30 R14: 0000000000000038 R15: 00007fff54558a30 [ 53.763380][ T5137] [ 53.763386][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.763399][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.763404][ C3] Call Trace: [ 53.763408][ C3] [ 53.763405][ T5137] FAULT_INJECTION: forcing a failure. [ 53.763405][ T5137] name failslab, interval 1, probability 100, space 0, times 16 [ 53.763411][ C3] dump_stack_lvl+0x100/0x190 [ 53.763425][ C3] should_fail_ex.cold+0x5/0xa [ 53.763438][ C3] should_failslab+0xc2/0x120 [ 53.763452][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.763465][ C3] ? __alloc_skb+0x140/0x710 [ 53.763480][ C3] __alloc_skb+0x140/0x710 [ 53.763491][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.763502][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.763518][ C3] __neigh_notify+0xe6/0x350 [ 53.763554][ C3] neigh_timer_handler+0xb17/0x1230 [ 53.763571][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.763586][ C3] call_timer_fn+0x19a/0x610 [ 53.763598][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.763612][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.763627][ C3] ? mark_held_locks+0x40/0x70 [ 53.763642][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.763657][ C3] __run_timers+0x757/0xb00 [ 53.763672][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.763690][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.763708][ C3] run_timer_base+0x114/0x190 [ 53.763720][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.763735][ C3] run_timer_softirq+0x1a/0x50 [ 53.763747][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.763762][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.763776][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.763792][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.763804][ C3] __irq_exit_rcu+0x162/0x210 [ 53.763817][ C3] irq_exit_rcu+0x9/0x30 [ 53.763831][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.763842][ C3] [ 53.763846][ C3] [ 53.763850][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.763861][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.763882][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.763892][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.763900][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.763907][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.763913][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.763919][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.763925][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.763935][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.763951][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.763969][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.763987][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.764003][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.764017][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.764030][ C3] console_unlock+0x103/0x260 [ 53.764046][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.764062][ C3] ? lock_acquire+0x101/0x370 [ 53.764077][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.764094][ C3] vprintk_emit+0x407/0x6b0 [ 53.764111][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.764130][ C3] _printk+0xcf/0x110 [ 53.764141][ C3] ? __pfx__printk+0x10/0x10 [ 53.764153][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.764167][ C3] should_fail_ex+0x4e4/0x640 [ 53.764183][ C3] should_failslab+0xc2/0x120 [ 53.764197][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.764209][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.764225][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.764243][ C3] ptlock_alloc+0x1f/0x70 [ 53.764259][ C3] pte_alloc_one+0x82/0x3d0 [ 53.764271][ C3] do_fault+0x86c/0x1750 [ 53.764287][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.764306][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.764320][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.764338][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.764358][ C3] ? __pfx__printk+0x10/0x10 [ 53.764371][ C3] handle_mm_fault+0x37b/0xa30 [ 53.764390][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.764410][ C3] exc_page_fault+0x6f/0xd0 [ 53.764421][ C3] asm_exc_page_fault+0x26/0x30 [ 53.764432][ C3] RIP: 0033:0x7f1726472836 [ 53.764440][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.764449][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.764457][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.764463][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.764478][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.764484][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.764491][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.764498][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.764511][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.764528][ C3] [ 53.764536][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.764568][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.764576][ T5137] Call Trace: [ 53.764582][ T5137] [ 53.764588][ T5137] dump_stack_lvl+0x100/0x190 [ 53.764597][ C3] FAULT_INJECTION: forcing a failure. [ 53.764597][ C3] name failslab, interval 1, probability 100, space 0, times 15 [ 53.764608][ T5137] should_fail_ex.cold+0x5/0xa [ 53.764628][ T5137] should_failslab+0xc2/0x120 [ 53.764647][ T5137] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.764666][ T5137] ? sock_alloc_inode+0x26/0x2c0 [ 53.764690][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.764713][ T5137] sock_alloc_inode+0x26/0x2c0 [ 53.764734][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.764755][ T5137] alloc_inode+0x68/0x250 [ 53.764778][ T5137] sock_alloc+0x44/0x280 [ 53.764796][ T5137] ? security_socket_create+0x7f/0x250 [ 53.764818][ T5137] __sock_create+0xc2/0x860 [ 53.764846][ T5137] __sys_socket+0x14d/0x260 [ 53.764862][ T5137] ? __pfx___sys_socket+0x10/0x10 [ 53.764883][ T5137] __x64_sys_socket+0x72/0xb0 [ 53.764897][ T5137] ? lockdep_hardirqs_on+0x78/0x100 [ 53.764914][ T5137] do_syscall_64+0x115/0x870 [ 53.764929][ T5137] ? clear_bhb_loop+0x40/0x90 [ 53.764949][ T5137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.764964][ T5137] RIP: 0033:0x7f89f2818707 [ 53.764976][ T5137] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.764990][ T5137] RSP: 002b:00007fff54558908 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.765005][ T5137] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89f2818707 [ 53.765014][ T5137] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.765024][ T5137] RBP: 00007f89f28a4560 R08: 0000000000000073 R09: 0000000000000001 [ 53.765033][ T5137] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.765042][ T5137] R13: 00007fff54558a30 R14: 0000000000000033 R15: 00007fff54558a30 [ 53.765062][ T5137] [ 53.765072][ C2] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.765095][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.765105][ C2] Call Trace: [ 53.765112][ C2] [ 53.765117][ T5137] FAULT_INJECTION: forcing a failure. [ 53.765117][ T5137] name failslab, interval 1, probability 100, space 0, times 14 [ 53.765119][ C2] dump_stack_lvl+0x100/0x190 [ 53.765144][ C2] should_fail_ex.cold+0x5/0xa [ 53.765167][ C2] should_failslab+0xc2/0x120 [ 53.765191][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.765214][ C2] ? __alloc_skb+0x140/0x710 [ 53.765239][ C2] __alloc_skb+0x140/0x710 [ 53.765258][ C2] ? __alloc_skb+0x5b7/0x710 [ 53.765279][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 53.765301][ C2] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.765330][ C2] alloc_skb_with_frags+0xdd/0x760 [ 53.765358][ C2] ? lock_acquire+0x1b9/0x370 [ 53.765382][ C2] sock_alloc_send_pskb+0x801/0x980 [ 53.765404][ C2] ? find_held_lock+0x2b/0x80 [ 53.765451][ C2] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.765473][ C2] ? dst_release+0x9a/0x330 [ 53.765494][ C2] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.765524][ C2] __ip6_append_data+0x272f/0x4bd0 [ 53.765552][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.765581][ C2] ? __pfx___ip6_append_data+0x10/0x10 [ 53.765604][ C2] ? __pfx_ip6_mtu+0x10/0x10 [ 53.765620][ C2] ? ip6_setup_cork+0x5be/0x14c0 [ 53.765646][ C2] ip6_append_data+0x10b/0x410 [ 53.765668][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.765690][ C2] icmp6_send+0x1681/0x3c60 [ 53.765727][ C2] ? __pfx_icmp6_send+0x10/0x10 [ 53.765758][ C2] ? find_held_lock+0x2b/0x80 [ 53.765783][ C2] ? debug_object_activate+0x343/0x4b0 [ 53.765808][ C2] ? debug_object_activate+0x343/0x4b0 [ 53.765842][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.765863][ C2] ? ip6_link_failure+0x31/0x580 [ 53.765881][ C2] ip6_link_failure+0x31/0x580 [ 53.765899][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.765920][ C2] ndisc_error_report+0xd2/0x1b0 [ 53.765944][ C2] neigh_invalidate+0x224/0x580 [ 53.765972][ C2] neigh_timer_handler+0xb06/0x1230 [ 53.765998][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.766014][ C2] call_timer_fn+0x19a/0x610 [ 53.766027][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 53.766041][ C2] ? __run_timers+0x747/0xb00 [ 53.766054][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.766072][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.766087][ C2] __run_timers+0x757/0xb00 [ 53.766102][ C2] ? __pfx___run_timers+0x10/0x10 [ 53.766120][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 53.766138][ C2] run_timer_base+0x114/0x190 [ 53.766151][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 53.766166][ C2] run_timer_softirq+0x1a/0x50 [ 53.766178][ C2] handle_softirqs+0x1ea/0x9b0 [ 53.766194][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 53.766209][ C2] ? _raw_spin_unlock+0x28/0x50 [ 53.766225][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.766237][ C2] __irq_exit_rcu+0x162/0x210 [ 53.766251][ C2] irq_exit_rcu+0x9/0x30 [ 53.766264][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.766276][ C2] [ 53.766280][ C2] [ 53.766284][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.766296][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 53.766314][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 53.766325][ C2] RSP: 0018:ffffc90004ccfad0 EFLAGS: 00000293 [ 53.766334][ C2] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e8b23a [ 53.766340][ C2] RDX: ffff88802602ca80 RSI: ffffffff81e8b244 RDI: ffff88802602ca80 [ 53.766347][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.766353][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000999f5c [ 53.766360][ C2] R13: 0000000000000200 R14: ffff88802b5fa540 R15: ffffc90004ccfb98 [ 53.766370][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.766385][ C2] ? vprintk_emit+0x674/0x6b0 [ 53.766404][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.766424][ C2] _printk+0xcf/0x110 [ 53.766434][ C2] ? __pfx__printk+0x10/0x10 [ 53.766447][ C2] ? __pfx____ratelimit+0x10/0x10 [ 53.766461][ C2] should_fail_ex+0x4e4/0x640 [ 53.766478][ C2] should_failslab+0xc2/0x120 [ 53.766492][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.766504][ C2] ? __pfx_acct_collect+0x10/0x10 [ 53.766516][ C2] ? taskstats_exit+0x6d3/0xca0 [ 53.766531][ C2] taskstats_exit+0x6d3/0xca0 [ 53.766543][ C2] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.766557][ C2] ? __pfx_taskstats_exit+0x10/0x10 [ 53.766571][ C2] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.766583][ C2] do_exit+0x65c/0x2ae0 [ 53.766600][ C2] ? signal_wake_up_state+0x8d/0x130 [ 53.766612][ C2] ? __pfx_do_exit+0x10/0x10 [ 53.766628][ C2] ? do_group_exit+0x1bd/0x2a0 [ 53.766638][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.766656][ C2] do_group_exit+0xd5/0x2a0 [ 53.766667][ C2] __x64_sys_exit_group+0x3e/0x50 [ 53.766677][ C2] x64_sys_call+0x102c/0x1530 [ 53.766693][ C2] do_syscall_64+0x115/0x870 [ 53.766704][ C2] ? clear_bhb_loop+0x40/0x90 [ 53.766717][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.766734][ C2] RIP: 0033:0x7fa0c3f9df99 [ 53.766743][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.766754][ C2] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.766763][ C2] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.766770][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.766776][ C2] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.766783][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.766789][ C2] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.766802][ C2] [ 53.766810][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.766828][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.766837][ T5137] Call Trace: [ 53.766843][ T5137] [ 53.766848][ T5137] dump_stack_lvl+0x100/0x190 [ 53.766868][ T5137] should_fail_ex.cold+0x5/0xa [ 53.766874][ C2] FAULT_INJECTION: forcing a failure. [ 53.766874][ C2] name failslab, interval 1, probability 100, space 0, times 13 [ 53.766888][ T5137] should_failslab+0xc2/0x120 [ 53.766907][ T5137] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.766927][ T5137] ? sock_alloc_inode+0x26/0x2c0 [ 53.766949][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.766972][ T5137] sock_alloc_inode+0x26/0x2c0 [ 53.766993][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.767014][ T5137] alloc_inode+0x68/0x250 [ 53.767036][ T5137] sock_alloc+0x44/0x280 [ 53.767054][ T5137] ? security_socket_create+0x7f/0x250 [ 53.767075][ T5137] __sock_create+0xc2/0x860 [ 53.767103][ T5137] __sys_socket+0x14d/0x260 [ 53.767118][ T5137] ? __pfx___sys_socket+0x10/0x10 [ 53.767139][ T5137] __x64_sys_socket+0x72/0xb0 [ 53.767153][ T5137] ? lockdep_hardirqs_on+0x78/0x100 [ 53.767170][ T5137] do_syscall_64+0x115/0x870 [ 53.767187][ T5137] ? clear_bhb_loop+0x40/0x90 [ 53.767206][ T5137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.767227][ T5137] RIP: 0033:0x7f89f2818707 [ 53.767239][ T5137] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.767253][ T5137] RSP: 002b:00007fff54558908 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.767268][ T5137] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89f2818707 [ 53.767277][ T5137] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.767287][ T5137] RBP: 00007f89f28a4560 R08: 0000000000000073 R09: 0000000000000001 [ 53.767296][ T5137] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.767305][ T5137] R13: 00007fff54558a30 R14: 0000000000000039 R15: 00007fff54558a30 [ 53.767326][ T5137] [ 53.767333][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.767346][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.767343][ T5137] FAULT_INJECTION: forcing a failure. [ 53.767343][ T5137] name failslab, interval 1, probability 100, space 0, times 12 [ 53.767352][ C3] Call Trace: [ 53.767356][ C3] [ 53.767360][ C3] dump_stack_lvl+0x100/0x190 [ 53.767374][ C3] should_fail_ex.cold+0x5/0xa [ 53.767387][ C3] should_failslab+0xc2/0x120 [ 53.767401][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.767415][ C3] ? __alloc_skb+0x140/0x710 [ 53.767429][ C3] __alloc_skb+0x140/0x710 [ 53.767441][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.767452][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.767465][ C3] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.767482][ C3] alloc_skb_with_frags+0xdd/0x760 [ 53.767498][ C3] ? lock_acquire+0x1b9/0x370 [ 53.767512][ C3] sock_alloc_send_pskb+0x801/0x980 [ 53.767544][ C3] ? find_held_lock+0x2b/0x80 [ 53.767563][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.767577][ C3] ? dst_release+0x9a/0x330 [ 53.767588][ C3] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.767605][ C3] __ip6_append_data+0x272f/0x4bd0 [ 53.767621][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.767637][ C3] ? __pfx___ip6_append_data+0x10/0x10 [ 53.767650][ C3] ? __pfx_ip6_mtu+0x10/0x10 [ 53.767660][ C3] ? ip6_setup_cork+0x5be/0x14c0 [ 53.767674][ C3] ip6_append_data+0x10b/0x410 [ 53.767687][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.767699][ C3] icmp6_send+0x1681/0x3c60 [ 53.767717][ C3] ? __pfx_icmp6_send+0x10/0x10 [ 53.767729][ C3] ? register_lock_class+0x3f0/0x560 [ 53.767746][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.767757][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 53.767769][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.767785][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.767797][ C3] ? ip6_link_failure+0x31/0x580 [ 53.767809][ C3] ip6_link_failure+0x31/0x580 [ 53.767819][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.767831][ C3] ndisc_error_report+0xd2/0x1b0 [ 53.767845][ C3] neigh_invalidate+0x224/0x580 [ 53.767861][ C3] neigh_timer_handler+0xb06/0x1230 [ 53.767883][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.767898][ C3] call_timer_fn+0x19a/0x610 [ 53.767910][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.767925][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.767939][ C3] ? mark_held_locks+0x40/0x70 [ 53.767954][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.767969][ C3] __run_timers+0x757/0xb00 [ 53.767984][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.768002][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.768020][ C3] run_timer_base+0x114/0x190 [ 53.768033][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.768047][ C3] run_timer_softirq+0x1a/0x50 [ 53.768059][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.768075][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.768089][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.768105][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.768118][ C3] __irq_exit_rcu+0x162/0x210 [ 53.768131][ C3] irq_exit_rcu+0x9/0x30 [ 53.768145][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.768156][ C3] [ 53.768160][ C3] [ 53.768164][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.768176][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.768194][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.768204][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.768212][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.768219][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.768226][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.768233][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.768239][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.768249][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.768265][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.768283][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.768302][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.768318][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.768333][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.768346][ C3] console_unlock+0x103/0x260 [ 53.768362][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.768378][ C3] ? lock_acquire+0x101/0x370 [ 53.768393][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.768410][ C3] vprintk_emit+0x407/0x6b0 [ 53.768427][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.768447][ C3] _printk+0xcf/0x110 [ 53.768457][ C3] ? __pfx__printk+0x10/0x10 [ 53.768470][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.768484][ C3] should_fail_ex+0x4e4/0x640 [ 53.768500][ C3] should_failslab+0xc2/0x120 [ 53.768514][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.768526][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.768543][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.768562][ C3] ptlock_alloc+0x1f/0x70 [ 53.768578][ C3] pte_alloc_one+0x82/0x3d0 [ 53.768589][ C3] do_fault+0x86c/0x1750 [ 53.768606][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.768625][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.768639][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.768658][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.768678][ C3] ? __pfx__printk+0x10/0x10 [ 53.768691][ C3] handle_mm_fault+0x37b/0xa30 [ 53.768710][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.768730][ C3] exc_page_fault+0x6f/0xd0 [ 53.768742][ C3] asm_exc_page_fault+0x26/0x30 [ 53.768752][ C3] RIP: 0033:0x7f1726472836 [ 53.768761][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.768771][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.768778][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.768785][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.768792][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.768798][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.768805][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.768812][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.768826][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.768843][ C3] [ 53.768851][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.768870][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.768878][ T5137] Call Trace: [ 53.768884][ T5137] [ 53.768889][ T5137] dump_stack_lvl+0x100/0x190 [ 53.768909][ C3] FAULT_INJECTION: forcing a failure. [ 53.768909][ C3] name failslab, interval 1, probability 100, space 0, times 11 [ 53.768910][ T5137] should_fail_ex.cold+0x5/0xa [ 53.768929][ T5137] should_failslab+0xc2/0x120 [ 53.768950][ T5137] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.768970][ T5137] ? sock_alloc_inode+0x26/0x2c0 [ 53.768994][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.769017][ T5137] sock_alloc_inode+0x26/0x2c0 [ 53.769038][ T5137] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.769059][ T5137] alloc_inode+0x68/0x250 [ 53.769082][ T5137] sock_alloc+0x44/0x280 [ 53.769101][ T5137] ? security_socket_create+0x7f/0x250 [ 53.769123][ T5137] __sock_create+0xc2/0x860 [ 53.769150][ T5137] __sys_socket+0x14d/0x260 [ 53.769166][ T5137] ? __pfx___sys_socket+0x10/0x10 [ 53.769187][ T5137] __x64_sys_socket+0x72/0xb0 [ 53.769201][ T5137] ? lockdep_hardirqs_on+0x78/0x100 [ 53.769223][ T5137] do_syscall_64+0x115/0x870 [ 53.769239][ T5137] ? clear_bhb_loop+0x40/0x90 [ 53.769258][ T5137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.769274][ T5137] RIP: 0033:0x7f89f2818707 [ 53.769286][ T5137] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.769301][ T5137] RSP: 002b:00007fff54558908 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.769316][ T5137] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89f2818707 [ 53.769325][ T5137] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.769334][ T5137] RBP: 00007f89f28a4560 R08: 0000000000000073 R09: 0000000000000001 [ 53.769344][ T5137] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.769353][ T5137] R13: 00007fff54558a30 R14: 0000000000000031 R15: 00007fff54558a30 [ 53.769374][ T5137] [ 53.769402][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.769415][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.769421][ C3] Call Trace: [ 53.769424][ C3] [ 53.769428][ C3] dump_stack_lvl+0x100/0x190 [ 53.769432][ C1] FAULT_INJECTION: forcing a failure. [ 53.769432][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 53.769438][ C0] FAULT_INJECTION: forcing a failure. [ 53.769438][ C0] name failslab, interval 1, probability 100, space 0, times 10 [ 53.769442][ C3] should_fail_ex.cold+0x5/0xa [ 53.769455][ C3] should_failslab+0xc2/0x120 [ 53.769469][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.769483][ C3] ? __alloc_skb+0x140/0x710 [ 53.769497][ C3] __alloc_skb+0x140/0x710 [ 53.769509][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.769521][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.769533][ C3] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.769550][ C3] alloc_skb_with_frags+0xdd/0x760 [ 53.769566][ C3] ? lock_acquire+0x1b9/0x370 [ 53.769580][ C3] sock_alloc_send_pskb+0x801/0x980 [ 53.769593][ C3] ? find_held_lock+0x2b/0x80 [ 53.769611][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.769624][ C3] ? dst_release+0x9a/0x330 [ 53.769637][ C3] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.769653][ C3] __ip6_append_data+0x272f/0x4bd0 [ 53.769670][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.769685][ C3] ? __pfx___ip6_append_data+0x10/0x10 [ 53.769699][ C3] ? __pfx_ip6_mtu+0x10/0x10 [ 53.769709][ C3] ? ip6_setup_cork+0x5be/0x14c0 [ 53.769722][ C3] ip6_append_data+0x10b/0x410 [ 53.769735][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.769748][ C3] icmp6_send+0x1681/0x3c60 [ 53.769759][ C3] ? kmem_cache_free+0x127/0x6b0 [ 53.769771][ C3] ? run_timer_base+0x114/0x190 [ 53.769788][ C3] ? __pfx_icmp6_send+0x10/0x10 [ 53.769798][ C3] ? handle_mm_fault+0x37b/0xa30 [ 53.769814][ C3] ? do_user_addr_fault+0x591/0x12f0 [ 53.769829][ C3] ? exc_page_fault+0x6f/0xd0 [ 53.769840][ C3] ? asm_exc_page_fault+0x4/0x30 [ 53.769856][ C3] ? __lock_acquire+0x49f/0x1a40 [ 53.769878][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.769891][ C3] ? ip6_link_failure+0x31/0x580 [ 53.769902][ C3] ip6_link_failure+0x31/0x580 [ 53.769913][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.769925][ C3] ndisc_error_report+0xd2/0x1b0 [ 53.769938][ C3] neigh_invalidate+0x224/0x580 [ 53.769954][ C3] neigh_timer_handler+0xb06/0x1230 [ 53.769972][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.769987][ C3] call_timer_fn+0x19a/0x610 [ 53.769999][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.770022][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.770036][ C3] ? mark_held_locks+0x40/0x70 [ 53.770051][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.770065][ C3] __run_timers+0x757/0xb00 [ 53.770081][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.770099][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.770118][ C3] run_timer_base+0x114/0x190 [ 53.770130][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.770145][ C3] run_timer_softirq+0x1a/0x50 [ 53.770157][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.770173][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.770187][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.770203][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.770215][ C3] __irq_exit_rcu+0x162/0x210 [ 53.770229][ C3] irq_exit_rcu+0x9/0x30 [ 53.770243][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.770254][ C3] [ 53.770258][ C3] [ 53.770262][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.770274][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.770291][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.770301][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.770309][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.770316][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.770322][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.770329][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.770336][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.770346][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.770362][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.770380][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.770398][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.770415][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.770429][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.770441][ C3] console_unlock+0x103/0x260 [ 53.770457][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.770474][ C3] ? lock_acquire+0x101/0x370 [ 53.770488][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.770506][ C3] vprintk_emit+0x407/0x6b0 [ 53.770523][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.770543][ C3] _printk+0xcf/0x110 [ 53.770553][ C3] ? __pfx__printk+0x10/0x10 [ 53.770566][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.770580][ C3] should_fail_ex+0x4e4/0x640 [ 53.770596][ C3] should_failslab+0xc2/0x120 [ 53.770610][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.770622][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.770639][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.770657][ C3] ptlock_alloc+0x1f/0x70 [ 53.770674][ C3] pte_alloc_one+0x82/0x3d0 [ 53.770685][ C3] do_fault+0x86c/0x1750 [ 53.770701][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.770720][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.770734][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.770753][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.770772][ C3] ? __pfx__printk+0x10/0x10 [ 53.770786][ C3] handle_mm_fault+0x37b/0xa30 [ 53.770805][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.770825][ C3] exc_page_fault+0x6f/0xd0 [ 53.770836][ C3] asm_exc_page_fault+0x26/0x30 [ 53.770847][ C3] RIP: 0033:0x7f1726472836 [ 53.770855][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.770865][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.770873][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.770882][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.770889][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.770895][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.770902][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.770909][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.770922][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.770939][ C3] [ 53.770947][ C0] CPU: 0 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.770965][ C3] FAULT_INJECTION: forcing a failure. [ 53.770965][ C3] name failslab, interval 1, probability 100, space 0, times 9 [ 53.770967][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.770977][ C0] Call Trace: [ 53.770983][ C0] [ 53.770989][ C0] dump_stack_lvl+0x100/0x190 [ 53.771025][ C0] should_fail_ex.cold+0x5/0xa [ 53.771046][ C0] should_failslab+0xc2/0x120 [ 53.771067][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.771087][ C0] ? __alloc_skb+0x5b7/0x710 [ 53.771104][ C0] ? __alloc_skb+0x140/0x710 [ 53.771127][ C0] __alloc_skb+0x140/0x710 [ 53.771143][ C0] ? __alloc_skb+0x5b7/0x710 [ 53.771161][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 53.771180][ C0] ? lock_acquire+0x1b9/0x370 [ 53.771204][ C0] __netdev_alloc_skb+0x7a/0x960 [ 53.771230][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 53.771255][ C0] ? __lock_acquire+0x49f/0x1a40 [ 53.771277][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 53.771300][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 53.771327][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 53.771356][ C0] __iterate_interfaces+0x2e6/0x650 [ 53.771375][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 53.771398][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 53.771418][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 53.771441][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 53.771467][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 53.771492][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 53.771551][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 53.771580][ C0] handle_softirqs+0x1ea/0x9b0 [ 53.771606][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 53.771626][ C0] ? _raw_spin_unlock+0x28/0x50 [ 53.771651][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.771670][ C0] __irq_exit_rcu+0x162/0x210 [ 53.771691][ C0] irq_exit_rcu+0x9/0x30 [ 53.771710][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.771728][ C0] [ 53.771733][ C0] [ 53.771740][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.771758][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 53.771796][ C0] Code: 76 f1 5e 00 48 89 df 5b e9 bd 6c 64 00 be 03 00 00 00 5b e9 a2 cb 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 df 59 12 48 8b 34 24 65 48 8b 15 c1 df 59 [ 53.771811][ C0] RSP: 0018:ffffc90003dffc68 EFLAGS: 00000293 [ 53.771825][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174fcac [ 53.771836][ C0] RDX: ffff88802b5fa540 RSI: ffffffff8174fcb6 RDI: ffff88802b5fa540 [ 53.771847][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.771855][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000200 [ 53.771866][ C0] R13: ffffffff8d4eb500 R14: 0000000000000001 R15: 0000000000000000 [ 53.771882][ C0] ? dump_stack_lvl+0x16c/0x190 [ 53.771900][ C0] ? dump_stack_lvl+0x176/0x190 [ 53.771921][ C0] dump_stack_lvl+0x17c/0x190 [ 53.771940][ C0] should_fail_ex.cold+0x5/0xa [ 53.771961][ C0] should_failslab+0xc2/0x120 [ 53.771981][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.772002][ C0] ? sock_alloc_inode+0x26/0x2c0 [ 53.772026][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.772050][ C0] sock_alloc_inode+0x26/0x2c0 [ 53.772071][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.772093][ C0] alloc_inode+0x68/0x250 [ 53.772114][ C0] sock_alloc+0x44/0x280 [ 53.772134][ C0] ? security_socket_create+0x7f/0x250 [ 53.772156][ C0] __sock_create+0xc2/0x860 [ 53.772185][ C0] __sys_socket+0x14d/0x260 [ 53.772201][ C0] ? __pfx___sys_socket+0x10/0x10 [ 53.772228][ C0] __x64_sys_socket+0x72/0xb0 [ 53.772243][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 53.772261][ C0] do_syscall_64+0x115/0x870 [ 53.772278][ C0] ? clear_bhb_loop+0x40/0x90 [ 53.772298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.772315][ C0] RIP: 0033:0x7f89f2818707 [ 53.772329][ C0] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.772344][ C0] RSP: 002b:00007fff54558908 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.772358][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89f2818707 [ 53.772368][ C0] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.772378][ C0] RBP: 00007f89f28a4560 R08: 0000000000000073 R09: 0000000000000001 [ 53.772388][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.772398][ C0] R13: 00007fff54558a30 R14: 0000000000000031 R15: 00007fff54558a30 [ 53.772419][ C0] [ 53.772429][ C2] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.772443][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.772449][ C2] Call Trace: [ 53.772453][ C2] [ 53.772457][ C2] dump_stack_lvl+0x100/0x190 [ 53.772472][ C2] should_fail_ex.cold+0x5/0xa [ 53.772486][ C2] should_failslab+0xc2/0x120 [ 53.772495][ C0] FAULT_INJECTION: forcing a failure. [ 53.772495][ C0] name failslab, interval 1, probability 100, space 0, times 8 [ 53.772500][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.772514][ C2] ? __alloc_skb+0x140/0x710 [ 53.772529][ C2] __alloc_skb+0x140/0x710 [ 53.772541][ C2] ? __alloc_skb+0x5b7/0x710 [ 53.772553][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 53.772565][ C2] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.772582][ C2] alloc_skb_with_frags+0xdd/0x760 [ 53.772598][ C2] ? lock_acquire+0x1b9/0x370 [ 53.772612][ C2] sock_alloc_send_pskb+0x801/0x980 [ 53.772626][ C2] ? find_held_lock+0x2b/0x80 [ 53.772645][ C2] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.772658][ C2] ? dst_release+0x9a/0x330 [ 53.772670][ C2] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.772687][ C2] __ip6_append_data+0x272f/0x4bd0 [ 53.772703][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.772720][ C2] ? __pfx___ip6_append_data+0x10/0x10 [ 53.772737][ C2] ? __pfx_ip6_mtu+0x10/0x10 [ 53.772747][ C2] ? ip6_setup_cork+0x5be/0x14c0 [ 53.772761][ C2] ip6_append_data+0x10b/0x410 [ 53.772774][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.772787][ C2] icmp6_send+0x1681/0x3c60 [ 53.772800][ C2] ? kmem_cache_free+0x127/0x6b0 [ 53.772816][ C2] ? run_timer_base+0x114/0x190 [ 53.772840][ C2] ? __pfx_icmp6_send+0x10/0x10 [ 53.772854][ C2] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.772880][ C2] ? __lock_acquire+0x49f/0x1a40 [ 53.772899][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.772912][ C2] ? ip6_link_failure+0x31/0x580 [ 53.772923][ C2] ip6_link_failure+0x31/0x580 [ 53.772934][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.772946][ C2] ndisc_error_report+0xd2/0x1b0 [ 53.772960][ C2] neigh_invalidate+0x224/0x580 [ 53.772976][ C2] neigh_timer_handler+0xb06/0x1230 [ 53.772994][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.773010][ C2] call_timer_fn+0x19a/0x610 [ 53.773022][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 53.773036][ C2] ? __run_timers+0x747/0xb00 [ 53.773049][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.773067][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.773082][ C2] __run_timers+0x757/0xb00 [ 53.773097][ C2] ? __pfx___run_timers+0x10/0x10 [ 53.773115][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 53.773133][ C2] run_timer_base+0x114/0x190 [ 53.773145][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 53.773160][ C2] run_timer_softirq+0x1a/0x50 [ 53.773172][ C2] handle_softirqs+0x1ea/0x9b0 [ 53.773188][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 53.773202][ C2] ? _raw_spin_unlock+0x28/0x50 [ 53.773218][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.773232][ C2] __irq_exit_rcu+0x162/0x210 [ 53.773246][ C2] irq_exit_rcu+0x9/0x30 [ 53.773260][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.773272][ C2] [ 53.773275][ C2] [ 53.773279][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.773291][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 53.773309][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 53.773319][ C2] RSP: 0018:ffffc90004ccfad0 EFLAGS: 00000293 [ 53.773328][ C2] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e8b23a [ 53.773334][ C2] RDX: ffff88802602ca80 RSI: ffffffff81e8b244 RDI: ffff88802602ca80 [ 53.773341][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.773347][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000999f5c [ 53.773353][ C2] R13: 0000000000000200 R14: ffff88802b5fa540 R15: ffffc90004ccfb98 [ 53.773363][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.773379][ C2] ? vprintk_emit+0x674/0x6b0 [ 53.773398][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.773418][ C2] _printk+0xcf/0x110 [ 53.773429][ C2] ? __pfx__printk+0x10/0x10 [ 53.773442][ C2] ? __pfx____ratelimit+0x10/0x10 [ 53.773456][ C2] should_fail_ex+0x4e4/0x640 [ 53.773473][ C2] should_failslab+0xc2/0x120 [ 53.773486][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.773499][ C2] ? __pfx_acct_collect+0x10/0x10 [ 53.773510][ C2] ? taskstats_exit+0x6d3/0xca0 [ 53.773525][ C2] taskstats_exit+0x6d3/0xca0 [ 53.773537][ C2] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.773550][ C2] ? __pfx_taskstats_exit+0x10/0x10 [ 53.773564][ C2] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.773582][ C2] do_exit+0x65c/0x2ae0 [ 53.773607][ C2] ? signal_wake_up_state+0x8d/0x130 [ 53.773627][ C2] ? __pfx_do_exit+0x10/0x10 [ 53.773652][ C2] ? do_group_exit+0x1bd/0x2a0 [ 53.773670][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.773692][ C2] do_group_exit+0xd5/0x2a0 [ 53.773704][ C2] __x64_sys_exit_group+0x3e/0x50 [ 53.773714][ C2] x64_sys_call+0x102c/0x1530 [ 53.773734][ C2] do_syscall_64+0x115/0x870 [ 53.773746][ C2] ? clear_bhb_loop+0x40/0x90 [ 53.773759][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.773770][ C2] RIP: 0033:0x7fa0c3f9df99 [ 53.773779][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.773789][ C2] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.773799][ C2] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.773806][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.773813][ C2] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.773819][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.773825][ C2] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.773838][ C2] [ 53.773845][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.773860][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.773866][ C3] Call Trace: [ 53.773871][ C3] [ 53.773873][ C2] FAULT_INJECTION: forcing a failure. [ 53.773873][ C2] name failslab, interval 1, probability 100, space 0, times 7 [ 53.773878][ C3] dump_stack_lvl+0x100/0x190 [ 53.773892][ C3] should_fail_ex.cold+0x5/0xa [ 53.773906][ C3] should_failslab+0xc2/0x120 [ 53.773920][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.773934][ C3] ? __alloc_skb+0x140/0x710 [ 53.773948][ C3] __alloc_skb+0x140/0x710 [ 53.773959][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.773971][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.773987][ C3] __neigh_notify+0xe6/0x350 [ 53.774002][ C3] neigh_timer_handler+0xb17/0x1230 [ 53.774020][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.774035][ C3] call_timer_fn+0x19a/0x610 [ 53.774048][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.774062][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.774077][ C3] ? mark_held_locks+0x40/0x70 [ 53.774091][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.774106][ C3] __run_timers+0x757/0xb00 [ 53.774121][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.774139][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.774157][ C3] run_timer_base+0x114/0x190 [ 53.774170][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.774184][ C3] run_timer_softirq+0x1a/0x50 [ 53.774196][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.774212][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.774226][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.774242][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.774254][ C3] __irq_exit_rcu+0x162/0x210 [ 53.774269][ C3] irq_exit_rcu+0x9/0x30 [ 53.774282][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.774294][ C3] [ 53.774298][ C3] [ 53.774301][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.774314][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.774331][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.774342][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.774350][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.774357][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.774364][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.774370][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.774377][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.774387][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.774403][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.774421][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.774439][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.774456][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.774470][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.774483][ C3] console_unlock+0x103/0x260 [ 53.774499][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.774515][ C3] ? lock_acquire+0x101/0x370 [ 53.774530][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.774548][ C3] vprintk_emit+0x407/0x6b0 [ 53.774564][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.774584][ C3] _printk+0xcf/0x110 [ 53.774595][ C3] ? __pfx__printk+0x10/0x10 [ 53.774607][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.774621][ C3] should_fail_ex+0x4e4/0x640 [ 53.774637][ C3] should_failslab+0xc2/0x120 [ 53.774651][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.774663][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.774680][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.774698][ C3] ptlock_alloc+0x1f/0x70 [ 53.774715][ C3] pte_alloc_one+0x82/0x3d0 [ 53.774727][ C3] do_fault+0x86c/0x1750 [ 53.774743][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.774762][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.774776][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.774795][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.774815][ C3] ? __pfx__printk+0x10/0x10 [ 53.774829][ C3] handle_mm_fault+0x37b/0xa30 [ 53.774848][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.774868][ C3] exc_page_fault+0x6f/0xd0 [ 53.774883][ C3] asm_exc_page_fault+0x26/0x30 [ 53.774894][ C3] RIP: 0033:0x7f1726472836 [ 53.774902][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.774912][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.774920][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.774927][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.774933][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.774940][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.774947][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.774954][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.774967][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.774984][ C3] [ 53.774990][ C2] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.775002][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.775009][ C2] Call Trace: [ 53.775012][ C2] [ 53.775016][ C2] dump_stack_lvl+0x100/0x190 [ 53.775029][ C2] should_fail_ex.cold+0x5/0xa [ 53.775039][ C3] FAULT_INJECTION: forcing a failure. [ 53.775039][ C3] name failslab, interval 1, probability 100, space 0, times 6 [ 53.775042][ C2] should_failslab+0xc2/0x120 [ 53.775056][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.775071][ C2] ? __alloc_skb+0x140/0x710 [ 53.775085][ C2] __alloc_skb+0x140/0x710 [ 53.775097][ C2] ? __alloc_skb+0x5b7/0x710 [ 53.775108][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 53.775124][ C2] __neigh_notify+0xe6/0x350 [ 53.775140][ C2] neigh_timer_handler+0xb17/0x1230 [ 53.775157][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.775172][ C2] call_timer_fn+0x19a/0x610 [ 53.775185][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 53.775199][ C2] ? __run_timers+0x747/0xb00 [ 53.775211][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.775229][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.775244][ C2] __run_timers+0x757/0xb00 [ 53.775259][ C2] ? __pfx___run_timers+0x10/0x10 [ 53.775277][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 53.775295][ C2] run_timer_base+0x114/0x190 [ 53.775308][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 53.775322][ C2] run_timer_softirq+0x1a/0x50 [ 53.775334][ C2] handle_softirqs+0x1ea/0x9b0 [ 53.775350][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 53.775364][ C2] ? _raw_spin_unlock+0x28/0x50 [ 53.775380][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.775392][ C2] __irq_exit_rcu+0x162/0x210 [ 53.775419][ C2] irq_exit_rcu+0x9/0x30 [ 53.775432][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.775444][ C2] [ 53.775447][ C2] [ 53.775451][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.775463][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 53.775480][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 53.775490][ C2] RSP: 0018:ffffc90004ccfad0 EFLAGS: 00000293 [ 53.775498][ C2] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e8b23a [ 53.775504][ C2] RDX: ffff88802602ca80 RSI: ffffffff81e8b244 RDI: ffff88802602ca80 [ 53.775511][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.775517][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000999f5c [ 53.775542][ C2] R13: 0000000000000200 R14: ffff88802b5fa540 R15: ffffc90004ccfb98 [ 53.775553][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.775569][ C2] ? vprintk_emit+0x674/0x6b0 [ 53.775588][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.775607][ C2] _printk+0xcf/0x110 [ 53.775618][ C2] ? __pfx__printk+0x10/0x10 [ 53.775630][ C2] ? __pfx____ratelimit+0x10/0x10 [ 53.775644][ C2] should_fail_ex+0x4e4/0x640 [ 53.775660][ C2] should_failslab+0xc2/0x120 [ 53.775674][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.775687][ C2] ? __pfx_acct_collect+0x10/0x10 [ 53.775698][ C2] ? taskstats_exit+0x6d3/0xca0 [ 53.775712][ C2] taskstats_exit+0x6d3/0xca0 [ 53.775728][ C2] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.775742][ C2] ? __pfx_taskstats_exit+0x10/0x10 [ 53.775756][ C2] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.775768][ C2] do_exit+0x65c/0x2ae0 [ 53.775785][ C2] ? signal_wake_up_state+0x8d/0x130 [ 53.775797][ C2] ? __pfx_do_exit+0x10/0x10 [ 53.775813][ C2] ? do_group_exit+0x1bd/0x2a0 [ 53.775823][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.775841][ C2] do_group_exit+0xd5/0x2a0 [ 53.775852][ C2] __x64_sys_exit_group+0x3e/0x50 [ 53.775862][ C2] x64_sys_call+0x102c/0x1530 [ 53.775877][ C2] do_syscall_64+0x115/0x870 [ 53.775889][ C2] ? clear_bhb_loop+0x40/0x90 [ 53.775901][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.775913][ C2] RIP: 0033:0x7fa0c3f9df99 [ 53.775921][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.775932][ C2] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.775942][ C2] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.775949][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.775955][ C2] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.775962][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.775968][ C2] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.775981][ C2] [ 53.775989][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 53.776003][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.776010][ C1] Call Trace: [ 53.776014][ C1] [ 53.776019][ C1] dump_stack_lvl+0x100/0x190 [ 53.776028][ C2] FAULT_INJECTION: forcing a failure. [ 53.776028][ C2] name failslab, interval 1, probability 100, space 0, times 5 [ 53.776035][ C1] should_fail_ex.cold+0x5/0xa [ 53.776048][ C1] should_failslab+0xc2/0x120 [ 53.776063][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.776077][ C1] ? kmalloc_reserve+0x21b/0x350 [ 53.776096][ C1] kmalloc_reserve+0x21b/0x350 [ 53.776113][ C1] __alloc_skb+0x185/0x710 [ 53.776125][ C1] ? __alloc_skb+0x5b7/0x710 [ 53.776137][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 53.776150][ C1] ? lock_acquire+0x1b9/0x370 [ 53.776165][ C1] __netdev_alloc_skb+0x7a/0x960 [ 53.776179][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 53.776196][ C1] ? __lock_acquire+0x49f/0x1a40 [ 53.776211][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 53.776226][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 53.776243][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 53.776272][ C1] __iterate_interfaces+0x2e6/0x650 [ 53.776293][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 53.776320][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 53.776342][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 53.776366][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 53.776394][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 53.776421][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 53.776456][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 53.776482][ C1] handle_softirqs+0x1ea/0x9b0 [ 53.776510][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 53.776533][ C1] ? _raw_spin_unlock+0x28/0x50 [ 53.776561][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.776582][ C1] __irq_exit_rcu+0x162/0x210 [ 53.776599][ C1] irq_exit_rcu+0x9/0x30 [ 53.776613][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.776624][ C1] [ 53.776628][ C1] [ 53.776632][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.776644][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 53.776657][ C1] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 53.776668][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000202 [ 53.776677][ C1] RAX: 000000000005d9d3 RBX: ffff88801eaea540 RCX: ffffffff8bbb22d5 [ 53.776684][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 53.776691][ C1] RBP: ffffed1003d5d4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 53.776698][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 53.776705][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 53.776714][ C1] ? ct_kernel_exit+0x125/0x180 [ 53.776729][ C1] default_idle+0x9/0x10 [ 53.776742][ C1] default_idle_call+0x6c/0xb0 [ 53.776761][ C1] do_idle+0x3a7/0x5b0 [ 53.776776][ C1] ? __pfx_do_idle+0x10/0x10 [ 53.776791][ C1] ? rcu_is_watching+0x12/0xc0 [ 53.776807][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.776818][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 53.776832][ C1] cpu_startup_entry+0x4f/0x60 [ 53.776848][ C1] start_secondary+0x21d/0x2d0 [ 53.776873][ C1] ? __pfx_start_secondary+0x10/0x10 [ 53.776889][ C1] common_startup_64+0x13e/0x158 [ 53.776913][ C1] [ 53.776918][ C2] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.776930][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.776936][ C2] Call Trace: [ 53.776940][ C2] [ 53.776944][ C2] dump_stack_lvl+0x100/0x190 [ 53.776957][ C2] should_fail_ex.cold+0x5/0xa [ 53.776970][ C2] should_failslab+0xc2/0x120 [ 53.776984][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.776998][ C2] ? __alloc_skb+0x140/0x710 [ 53.777012][ C2] __alloc_skb+0x140/0x710 [ 53.777023][ C2] ? __alloc_skb+0x5b7/0x710 [ 53.777035][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 53.777048][ C2] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.777064][ C2] alloc_skb_with_frags+0xdd/0x760 [ 53.777080][ C2] ? lock_acquire+0x1b9/0x370 [ 53.777094][ C2] sock_alloc_send_pskb+0x801/0x980 [ 53.777108][ C2] ? find_held_lock+0x2b/0x80 [ 53.777126][ C2] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.777139][ C2] ? dst_release+0x9a/0x330 [ 53.777151][ C2] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.777168][ C2] __ip6_append_data+0x272f/0x4bd0 [ 53.777184][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.777200][ C2] ? __pfx___ip6_append_data+0x10/0x10 [ 53.777214][ C2] ? __pfx_ip6_mtu+0x10/0x10 [ 53.777224][ C2] ? ip6_setup_cork+0x5be/0x14c0 [ 53.777238][ C2] ip6_append_data+0x10b/0x410 [ 53.777250][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.777263][ C2] icmp6_send+0x1681/0x3c60 [ 53.777275][ C2] ? bpf_ksym_find+0x128/0x1c0 [ 53.777296][ C2] ? __pfx_icmp6_send+0x10/0x10 [ 53.777309][ C2] ? register_lock_class+0x3f0/0x560 [ 53.777326][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.777336][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 53.777348][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.777364][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.777377][ C2] ? ip6_link_failure+0x31/0x580 [ 53.777388][ C2] ip6_link_failure+0x31/0x580 [ 53.777399][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.777411][ C2] ndisc_error_report+0xd2/0x1b0 [ 53.777425][ C2] neigh_invalidate+0x224/0x580 [ 53.777440][ C2] neigh_timer_handler+0xb06/0x1230 [ 53.777458][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.777473][ C2] call_timer_fn+0x19a/0x610 [ 53.777485][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 53.777499][ C2] ? __run_timers+0x747/0xb00 [ 53.777511][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.777529][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.777543][ C2] __run_timers+0x757/0xb00 [ 53.777559][ C2] ? __pfx___run_timers+0x10/0x10 [ 53.777576][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 53.777594][ C2] run_timer_base+0x114/0x190 [ 53.777607][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 53.777621][ C2] run_timer_softirq+0x1a/0x50 [ 53.777634][ C2] handle_softirqs+0x1ea/0x9b0 [ 53.777649][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 53.777663][ C2] ? _raw_spin_unlock+0x28/0x50 [ 53.777679][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.777691][ C2] __irq_exit_rcu+0x162/0x210 [ 53.777705][ C2] irq_exit_rcu+0x9/0x30 [ 53.777718][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.777733][ C2] [ 53.777737][ C2] [ 53.777740][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.777753][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 53.777769][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 53.777779][ C2] RSP: 0018:ffffc90004ccfad0 EFLAGS: 00000293 [ 53.777787][ C2] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e8b23a [ 53.777793][ C2] RDX: ffff88802602ca80 RSI: ffffffff81e8b244 RDI: ffff88802602ca80 [ 53.777800][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.777806][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000999f5c [ 53.777812][ C2] R13: 0000000000000200 R14: ffff88802b5fa540 R15: ffffc90004ccfb98 [ 53.777823][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.777838][ C2] ? vprintk_emit+0x674/0x6b0 [ 53.777856][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.777877][ C2] _printk+0xcf/0x110 [ 53.777887][ C2] ? __pfx__printk+0x10/0x10 [ 53.777900][ C2] ? __pfx____ratelimit+0x10/0x10 [ 53.777914][ C2] should_fail_ex+0x4e4/0x640 [ 53.777930][ C2] should_failslab+0xc2/0x120 [ 53.777944][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.777956][ C2] ? __pfx_acct_collect+0x10/0x10 [ 53.777967][ C2] ? taskstats_exit+0x6d3/0xca0 [ 53.777981][ C2] taskstats_exit+0x6d3/0xca0 [ 53.777993][ C2] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.778006][ C2] ? __pfx_taskstats_exit+0x10/0x10 [ 53.778020][ C2] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.778033][ C2] do_exit+0x65c/0x2ae0 [ 53.778049][ C2] ? signal_wake_up_state+0x8d/0x130 [ 53.778061][ C2] ? __pfx_do_exit+0x10/0x10 [ 53.778076][ C2] ? do_group_exit+0x1bd/0x2a0 [ 53.778087][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.778105][ C2] do_group_exit+0xd5/0x2a0 [ 53.778116][ C2] __x64_sys_exit_group+0x3e/0x50 [ 53.778126][ C2] x64_sys_call+0x102c/0x1530 [ 53.778142][ C2] do_syscall_64+0x115/0x870 [ 53.778153][ C2] ? clear_bhb_loop+0x40/0x90 [ 53.778166][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.778177][ C2] RIP: 0033:0x7fa0c3f9df99 [ 53.778185][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.778195][ C2] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.778204][ C2] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.778211][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.778217][ C2] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.778223][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.778229][ C2] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.778242][ C2] [ 53.778249][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.778262][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.778268][ C3] Call Trace: [ 53.778272][ C3] [ 53.778275][ C3] dump_stack_lvl+0x100/0x190 [ 53.778289][ C3] should_fail_ex.cold+0x5/0xa [ 53.778294][ C2] FAULT_INJECTION: forcing a failure. [ 53.778294][ C2] name failslab, interval 1, probability 100, space 0, times 3 [ 53.778303][ C3] should_failslab+0xc2/0x120 [ 53.778316][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.778330][ C3] ? __alloc_skb+0x140/0x710 [ 53.778344][ C3] __alloc_skb+0x140/0x710 [ 53.778356][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.778368][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.778380][ C3] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.778397][ C3] alloc_skb_with_frags+0xdd/0x760 [ 53.778413][ C3] ? lock_acquire+0x1b9/0x370 [ 53.778427][ C3] sock_alloc_send_pskb+0x801/0x980 [ 53.778440][ C3] ? find_held_lock+0x2b/0x80 [ 53.778459][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.778472][ C3] ? dst_release+0x9a/0x330 [ 53.778484][ C3] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.778501][ C3] __ip6_append_data+0x272f/0x4bd0 [ 53.778517][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.778533][ C3] ? __pfx___ip6_append_data+0x10/0x10 [ 53.778547][ C3] ? __pfx_ip6_mtu+0x10/0x10 [ 53.778556][ C3] ? ip6_setup_cork+0x5be/0x14c0 [ 53.778571][ C3] ip6_append_data+0x10b/0x410 [ 53.778583][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.778596][ C3] icmp6_send+0x1681/0x3c60 [ 53.778607][ C3] ? bpf_ksym_find+0x128/0x1c0 [ 53.778629][ C3] ? __pfx_icmp6_send+0x10/0x10 [ 53.778642][ C3] ? register_lock_class+0x3f0/0x560 [ 53.778658][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.778670][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 53.778682][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.778698][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.778711][ C3] ? ip6_link_failure+0x31/0x580 [ 53.778722][ C3] ip6_link_failure+0x31/0x580 [ 53.778732][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.778744][ C3] ndisc_error_report+0xd2/0x1b0 [ 53.778758][ C3] neigh_invalidate+0x224/0x580 [ 53.778774][ C3] neigh_timer_handler+0xb06/0x1230 [ 53.778792][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.778807][ C3] call_timer_fn+0x19a/0x610 [ 53.778819][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.778834][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.778849][ C3] ? mark_held_locks+0x40/0x70 [ 53.778863][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.778883][ C3] __run_timers+0x757/0xb00 [ 53.778899][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.778916][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.778935][ C3] run_timer_base+0x114/0x190 [ 53.778947][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.778962][ C3] run_timer_softirq+0x1a/0x50 [ 53.778974][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.778990][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.779004][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.779020][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.779032][ C3] __irq_exit_rcu+0x162/0x210 [ 53.779046][ C3] irq_exit_rcu+0x9/0x30 [ 53.779059][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.779071][ C3] [ 53.779075][ C3] [ 53.779079][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.779091][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.779109][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.779120][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.779128][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.779135][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.779141][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.779148][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.779154][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.779164][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.779180][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.779198][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.779217][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.779233][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.779247][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.779260][ C3] console_unlock+0x103/0x260 [ 53.779277][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.779293][ C3] ? lock_acquire+0x101/0x370 [ 53.779308][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.779326][ C3] vprintk_emit+0x407/0x6b0 [ 53.779343][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.779363][ C3] _printk+0xcf/0x110 [ 53.779373][ C3] ? __pfx__printk+0x10/0x10 [ 53.779386][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.779400][ C3] should_fail_ex+0x4e4/0x640 [ 53.779417][ C3] should_failslab+0xc2/0x120 [ 53.779430][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.779443][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.779460][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.779478][ C3] ptlock_alloc+0x1f/0x70 [ 53.779494][ C3] pte_alloc_one+0x82/0x3d0 [ 53.779506][ C3] do_fault+0x86c/0x1750 [ 53.779537][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.779558][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.779573][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.779591][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.779611][ C3] ? __pfx__printk+0x10/0x10 [ 53.779624][ C3] handle_mm_fault+0x37b/0xa30 [ 53.779643][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.779663][ C3] exc_page_fault+0x6f/0xd0 [ 53.779674][ C3] asm_exc_page_fault+0x26/0x30 [ 53.779685][ C3] RIP: 0033:0x7f1726472836 [ 53.779694][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.779704][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.779712][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.779719][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.779725][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.779731][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.779738][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.779745][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.779759][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.779776][ C3] [ 53.779782][ C2] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.779795][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.779801][ C2] Call Trace: [ 53.779805][ C2] [ 53.779809][ C2] dump_stack_lvl+0x100/0x190 [ 53.779823][ C2] should_fail_ex.cold+0x5/0xa [ 53.779834][ C3] FAULT_INJECTION: forcing a failure. [ 53.779834][ C3] name failslab, interval 1, probability 100, space 0, times 2 [ 53.779836][ C2] should_failslab+0xc2/0x120 [ 53.779850][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.779863][ C2] ? __alloc_skb+0x140/0x710 [ 53.779878][ C2] __alloc_skb+0x140/0x710 [ 53.779889][ C2] ? __alloc_skb+0x5b7/0x710 [ 53.779901][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 53.779914][ C2] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.779930][ C2] alloc_skb_with_frags+0xdd/0x760 [ 53.779947][ C2] ? lock_acquire+0x1b9/0x370 [ 53.779960][ C2] sock_alloc_send_pskb+0x801/0x980 [ 53.779973][ C2] ? find_held_lock+0x2b/0x80 [ 53.779992][ C2] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.780005][ C2] ? dst_release+0x9a/0x330 [ 53.780017][ C2] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.780034][ C2] __ip6_append_data+0x272f/0x4bd0 [ 53.780050][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.780066][ C2] ? __pfx___ip6_append_data+0x10/0x10 [ 53.780079][ C2] ? __pfx_ip6_mtu+0x10/0x10 [ 53.780089][ C2] ? ip6_setup_cork+0x5be/0x14c0 [ 53.780104][ C2] ip6_append_data+0x10b/0x410 [ 53.780116][ C2] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.780129][ C2] icmp6_send+0x1681/0x3c60 [ 53.780141][ C2] ? kmem_cache_free+0x127/0x6b0 [ 53.780152][ C2] ? run_timer_base+0x114/0x190 [ 53.780169][ C2] ? __pfx_icmp6_send+0x10/0x10 [ 53.780180][ C2] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.780197][ C2] ? __lock_acquire+0x49f/0x1a40 [ 53.780215][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.780228][ C2] ? ip6_link_failure+0x31/0x580 [ 53.780239][ C2] ip6_link_failure+0x31/0x580 [ 53.780250][ C2] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.780261][ C2] ndisc_error_report+0xd2/0x1b0 [ 53.780276][ C2] neigh_invalidate+0x224/0x580 [ 53.780292][ C2] neigh_timer_handler+0xb06/0x1230 [ 53.780309][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.780324][ C2] call_timer_fn+0x19a/0x610 [ 53.780343][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 53.780357][ C2] ? __run_timers+0x747/0xb00 [ 53.780370][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.780387][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.780402][ C2] __run_timers+0x757/0xb00 [ 53.780417][ C2] ? __pfx___run_timers+0x10/0x10 [ 53.780435][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 53.780453][ C2] run_timer_base+0x114/0x190 [ 53.780466][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 53.780481][ C2] run_timer_softirq+0x1a/0x50 [ 53.780493][ C2] handle_softirqs+0x1ea/0x9b0 [ 53.780509][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 53.780523][ C2] ? _raw_spin_unlock+0x28/0x50 [ 53.780539][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.780551][ C2] __irq_exit_rcu+0x162/0x210 [ 53.780565][ C2] irq_exit_rcu+0x9/0x30 [ 53.780578][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.780589][ C2] [ 53.780593][ C2] [ 53.780597][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.780609][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 53.780625][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 53.780636][ C2] RSP: 0018:ffffc90004ccfad0 EFLAGS: 00000293 [ 53.780644][ C2] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e8b23a [ 53.780650][ C2] RDX: ffff88802602ca80 RSI: ffffffff81e8b244 RDI: ffff88802602ca80 [ 53.780657][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.780663][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000999f5c [ 53.780670][ C2] R13: 0000000000000200 R14: ffff88802b5fa540 R15: ffffc90004ccfb98 [ 53.780679][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.780695][ C2] ? vprintk_emit+0x674/0x6b0 [ 53.780714][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.780736][ C2] _printk+0xcf/0x110 [ 53.780747][ C2] ? __pfx__printk+0x10/0x10 [ 53.780760][ C2] ? __pfx____ratelimit+0x10/0x10 [ 53.780774][ C2] should_fail_ex+0x4e4/0x640 [ 53.780790][ C2] should_failslab+0xc2/0x120 [ 53.780804][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.780816][ C2] ? __pfx_acct_collect+0x10/0x10 [ 53.780827][ C2] ? taskstats_exit+0x6d3/0xca0 [ 53.780841][ C2] taskstats_exit+0x6d3/0xca0 [ 53.780853][ C2] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.780867][ C2] ? __pfx_taskstats_exit+0x10/0x10 [ 53.780880][ C2] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.780893][ C2] do_exit+0x65c/0x2ae0 [ 53.780909][ C2] ? signal_wake_up_state+0x8d/0x130 [ 53.780921][ C2] ? __pfx_do_exit+0x10/0x10 [ 53.780937][ C2] ? do_group_exit+0x1bd/0x2a0 [ 53.780947][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.780965][ C2] do_group_exit+0xd5/0x2a0 [ 53.780976][ C2] __x64_sys_exit_group+0x3e/0x50 [ 53.780987][ C2] x64_sys_call+0x102c/0x1530 [ 53.781002][ C2] do_syscall_64+0x115/0x870 [ 53.781013][ C2] ? clear_bhb_loop+0x40/0x90 [ 53.781026][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.781037][ C2] RIP: 0033:0x7fa0c3f9df99 [ 53.781046][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.781056][ C2] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.781065][ C2] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.781071][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.781078][ C2] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.781084][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.781091][ C2] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.781104][ C2] [ 53.781109][ C3] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.781121][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.781127][ C3] Call Trace: [ 53.781131][ C3] [ 53.781129][ C2] FAULT_INJECTION: forcing a failure. [ 53.781129][ C2] name failslab, interval 1, probability 100, space 0, times 1 [ 53.781135][ C3] dump_stack_lvl+0x100/0x190 [ 53.781148][ C3] should_fail_ex.cold+0x5/0xa [ 53.781161][ C3] should_failslab+0xc2/0x120 [ 53.781175][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.781189][ C3] ? __alloc_skb+0x140/0x710 [ 53.781203][ C3] __alloc_skb+0x140/0x710 [ 53.781215][ C3] ? __alloc_skb+0x5b7/0x710 [ 53.781227][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 53.781240][ C3] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 53.781256][ C3] alloc_skb_with_frags+0xdd/0x760 [ 53.781272][ C3] ? lock_acquire+0x1b9/0x370 [ 53.781286][ C3] sock_alloc_send_pskb+0x801/0x980 [ 53.781300][ C3] ? find_held_lock+0x2b/0x80 [ 53.781319][ C3] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 53.781332][ C3] ? dst_release+0x9a/0x330 [ 53.781344][ C3] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 53.781360][ C3] __ip6_append_data+0x272f/0x4bd0 [ 53.781376][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.781393][ C3] ? __pfx___ip6_append_data+0x10/0x10 [ 53.781406][ C3] ? __pfx_ip6_mtu+0x10/0x10 [ 53.781416][ C3] ? ip6_setup_cork+0x5be/0x14c0 [ 53.781430][ C3] ip6_append_data+0x10b/0x410 [ 53.781443][ C3] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 53.781456][ C3] icmp6_send+0x1681/0x3c60 [ 53.781468][ C3] ? kmem_cache_free+0x127/0x6b0 [ 53.781480][ C3] ? run_timer_base+0x114/0x190 [ 53.781496][ C3] ? __pfx_icmp6_send+0x10/0x10 [ 53.781506][ C3] ? handle_mm_fault+0x37b/0xa30 [ 53.781522][ C3] ? do_user_addr_fault+0x591/0x12f0 [ 53.781538][ C3] ? exc_page_fault+0x6f/0xd0 [ 53.781548][ C3] ? asm_exc_page_fault+0x4/0x30 [ 53.781564][ C3] ? __lock_acquire+0x49f/0x1a40 [ 53.781582][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.781595][ C3] ? ip6_link_failure+0x31/0x580 [ 53.781606][ C3] ip6_link_failure+0x31/0x580 [ 53.781618][ C3] ? __pfx_ip6_link_failure+0x10/0x10 [ 53.781630][ C3] ndisc_error_report+0xd2/0x1b0 [ 53.781644][ C3] neigh_invalidate+0x224/0x580 [ 53.781660][ C3] neigh_timer_handler+0xb06/0x1230 [ 53.781677][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.781692][ C3] call_timer_fn+0x19a/0x610 [ 53.781704][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 53.781719][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.781734][ C3] ? mark_held_locks+0x40/0x70 [ 53.781748][ C3] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.781763][ C3] __run_timers+0x757/0xb00 [ 53.781790][ C3] ? __pfx___run_timers+0x10/0x10 [ 53.781810][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 53.781829][ C3] run_timer_base+0x114/0x190 [ 53.781841][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 53.781856][ C3] run_timer_softirq+0x1a/0x50 [ 53.781868][ C3] handle_softirqs+0x1ea/0x9b0 [ 53.781888][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 53.781902][ C3] ? _raw_spin_unlock+0x28/0x50 [ 53.781918][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.781931][ C3] __irq_exit_rcu+0x162/0x210 [ 53.781945][ C3] irq_exit_rcu+0x9/0x30 [ 53.781958][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.781969][ C3] [ 53.781973][ C3] [ 53.781977][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.781989][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 53.782006][ C3] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 53.782016][ C3] RSP: 0000:ffffc9000353f798 EFLAGS: 00000293 [ 53.782024][ C3] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 53.782031][ C3] RDX: ffff88802dbca540 RSI: ffffffff81e88a0f RDI: ffff88802dbca540 [ 53.782037][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.782044][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000b1c [ 53.782050][ C3] R13: ffffffff8f9acd98 R14: ffffc9000353f818 R15: dffffc0000000000 [ 53.782060][ C3] ? console_flush_one_record+0xab1/0xe50 [ 53.782077][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.782095][ C3] ? console_flush_one_record+0xabf/0xe50 [ 53.782113][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.782130][ C3] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 53.782145][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.782158][ C3] console_unlock+0x103/0x260 [ 53.782173][ C3] ? __pfx_console_unlock+0x10/0x10 [ 53.782190][ C3] ? lock_acquire+0x101/0x370 [ 53.782205][ C3] ? vprintk_emit+0x66a/0x6b0 [ 53.782222][ C3] vprintk_emit+0x407/0x6b0 [ 53.782239][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 53.782260][ C3] _printk+0xcf/0x110 [ 53.782270][ C3] ? __pfx__printk+0x10/0x10 [ 53.782283][ C3] ? __pfx____ratelimit+0x10/0x10 [ 53.782297][ C3] should_fail_ex+0x4e4/0x640 [ 53.782314][ C3] should_failslab+0xc2/0x120 [ 53.782328][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.782340][ C3] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.782356][ C3] ? ptlock_alloc+0x1f/0x70 [ 53.782374][ C3] ptlock_alloc+0x1f/0x70 [ 53.782390][ C3] pte_alloc_one+0x82/0x3d0 [ 53.782402][ C3] do_fault+0x86c/0x1750 [ 53.782418][ C3] __handle_mm_fault+0x187d/0x2a00 [ 53.782437][ C3] ? reacquire_held_locks+0xce/0x1e0 [ 53.782451][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.782470][ C3] ? lock_vma_under_rcu+0x17c/0x590 [ 53.782490][ C3] ? __pfx__printk+0x10/0x10 [ 53.782503][ C3] handle_mm_fault+0x37b/0xa30 [ 53.782522][ C3] do_user_addr_fault+0x5a3/0x12f0 [ 53.782542][ C3] exc_page_fault+0x6f/0xd0 [ 53.782554][ C3] asm_exc_page_fault+0x26/0x30 [ 53.782565][ C3] RIP: 0033:0x7f1726472836 [ 53.782573][ C3] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.782583][ C3] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.782590][ C3] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.782597][ C3] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.782604][ C3] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.782610][ C3] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.782616][ C3] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.782623][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.782637][ C3] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.782654][ C3] [ 53.782661][ C2] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.782674][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.782680][ C2] Call Trace: [ 53.782685][ C2] [ 53.782688][ C2] dump_stack_lvl+0x100/0x190 [ 53.782703][ C2] should_fail_ex.cold+0x5/0xa [ 53.782716][ C2] should_failslab+0xc2/0x120 [ 53.782734][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.782748][ C2] ? __alloc_skb+0x140/0x710 [ 53.782762][ C2] __alloc_skb+0x140/0x710 [ 53.782774][ C2] ? __alloc_skb+0x5b7/0x710 [ 53.782785][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 53.782804][ C2] __neigh_notify+0xe6/0x350 [ 53.782827][ C2] neigh_timer_handler+0xb17/0x1230 [ 53.782851][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.782873][ C2] call_timer_fn+0x19a/0x610 [ 53.782886][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 53.782901][ C2] ? __run_timers+0x747/0xb00 [ 53.782914][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.782931][ C2] ? __pfx_neigh_timer_handler+0x10/0x10 [ 53.782946][ C2] __run_timers+0x757/0xb00 [ 53.782962][ C2] ? __pfx___run_timers+0x10/0x10 [ 53.782979][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 53.782998][ C2] run_timer_base+0x114/0x190 [ 53.783010][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 53.783025][ C2] run_timer_softirq+0x1a/0x50 [ 53.783037][ C2] handle_softirqs+0x1ea/0x9b0 [ 53.783053][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 53.783067][ C2] ? _raw_spin_unlock+0x28/0x50 [ 53.783083][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.783095][ C2] __irq_exit_rcu+0x162/0x210 [ 53.783109][ C2] irq_exit_rcu+0x9/0x30 [ 53.783122][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.783134][ C2] [ 53.783137][ C2] [ 53.783141][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.783153][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 53.783170][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 53.783180][ C2] RSP: 0018:ffffc90004ccfad0 EFLAGS: 00000293 [ 53.783189][ C2] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e8b23a [ 53.783195][ C2] RDX: ffff88802602ca80 RSI: ffffffff81e8b244 RDI: ffff88802602ca80 [ 53.783202][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.783208][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000999f5c [ 53.783215][ C2] R13: 0000000000000200 R14: ffff88802b5fa540 R15: ffffc90004ccfb98 [ 53.783227][ C2] ? vprintk_emit+0x66a/0x6b0 [ 53.783244][ C2] ? vprintk_emit+0x674/0x6b0 [ 53.783263][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 53.783283][ C2] _printk+0xcf/0x110 [ 53.783293][ C2] ? __pfx__printk+0x10/0x10 [ 53.783306][ C2] ? __pfx____ratelimit+0x10/0x10 [ 53.783320][ C2] should_fail_ex+0x4e4/0x640 [ 53.783337][ C2] should_failslab+0xc2/0x120 [ 53.783350][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.783363][ C2] ? __pfx_acct_collect+0x10/0x10 [ 53.783374][ C2] ? taskstats_exit+0x6d3/0xca0 [ 53.783388][ C2] taskstats_exit+0x6d3/0xca0 [ 53.783400][ C2] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.783413][ C2] ? __pfx_taskstats_exit+0x10/0x10 [ 53.783427][ C2] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.783440][ C2] do_exit+0x65c/0x2ae0 [ 53.783456][ C2] ? signal_wake_up_state+0x8d/0x130 [ 53.783468][ C2] ? __pfx_do_exit+0x10/0x10 [ 53.783484][ C2] ? do_group_exit+0x1bd/0x2a0 [ 53.783494][ C2] ? rcu_is_watching+0x12/0xc0 [ 53.783512][ C2] do_group_exit+0xd5/0x2a0 [ 53.783543][ C2] __x64_sys_exit_group+0x3e/0x50 [ 53.783555][ C2] x64_sys_call+0x102c/0x1530 [ 53.783572][ C2] do_syscall_64+0x115/0x870 [ 53.783589][ C2] ? clear_bhb_loop+0x40/0x90 [ 53.783608][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.783626][ C2] RIP: 0033:0x7fa0c3f9df99 [ 53.783641][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.783657][ C2] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.783673][ C2] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.783680][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.783686][ C2] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.783693][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.783699][ C2] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.783712][ C2] [ 53.783722][ C0] CPU: 0 UID: 0 PID: 5137 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 53.783743][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.783752][ C0] Call Trace: [ 53.783759][ C0] [ 53.783764][ C0] dump_stack_lvl+0x100/0x190 [ 53.783787][ C0] should_fail_ex.cold+0x5/0xa [ 53.783808][ C0] should_failslab+0xc2/0x120 [ 53.783829][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 53.783849][ C0] ? __alloc_skb+0x5b7/0x710 [ 53.783868][ C0] ? __alloc_skb+0x140/0x710 [ 53.783890][ C0] __alloc_skb+0x140/0x710 [ 53.783907][ C0] ? __alloc_skb+0x5b7/0x710 [ 53.783925][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 53.783944][ C0] ? lock_acquire+0x1b9/0x370 [ 53.783968][ C0] __netdev_alloc_skb+0x7a/0x960 [ 53.783989][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 53.784014][ C0] ? __lock_acquire+0x49f/0x1a40 [ 53.784037][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 53.784059][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 53.784086][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 53.784114][ C0] __iterate_interfaces+0x2e6/0x650 [ 53.784133][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 53.784156][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 53.784177][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 53.784200][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 53.784231][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 53.784256][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 53.784288][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 53.784314][ C0] handle_softirqs+0x1ea/0x9b0 [ 53.784338][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 53.784360][ C0] ? _raw_spin_unlock+0x28/0x50 [ 53.784384][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 53.784403][ C0] __irq_exit_rcu+0x162/0x210 [ 53.784424][ C0] irq_exit_rcu+0x9/0x30 [ 53.784444][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 53.784462][ C0] [ 53.784467][ C0] [ 53.784474][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.784492][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 53.784512][ C0] Code: 76 f1 5e 00 48 89 df 5b e9 bd 6c 64 00 be 03 00 00 00 5b e9 a2 cb 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 e5 df 59 12 48 8b 34 24 65 48 8b 15 c1 df 59 [ 53.784527][ C0] RSP: 0018:ffffc90003dffc68 EFLAGS: 00000293 [ 53.784540][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174fcac [ 53.784549][ C0] RDX: ffff88802b5fa540 RSI: ffffffff8174fcb6 RDI: ffff88802b5fa540 [ 53.784560][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.784570][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000200 [ 53.784580][ C0] R13: ffffffff8d4eb500 R14: 0000000000000001 R15: 0000000000000000 [ 53.784596][ C0] ? dump_stack_lvl+0x16c/0x190 [ 53.784613][ C0] ? dump_stack_lvl+0x176/0x190 [ 53.784634][ C0] dump_stack_lvl+0x17c/0x190 [ 53.784673][ C0] should_fail_ex.cold+0x5/0xa [ 53.784694][ C0] should_failslab+0xc2/0x120 [ 53.784715][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 53.784735][ C0] ? sock_alloc_inode+0x26/0x2c0 [ 53.784760][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.784783][ C0] sock_alloc_inode+0x26/0x2c0 [ 53.784805][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 53.784827][ C0] alloc_inode+0x68/0x250 [ 53.784850][ C0] sock_alloc+0x44/0x280 [ 53.784870][ C0] ? security_socket_create+0x7f/0x250 [ 53.784893][ C0] __sock_create+0xc2/0x860 [ 53.784922][ C0] __sys_socket+0x14d/0x260 [ 53.784938][ C0] ? __pfx___sys_socket+0x10/0x10 [ 53.784961][ C0] __x64_sys_socket+0x72/0xb0 [ 53.784976][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 53.784993][ C0] do_syscall_64+0x115/0x870 [ 53.785011][ C0] ? clear_bhb_loop+0x40/0x90 [ 53.785030][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.785048][ C0] RIP: 0033:0x7f89f2818707 [ 53.785062][ C0] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 53.785076][ C0] RSP: 002b:00007fff54558908 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 53.785091][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89f2818707 [ 53.785102][ C0] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 53.785110][ C0] RBP: 00007f89f28a4560 R08: 0000000000000073 R09: 0000000000000001 [ 53.785121][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.785130][ C0] R13: 00007fff54558a30 R14: 0000000000000031 R15: 00007fff54558a30 [ 53.785151][ C0] [ 53.791556][ T6027] CPU: 3 UID: 0 PID: 6027 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 53.791572][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.791578][ T6027] Call Trace: [ 53.791582][ T6027] [ 53.791587][ T6027] dump_stack_lvl+0x100/0x190 [ 53.791605][ T6027] should_fail_ex.cold+0x5/0xa [ 53.791619][ T6027] should_failslab+0xc2/0x120 [ 53.791635][ T6027] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.791648][ T6027] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 53.791666][ T6027] ? ptlock_alloc+0x1f/0x70 [ 53.791686][ T6027] ptlock_alloc+0x1f/0x70 [ 53.791703][ T6027] pte_alloc_one+0x82/0x3d0 [ 53.791716][ T6027] do_fault+0x86c/0x1750 [ 53.791733][ T6027] __handle_mm_fault+0x187d/0x2a00 [ 53.791754][ T6027] ? reacquire_held_locks+0xce/0x1e0 [ 53.791769][ T6027] ? __pfx___handle_mm_fault+0x10/0x10 [ 53.791803][ T6027] ? lock_vma_under_rcu+0x17c/0x590 [ 53.791824][ T6027] ? __pfx__printk+0x10/0x10 [ 53.791839][ T6027] handle_mm_fault+0x37b/0xa30 [ 53.791859][ T6027] do_user_addr_fault+0x5a3/0x12f0 [ 53.791885][ T6027] exc_page_fault+0x6f/0xd0 [ 53.791898][ T6027] asm_exc_page_fault+0x26/0x30 [ 53.791909][ T6027] RIP: 0033:0x7f1726472836 [ 53.791919][ T6027] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 53.791930][ T6027] RSP: 002b:00007ffe0452e980 EFLAGS: 00010202 [ 53.791938][ T6027] RAX: 000000110c404000 RBX: ffffffff8134b9a9 RCX: 0000000000000005 [ 53.791946][ T6027] RDX: 00000000000019a9 RSI: 00000000000012e6 RDI: 0000000000000020 [ 53.791952][ T6027] RBP: 0000000000000000 R08: 00007f1726810000 R09: 00007f1726812000 [ 53.791959][ T6027] R10: 000000008134b9ad R11: 0000000000000012 R12: 00007f1726826038 [ 53.791965][ T6027] R13: 000000000003430a R14: ffffffff8134b9a9 R15: 00007f1727355720 [ 53.791973][ T6027] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.791988][ T6027] ? tomoyo_warn_oom.cold+0x5/0x35 [ 53.792006][ T6027] [ 53.792059][ T6027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 53.795080][ T5737] svc: failed to register nfsdv3 RPC service (errno 111). [ 53.797556][ T6025] CPU: 2 UID: 0 PID: 6025 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 53.797578][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.797602][ T6025] Call Trace: [ 53.797608][ T6025] [ 53.797615][ T6025] dump_stack_lvl+0x100/0x190 [ 53.797641][ T6025] should_fail_ex.cold+0x5/0xa [ 53.797664][ T6025] should_failslab+0xc2/0x120 [ 53.797686][ T6025] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.797705][ T6025] ? __pfx_acct_collect+0x10/0x10 [ 53.797727][ T6025] ? taskstats_exit+0x6d3/0xca0 [ 53.797750][ T6025] taskstats_exit+0x6d3/0xca0 [ 53.797769][ T6025] ? __pfx_acct_update_integrals+0x10/0x10 [ 53.797789][ T6025] ? __pfx_taskstats_exit+0x10/0x10 [ 53.797808][ T6025] ? rcu_read_lock_any_held+0x6a/0xa0 [ 53.797830][ T6025] do_exit+0x65c/0x2ae0 [ 53.797853][ T6025] ? signal_wake_up_state+0x8d/0x130 [ 53.797866][ T6025] ? __pfx_do_exit+0x10/0x10 [ 53.797882][ T6025] ? do_group_exit+0x1bd/0x2a0 [ 53.797893][ T6025] ? rcu_is_watching+0x12/0xc0 [ 53.797912][ T6025] do_group_exit+0xd5/0x2a0 [ 53.797923][ T6025] __x64_sys_exit_group+0x3e/0x50 [ 53.797933][ T6025] x64_sys_call+0x102c/0x1530 [ 53.797950][ T6025] do_syscall_64+0x115/0x870 [ 53.797963][ T6025] ? clear_bhb_loop+0x40/0x90 [ 53.797976][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.797988][ T6025] RIP: 0033:0x7fa0c3f9df99 [ 53.797999][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.798009][ T6025] RSP: 002b:00007fffb19f8ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.798020][ T6025] RAX: ffffffffffffffda RBX: 00007fa0c4034f9c RCX: 00007fa0c3f9df99 [ 53.798027][ T6025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 53.798034][ T6025] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa0c3e64320 [ 53.798040][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb19f8cd0 [ 53.798047][ T6025] R13: 00007fa0c3e64320 R14: 00007fffb19f8cc8 R15: 00007fa0c4225fa0 [ 53.798060][ T6025] [ 55.511850][ T5744] Bluetooth: hci0: command tx timeout [ 55.514768][ T5750] Bluetooth: hci2: command tx timeout [ 55.514790][ T5750] Bluetooth: hci1: command tx timeout [ 55.519188][ T5737] svc: failed to register nfsaclv3 RPC service (errno 111). [ 56.562644][ T5744] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 56.564438][ T5737] failed to unregister tcp with rpcbind [ 56.569286][ T5744] Bluetooth: hci3: Injecting HCI hardware error event [ 56.570769][ T5737] svc: failed to register nfsdv3 RPC service (errno 97). [ 56.573511][ T64] Bluetooth: hci3: hardware error 0x00 [ 58.714996][ T5737] svc: failed to register nfsaclv3 RPC service (errno 97). [ 58.718077][ T5737] failed to unregister tcp with rpcbind [ 58.750653][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 58.750666][ T42] audit: type=1400 audit(1785407126.761:313): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.874104][ T42] audit: type=1400 audit(1785407126.891:314): avc: denied { write } for pid=6048 comm="syz.2.61" name="configs" dev="configfs" ino=8132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.880839][ T6049] loop0: detected capacity change from 0 to 2048 [ 58.900576][ T42] audit: type=1400 audit(1785407126.911:315): avc: denied { write } for pid=6047 comm="syz.1.60" name="cluster" dev="configfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.910991][ T42] audit: type=1400 audit(1785407126.911:316): avc: denied { write } for pid=6047 comm="syz.1.60" name="node" dev="configfs" ino=11363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.918162][ T42] audit: type=1400 audit(1785407126.921:317): avc: denied { write } for pid=6047 comm="syz.1.60" name="heartbeat" dev="configfs" ino=11364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.959740][ T42] audit: type=1400 audit(1785407126.971:318): avc: denied { write } for pid=6056 comm="syz.2.64" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.070462][ T5588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.153867][ T42] audit: type=1400 audit(1785407127.171:319): avc: denied { execute } for pid=6062 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.161980][ T42] audit: type=1400 audit(1785407127.171:320): avc: denied { execute_no_trans } for pid=6062 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.200889][ T5588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.212546][ T42] audit: type=1400 audit(1785407127.231:321): avc: denied { read write } for pid=6068 comm="syz.3.70" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.221928][ T42] audit: type=1400 audit(1785407127.231:322): avc: denied { open } for pid=6068 comm="syz.3.70" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.224551][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.238831][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.241911][ T5832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.250000][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.254941][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.259160][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.295305][ T5588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.331255][ T6078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.337015][ T6078] block device autoloading is deprecated and will be removed. [ 59.378467][ T5588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.394349][ T5832] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 59.402155][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.412707][ T5832] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 59.416095][ T5832] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 59.418763][ T5832] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 59.595005][ T5588] bridge_slave_1: left allmulticast mode [ 59.601063][ T5588] bridge_slave_1: left promiscuous mode [ 59.605674][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.630294][ T5832] usb 6-1: emi26_load_firmware - request_firmware() failed [ 59.637001][ T5832] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 59.653268][ T5832] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 59.660093][ T5588] bridge_slave_0: left allmulticast mode [ 59.667367][ T5832] usb 6-1: USB disconnect, device number 2 [ 59.668079][ T5588] bridge_slave_0: left promiscuous mode [ 59.682074][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.821368][ T6116] Mass Storage Function, version: 2009/09/11 [ 59.824524][ T6116] LUN: removable file: (no medium) [ 59.831234][ T6116] mass_storage.usb0/lun.0: file too small: file0 [ 59.987003][ T5588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.998951][ T5588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.007542][ T5588] bond0 (unregistering): Released all slaves [ 60.017771][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.111940][ T5832] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.131940][ T1047] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.230946][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.233336][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.235730][ T6070] bridge_slave_0: entered allmulticast mode [ 60.238386][ T6070] bridge_slave_0: entered promiscuous mode [ 60.241638][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.244247][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.246821][ T6070] bridge_slave_1: entered allmulticast mode [ 60.250050][ T6070] bridge_slave_1: entered promiscuous mode [ 60.265937][ T5832] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.270429][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.278136][ T5832] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 60.283096][ T1047] usb 8-1: Using ep0 maxpacket: 16 [ 60.284164][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.285125][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.291709][ T5832] usb 7-1: Product: syz [ 60.293157][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.294131][ T5832] usb 7-1: Manufacturer: syz [ 60.297978][ T5832] usb 7-1: SerialNumber: syz [ 60.299711][ T1047] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.303126][ T1047] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.307665][ T1047] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 60.317995][ T5832] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 60.320536][ T1047] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 60.321072][ T6070] team0: Port device team_slave_0 added [ 60.324073][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 87 [ 60.328298][ T1047] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.328331][ T6070] team0: Port device team_slave_1 added [ 60.330846][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 60.337972][ T1047] usb 8-1: config 0 descriptor?? [ 60.353718][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 60.356324][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82 [ 60.358831][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 60.361433][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 60.364408][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 85 [ 60.366899][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 60.373661][ T5832] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 60.378715][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 83 [ 60.381008][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.381259][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 60.384256][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.386911][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 60.398276][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.398956][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 60.403983][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.405633][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 86 [ 60.407747][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.410196][ T5832] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 60.420248][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.425250][ T5832] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 60.495530][ T6070] hsr_slave_0: entered promiscuous mode [ 60.502325][ T6070] hsr_slave_1: entered promiscuous mode [ 60.506216][ T6070] debugfs: 'hsr0' already exists in 'hsr' [ 60.508639][ T6070] Cannot create hsr debugfs directory [ 60.567791][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.662544][ T10] usb 7-1: USB disconnect, device number 2 [ 60.676390][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 60.681961][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 60.688265][ T10] keyspan 7-1:1.0: device disconnected [ 60.757399][ T6070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.764211][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.766899][ T6070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.768926][ T1047] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 60.773001][ T1047] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 60.775271][ T1047] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 60.776756][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.777484][ T1047] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 60.779972][ T6070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.781656][ T1047] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 60.790580][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.791339][ T1047] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 60.793053][ T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 60.801308][ T6070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.825772][ T6070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.827543][ T1047] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 60.829216][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.833655][ T1047] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 60.856549][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.859143][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.861875][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.864245][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.907873][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.927663][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.934360][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.961410][ T6070] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.973921][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.976703][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.984307][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.987154][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.071028][ T6169] netlink: 504 bytes leftover after parsing attributes in process `syz.3.87'. [ 61.364072][ T64] Bluetooth: hci0: command tx timeout [ 61.380903][ T6070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.541277][ T6070] veth0_vlan: entered promiscuous mode [ 61.550250][ T6070] veth1_vlan: entered promiscuous mode [ 61.566950][ T6070] veth0_macvtap: entered promiscuous mode [ 61.570854][ T6070] veth1_macvtap: entered promiscuous mode [ 61.582343][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.590061][ T6070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.598791][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.603382][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.611090][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.621139][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.700720][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.704648][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.732978][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.736624][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.861063][ T5839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 61.866636][ T5839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 61.872645][ T5839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 61.878584][ T5839] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 61.931347][ T6232] net_ratelimit: 5 callbacks suppressed [ 61.931359][ T6232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.005236][ T5832] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 62.023685][ T6243] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 62.066895][ T5588] hsr_slave_0: left promiscuous mode [ 62.089163][ T5588] hsr_slave_1: left promiscuous mode [ 62.093037][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.099883][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.116159][ T5588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.123444][ T5588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.142321][ T5588] veth1_macvtap: left promiscuous mode [ 62.145740][ T5588] veth0_macvtap: left promiscuous mode [ 62.148386][ T6251] gadgetfs: bound to dummy_udc driver [ 62.148880][ T5588] veth1_vlan: left promiscuous mode [ 62.152836][ T5832] usb 8-1: device descriptor read/64, error -32 [ 62.153456][ T5588] veth0_vlan: left promiscuous mode [ 62.224060][ T6256] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 62.226153][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 62.238198][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 62.259613][ T6259] vhci_hcd: connection closed [ 62.270260][ T5818] vhci_hcd vhci_hcd.4: stop threads [ 62.272593][ T5818] vhci_hcd vhci_hcd.4: release socket [ 62.274757][ T5818] vhci_hcd vhci_hcd.4: disconnect device [ 62.393877][ T5832] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 62.498335][ T5588] team0 (unregistering): Port device team_slave_1 removed [ 62.531951][ T5832] usb 8-1: device descriptor read/64, error -32 [ 62.535839][ T5588] team0 (unregistering): Port device team_slave_0 removed [ 62.792452][ T5832] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 62.800982][ T6289] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 62.804175][ T6289] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 62.807350][ T6289] ================================================================== [ 62.810467][ T6289] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 62.813453][ T6289] Read of size 8 at addr ffff88802aed17f0 by task syz.4.133/6289 [ 62.817140][ T6289] [ 62.818390][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(full) [ 62.818406][ T6289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.818414][ T6289] Call Trace: [ 62.818419][ T6289] [ 62.818425][ T6289] dump_stack_lvl+0x100/0x190 [ 62.818442][ T6289] print_report+0x13d/0x4b0 [ 62.818461][ T6289] ? __virt_addr_valid+0x239/0x430 [ 62.818478][ T6289] ? dummy_free_request+0x8a/0x90 [ 62.818497][ T6289] kasan_report+0xdf/0x1c0 [ 62.818519][ T6289] ? dummy_free_request+0x8a/0x90 [ 62.818542][ T6289] dummy_free_request+0x8a/0x90 [ 62.818562][ T6289] uvc_function_bind+0x181a/0x1939 [ 62.818585][ T6289] ? __pfx_uvc_function_bind+0x10/0x10 [ 62.818604][ T6289] usb_add_function+0x219/0x890 [ 62.818627][ T6289] configfs_composite_bind+0xd83/0x1960 [ 62.818654][ T6289] gadget_bind_driver+0x28c/0xbf0 [ 62.818681][ T6289] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 62.818704][ T6289] ? __pfx_gadget_bind_driver+0x10/0x10 [ 62.818731][ T6289] really_probe+0x241/0xa60 [ 62.818753][ T6289] __driver_probe_device+0x20e/0x450 [ 62.818767][ T6289] driver_probe_device+0x4a/0x140 [ 62.818780][ T6289] __driver_attach+0x21f/0x5b0 [ 62.818793][ T6289] ? __pfx___driver_attach+0x10/0x10 [ 62.818806][ T6289] bus_for_each_dev+0x13e/0x1d0 [ 62.818816][ T6289] ? __pfx_bus_for_each_dev+0x10/0x10 [ 62.818833][ T6289] ? bus_add_driver+0x2b5/0x5b0 [ 62.818846][ T6289] bus_add_driver+0x305/0x5b0 [ 62.818864][ T6289] driver_register+0x1e2/0x360 [ 62.818884][ T6289] usb_gadget_register_driver_owner+0x132/0x210 [ 62.818909][ T6289] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 62.818931][ T6289] configfs_write_iter+0x302/0x4e0 [ 62.818953][ T6289] vfs_write+0x6ac/0x1050 [ 62.818979][ T6289] ? __pfx_configfs_write_iter+0x10/0x10 [ 62.818997][ T6289] ? __pfx_vfs_write+0x10/0x10 [ 62.819026][ T6289] ksys_write+0x12a/0x250 [ 62.819050][ T6289] ? __pfx_ksys_write+0x10/0x10 [ 62.819076][ T6289] do_syscall_64+0x115/0x870 [ 62.819095][ T6289] ? clear_bhb_loop+0x40/0x90 [ 62.819115][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.819134][ T6289] RIP: 0033:0x7fedbdf9df99 [ 62.819149][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.819167][ T6289] RSP: 002b:00007fedbee31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.819185][ T6289] RAX: ffffffffffffffda RBX: 00007fedbe225fa0 RCX: 00007fedbdf9df99 [ 62.819198][ T6289] RDX: 000000000000000b RSI: 0000200000001b00 RDI: 0000000000000003 [ 62.819209][ T6289] RBP: 00007fedbe034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 62.819219][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.819229][ T6289] R13: 00007fedbe226038 R14: 00007fedbe225fa0 R15: 00007ffd98281cf8 [ 62.819245][ T6289] [ 62.819251][ T6289] [ 62.914719][ T6289] Allocated by task 5999: [ 62.916000][ T6289] kasan_save_stack+0x30/0x50 [ 62.917414][ T6289] kasan_save_track+0x14/0x30 [ 62.918829][ T6289] __kasan_kmalloc+0xaa/0xb0 [ 62.920237][ T6289] __kmalloc_noprof+0x322/0x820 [ 62.921692][ T6289] usb_gstrings_attach+0xd4/0x920 [ 62.923214][ T6289] uvc_function_bind+0xad1/0x1939 [ 62.924757][ T6289] usb_add_function+0x219/0x890 [ 62.926391][ T6289] configfs_composite_bind+0xd83/0x1960 [ 62.928150][ T6289] gadget_bind_driver+0x28c/0xbf0 [ 62.929697][ T6289] really_probe+0x241/0xa60 [ 62.931069][ T6289] __driver_probe_device+0x20e/0x450 [ 62.932637][ T6289] driver_probe_device+0x4a/0x140 [ 62.934146][ T6289] __driver_attach+0x21f/0x5b0 [ 62.935566][ T6289] bus_for_each_dev+0x13e/0x1d0 [ 62.937006][ T6289] bus_add_driver+0x305/0x5b0 [ 62.938415][ T6289] driver_register+0x1e2/0x360 [ 62.939882][ T6289] usb_gadget_register_driver_owner+0x132/0x210 [ 62.941751][ T6289] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 62.943380][ T6289] configfs_write_iter+0x302/0x4e0 [ 62.944929][ T6289] vfs_write+0x6ac/0x1050 [ 62.946249][ T6289] ksys_write+0x12a/0x250 [ 62.947568][ T6289] do_syscall_64+0x115/0x870 [ 62.948951][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.950712][ T6289] [ 62.951443][ T6289] Freed by task 6243: [ 62.952620][ T6289] kasan_save_stack+0x30/0x50 [ 62.954033][ T6289] kasan_save_track+0x14/0x30 [ 62.955419][ T6289] kasan_save_free_info+0x3b/0x70 [ 62.956941][ T6289] __kasan_slab_free+0x5f/0x80 [ 62.958355][ T6289] kfree+0x22b/0x6c0 [ 62.959565][ T6289] composite_dev_cleanup+0x151/0x900 [ 62.961119][ T6289] configfs_composite_unbind+0xb6/0x210 [ 62.962755][ T6289] gadget_unbind_driver+0x20c/0x4f0 [ 62.964365][ T6289] device_remove+0xcb/0x180 [ 62.965736][ T6289] device_release_driver_internal+0x44e/0x620 [ 62.967555][ T6289] driver_detach+0xd8/0x1b0 [ 62.968912][ T6289] bus_remove_driver+0x13b/0x2e0 [ 62.970380][ T6289] driver_unregister+0x76/0xb0 [ 62.971852][ T6289] usb_gadget_unregister_driver+0x49/0x70 [ 62.973584][ T6289] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 62.975309][ T6289] configfs_write_iter+0x302/0x4e0 [ 62.976924][ T6289] vfs_write+0x6ac/0x1050 [ 62.978251][ T6289] ksys_write+0x12a/0x250 [ 62.979601][ T6289] do_syscall_64+0x115/0x870 [ 62.981000][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.982798][ T6289] [ 62.983579][ T6289] The buggy address belongs to the object at ffff88802aed1700 [ 62.983579][ T6289] which belongs to the cache kmalloc-128 of size 128 [ 62.987765][ T6289] The buggy address is located 112 bytes to the right of [ 62.987765][ T6289] allocated 128-byte region [ffff88802aed1700, ffff88802aed1780) [ 62.991985][ T6289] [ 62.992706][ T6289] The buggy address belongs to the physical page: [ 62.994562][ T6289] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aed1 [ 62.997127][ T6289] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 62.999279][ T6289] page_type: f5(slab) [ 63.000614][ T6289] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 63.003244][ T6289] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 63.005880][ T6289] page dumped because: kasan: bad access detected [ 63.007901][ T6289] page_owner tracks the page as allocated [ 63.009637][ T6289] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5162, tgid 5162 (udevd), ts 21693345557, free_ts 21693166993 [ 63.015673][ T6289] post_alloc_hook+0xfd/0x120 [ 63.017139][ T6289] get_page_from_freelist+0xf48/0x3530 [ 63.018782][ T6289] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 63.020632][ T6289] new_slab+0xa2/0x640 [ 63.021912][ T6289] refill_objects+0xe3/0x410 [ 63.023316][ T6289] __pcs_replace_empty_main+0x376/0x680 [ 63.025045][ T6289] __kmalloc_cache_noprof+0x479/0x6c0 [ 63.026715][ T6289] kernfs_fop_open+0x9fa/0xd50 [ 63.028213][ T6289] do_dentry_open+0x6ab/0x14d0 [ 63.029667][ T6289] vfs_open+0x82/0x3f0 [ 63.030928][ T6289] path_openat+0x2873/0x4280 [ 63.032354][ T6289] do_file_open+0x20e/0x430 [ 63.033760][ T6289] do_sys_openat2+0x10f/0x1e0 [ 63.035183][ T6289] __x64_sys_openat+0x12d/0x210 [ 63.036689][ T6289] do_syscall_64+0x115/0x870 [ 63.038121][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.039968][ T6289] page last free pid 5162 tgid 5162 stack trace: [ 63.041876][ T6289] __free_frozen_pages+0x79f/0x1090 [ 63.043502][ T6289] inode_doinit_with_dentry+0x99d/0x1320 [ 63.045218][ T6289] selinux_d_instantiate+0x26/0x40 [ 63.046796][ T6289] security_d_instantiate+0x14c/0x1b0 [ 63.048474][ T6289] d_splice_alias_ops+0xd7/0x15c0 [ 63.049996][ T6289] kernfs_iop_lookup+0x23f/0x2d0 [ 63.051537][ T6289] __lookup_slow+0x155/0x320 [ 63.052966][ T6289] lookup_slow+0x50/0x70 [ 63.054285][ T6289] path_lookupat+0x5e8/0xc40 [ 63.055748][ T6289] filename_lookup+0x202/0x590 [ 63.057214][ T6289] vfs_statx+0xff/0x3f0 [ 63.058537][ T6289] vfs_fstatat+0x77/0xe0 [ 63.059897][ T6289] __do_sys_newfstatat+0x9d/0x120 [ 63.061457][ T6289] do_syscall_64+0x115/0x870 [ 63.062892][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.064731][ T6289] [ 63.065496][ T6289] Memory state around the buggy address: [ 63.067217][ T6289] ffff88802aed1680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.069718][ T6289] ffff88802aed1700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.072177][ T6289] >ffff88802aed1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.074587][ T6289] ^ [ 63.076909][ T6289] ffff88802aed1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.079347][ T6289] ffff88802aed1880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.081816][ T6289] ================================================================== [ 63.092464][ T6289] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 63.094613][ T6289] CPU: 2 UID: 0 PID: 6289 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(full) [ 63.097162][ T6289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.099912][ T6289] Call Trace: [ 63.100851][ T6289] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 63.101695][ T6289] dump_stack_lvl+0x100/0x190 [ 63.103439][ T6289] vpanic+0x552/0x970 [ 63.104575][ T6289] ? __pfx_vpanic+0x10/0x10 [ 63.105891][ T6289] ? mark_held_locks+0x40/0x70 [ 63.107246][ T6289] ? dummy_free_request+0x8a/0x90 [ 63.108656][ T6289] panic+0xd1/0xe0 [ 63.109738][ T6289] ? __pfx_panic+0x10/0x10 [ 63.110976][ T6289] ? dummy_free_request+0x8a/0x90 [ 63.112398][ T6289] ? preempt_schedule_common+0x42/0xc0 [ 63.113907][ T6289] check_panic_on_warn.cold+0x19/0x34 [ 63.115358][ T6289] end_report.part.0+0x3a/0x90 [ 63.116687][ T6289] kasan_report.cold+0xe/0x18 [ 63.118011][ T6289] ? dummy_free_request+0x8a/0x90 [ 63.119420][ T6289] dummy_free_request+0x8a/0x90 [ 63.120776][ T6289] uvc_function_bind+0x181a/0x1939 [ 63.122203][ T6289] ? __pfx_uvc_function_bind+0x10/0x10 [ 63.123800][ T6289] usb_add_function+0x219/0x890 [ 63.125286][ T6289] configfs_composite_bind+0xd83/0x1960 [ 63.126886][ T6289] gadget_bind_driver+0x28c/0xbf0 [ 63.128341][ T6289] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 63.129904][ T6289] ? __pfx_gadget_bind_driver+0x10/0x10 [ 63.131437][ T6289] really_probe+0x241/0xa60 [ 63.132689][ T6289] __driver_probe_device+0x20e/0x450 [ 63.134176][ T6289] driver_probe_device+0x4a/0x140 [ 63.135561][ T6289] __driver_attach+0x21f/0x5b0 [ 63.136869][ T6289] ? __pfx___driver_attach+0x10/0x10 [ 63.138331][ T6289] bus_for_each_dev+0x13e/0x1d0 [ 63.139689][ T6289] ? __pfx_bus_for_each_dev+0x10/0x10 [ 63.141180][ T6289] ? bus_add_driver+0x2b5/0x5b0 [ 63.142549][ T6289] bus_add_driver+0x305/0x5b0 [ 63.144036][ T6289] driver_register+0x1e2/0x360 [ 63.145544][ T6289] usb_gadget_register_driver_owner+0x132/0x210 [ 63.147615][ T6289] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 63.149443][ T6289] configfs_write_iter+0x302/0x4e0 [ 63.150858][ T6289] vfs_write+0x6ac/0x1050 [ 63.152069][ T6289] ? __pfx_configfs_write_iter+0x10/0x10 [ 63.153653][ T6289] ? __pfx_vfs_write+0x10/0x10 [ 63.155092][ T6289] ksys_write+0x12a/0x250 [ 63.156430][ T6289] ? __pfx_ksys_write+0x10/0x10 [ 63.157831][ T6289] do_syscall_64+0x115/0x870 [ 63.159124][ T6289] ? clear_bhb_loop+0x40/0x90 [ 63.160464][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.162099][ T6289] RIP: 0033:0x7fedbdf9df99 [ 63.163342][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.168641][ T6289] RSP: 002b:00007fedbee31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.170961][ T6289] RAX: ffffffffffffffda RBX: 00007fedbe225fa0 RCX: 00007fedbdf9df99 [ 63.173127][ T6289] RDX: 000000000000000b RSI: 0000200000001b00 RDI: 0000000000000003 [ 63.175329][ T6289] RBP: 00007fedbe034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 63.177487][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.179635][ T6289] R13: 00007fedbe226038 R14: 00007fedbe225fa0 R15: 00007ffd98281cf8 [ 63.181962][ T6289] [ 63.183509][ T6289] Kernel Offset: disabled [ 63.184780][ T6289] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:25:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fdc702 RDX=ffff88802324a540 RSI=ffffffff81fdc6dc RDI=ffff88802324a540 RBP=ffff88806a541240 RSP=ffffc9000165f858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a8249 R14=0000000000000001 R15=ffff88806a43c880 RIP=ffffffff81fdc6e3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd98282058 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ea4fa06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ea4fa06 00007ffc4ea4fa0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d563564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc90003d2f2b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002f R14=ffffffff9b6fa230 R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fedbee316c0 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=00000000590b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd982821e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd982821e6 00007ffd982821ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedbe0354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedbe0354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedbe03564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedbe0354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedbe1f15f8 00007fedbe1f15c8 00007fedbe1f1600 00007fedbe1f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000058073 RBX=ffff88801eed4a80 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a6f32 RDI=ffffffff8c402680 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2f8015 CR3=000000003f16a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d635d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ea4fa06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ea4fa06 00007ffc4ea4fa0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d563564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d57f1600 00007f04d57f15e0 00007f04d57f15e8 00007f04d57f1618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d57f15f8 00007f04d57f15c8 00007f04d57f1600 00007f04d57f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc900006cfab8 RCX=ffffffff92596940 RDX=1ffff920000d9d3d RSI=ffffc900006cfa98 RDI=ffffc900006ce9f0 RBP=ffffc900006c8000 RSP=ffffc900006ce970 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000088f46 R12=ffffc900006cea30 R13=ffffc900006ce9e0 R14=ffffc900006cfab8 R15=ffffc900006cea14 RIP=ffffffff81b879b6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f04d6472ff8 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ea4fa06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ea4fa06 00007ffc4ea4fa0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d563564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d56354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f04d57f15f8 00007f04d57f15c8 00007f04d57f1600 00007f04d57f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000