last executing test programs: 40.870945674s ago: executing program 1 (id=71): r0 = syz_io_uring_setup(0x744e, &(0x7f0000000000)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRESDEC=r1], 0x15) 40.78162826s ago: executing program 1 (id=72): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 40.684454507s ago: executing program 1 (id=73): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 40.644433591s ago: executing program 1 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) chroot(&(0x7f0000000480)='./sys\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 40.549000048s ago: executing program 1 (id=75): pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x8) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 40.290458534s ago: executing program 1 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4040090) 40.15677453s ago: executing program 32 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4040090) 5.480279544s ago: executing program 3 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) io_uring_setup(0x191a, &(0x7f0000000100)={0x0, 0xbe9a, 0x400, 0x3, 0x11f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.317383827s ago: executing program 3 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd569ff4f22ad3557d00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 5.207704149s ago: executing program 3 (id=424): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x6, @loopback, 0x1500, 0x0, 'lc\x00', 0x3d, 0x0, 0x36}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) connect(r0, &(0x7f0000000840)=@in={0x2, 0x1500, @loopback}, 0x80) 4.910197632s ago: executing program 0 (id=428): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c) 4.910015615s ago: executing program 0 (id=430): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001700)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @f_listen={0xbc, 0x2, 0x3, 0x82, 0xd1, 0x7, 0x11, {}, 0xff, 0x7, 0x6, 0x8}}, 0x10) 1.565528901s ago: executing program 3 (id=435): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.5598052s ago: executing program 0 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x0, 0x0) read(r0, &(0x7f0000000400), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x100) 1.465800327s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xf0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.465602294s ago: executing program 0 (id=438): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x80000000) close(0x3) 1.297771849s ago: executing program 0 (id=443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) 1.200716579s ago: executing program 3 (id=444): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, 0x0) syz_open_pts(0xffffffffffffffff, 0x141401) mkdir(&(0x7f0000000080)='mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='mnt\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='mnt/ttyUSB0\x00', 0x44002, 0x0) 1.145229924s ago: executing program 0 (id=446): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 470.711785ms ago: executing program 4 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xf9) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$llc(0x1a, 0x802, 0x0) 470.456658ms ago: executing program 2 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x23, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000aaaaaaaaaaaaaaaaaaaaaa1a08004500001400006000002f9078ac1414aae00000010000655800169078040000000000000086ddff"], 0xfdef) 370.024399ms ago: executing program 4 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000004d0640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYBLOB="5080100090"], 0x0) 369.851538ms ago: executing program 4 (id=457): mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setgroups(0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) 280.765698ms ago: executing program 4 (id=458): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000900)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000940)={r1, 0x0, 0x0, 0x1000000}) 280.529277ms ago: executing program 2 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1001}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1004}, {0x1004}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="fa"]}]}}]}]}]}}]}, 0x64}}, 0x0) 147.96267ms ago: executing program 2 (id=460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) 87.755475ms ago: executing program 2 (id=461): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xf6}, @val={0x0, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x66, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast}}}, 0x22) 87.502068ms ago: executing program 4 (id=462): io_setup(0x6, &(0x7f0000000000)=0x0) clock_gettime(0x0, 0x0) io_pgetevents(r0, 0x863, 0x0, 0x0, &(0x7f0000000640), 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@e={0xff, 0x0, 0x0, 0x9, @SEQ_NOTEON=@note=0x16}) 425.112µs ago: executing program 2 (id=463): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000009c0)="8267", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000a00), 0x5a9, 0x3b00, 0x0, 0xfffffffffffffdfd) 184.361µs ago: executing program 4 (id=464): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000001040)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000010c0)) 0s ago: executing program 2 (id=465): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/20, 0x14}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) kernel console output (not intermixed with test programs): 000000000 R08: 0000000000000000 R09: 0000000000000000 [ 44.425397][ T5960] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 44.425408][ T5960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.425433][ T5960] [ 44.466080][ T5746] Bluetooth: hci0: command tx timeout [ 44.479107][ T5964] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 44.545313][ T5746] Bluetooth: hci3: command tx timeout [ 44.545336][ T5746] Bluetooth: hci2: command tx timeout [ 44.545348][ T5746] Bluetooth: hci1: command tx timeout [ 45.151570][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 45.291013][ T6010] input: syz1 as /devices/virtual/input/input5 [ 45.333656][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.559754][ T1808] usb 7-1: USB disconnect, device number 2 [ 45.600386][ T6020] evm: overlay not supported [ 45.757369][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 45.907093][ T50] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 45.908087][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.908110][ T50] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 45.908142][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.913809][ T6033] FAULT_INJECTION: forcing a failure. [ 45.913809][ T6033] name failslab, interval 1, probability 0, space 0, times 0 [ 45.913828][ T6033] CPU: 2 UID: 0 PID: 6033 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT(full) [ 45.913843][ T6033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.913851][ T6033] Call Trace: [ 45.913856][ T6033] [ 45.913861][ T6033] dump_stack_lvl+0x100/0x190 [ 45.913882][ T6033] should_fail_ex.cold+0x5/0xa [ 45.913898][ T6033] should_failslab+0xc2/0x120 [ 45.913917][ T6033] kmem_cache_alloc_noprof+0x92/0x6a0 [ 45.913935][ T6033] ? vm_area_dup+0x27/0x9d0 [ 45.913948][ T6033] vm_area_dup+0x27/0x9d0 [ 45.913961][ T6033] dup_mmap+0x72d/0x2370 [ 45.913984][ T6033] ? __pfx_dup_mmap+0x10/0x10 [ 45.914000][ T6033] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 45.914018][ T6033] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.914036][ T6033] ? __lock_acquire+0x5c0/0x1f40 [ 45.914060][ T6033] ? lock_acquire+0x1d1/0x380 [ 45.914075][ T6033] ? copy_process+0x4816/0x8380 [ 45.914092][ T6033] copy_process+0x4821/0x8380 [ 45.914111][ T6033] ? __pfx_copy_process+0x10/0x10 [ 45.914122][ T6033] ? futex_wake+0x4ea/0x5e0 [ 45.914144][ T6033] kernel_clone+0x176/0x9d0 [ 45.914157][ T6033] ? __pfx_kernel_clone+0x10/0x10 [ 45.914201][ T6033] __do_compat_sys_ia32_clone+0xd4/0x120 [ 45.914223][ T6033] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 45.914242][ T6033] ? __anon_inode_getfd+0x95/0xe0 [ 45.914268][ T6033] __do_fast_syscall_32+0x13a/0x8b0 [ 45.914283][ T6033] do_fast_syscall_32+0x32/0x70 [ 45.914295][ T6033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 45.914311][ T6033] RIP: 0023:0xf7fb2fec [ 45.914324][ T6033] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 45.914329][ T6033] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 45.914341][ T6033] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 45.914352][ T6033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.914360][ T6033] RBP: 00000000f54665ec R08: 0000000000000000 R09: 0000000000000000 [ 45.914367][ T6033] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 45.914374][ T6033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.914390][ T6033] [ 45.918994][ T50] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 46.545731][ T5746] Bluetooth: hci0: command tx timeout [ 46.585234][ T144] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 46.626162][ T5746] Bluetooth: hci1: command tx timeout [ 46.626202][ T5746] Bluetooth: hci2: command tx timeout [ 46.626215][ T5746] Bluetooth: hci3: command tx timeout [ 46.735759][ T144] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 46.736588][ T144] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.736657][ T144] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 46.736672][ T144] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 46.736690][ T144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.865443][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 46.865451][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 46.890232][ T6050] FAULT_INJECTION: forcing a failure. [ 46.890232][ T6050] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.890265][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 46.890286][ T6050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.890298][ T6050] Call Trace: [ 46.890304][ T6050] [ 46.890312][ T6050] dump_stack_lvl+0x100/0x190 [ 46.890342][ T6050] should_fail_ex.cold+0x5/0xa [ 46.890361][ T6050] ? prepare_alloc_pages+0x16d/0x5b0 [ 46.890391][ T6050] should_fail_alloc_page+0xeb/0x140 [ 46.890419][ T6050] prepare_alloc_pages+0x1f0/0x5b0 [ 46.890449][ T6050] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 46.890474][ T6050] ? prepare_alloc_pages+0x111/0x5b0 [ 46.890502][ T6050] ? rcu_is_watching+0x13/0xc0 [ 46.890521][ T6050] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 46.890543][ T6050] ? lock_release+0x24d/0x310 [ 46.890566][ T6050] ? bpf_ksym_find+0x124/0x1c0 [ 46.890586][ T6050] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 46.890605][ T6050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 46.890630][ T6050] ? is_bpf_text_address+0x94/0x1a0 [ 46.890657][ T6050] ? kernel_text_address+0x8d/0x100 [ 46.890678][ T6050] ? mark_held_locks+0x40/0x70 [ 46.890701][ T6050] ? __kernel_text_address+0xd/0x30 [ 46.890721][ T6050] ? unwind_get_return_address+0x59/0xa0 [ 46.890742][ T6050] ? arch_stack_walk+0xa6/0xf0 [ 46.890763][ T6050] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 46.890796][ T6050] ? stack_trace_save+0x8e/0xc0 [ 46.890821][ T6050] ? __pfx_stack_trace_save+0x10/0x10 [ 46.890867][ T6050] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 46.890896][ T6050] ? policy_nodemask+0xed/0x4f0 [ 46.890922][ T6050] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 46.890946][ T6050] __kasan_populate_vmalloc+0xf0/0x210 [ 46.890966][ T6050] alloc_vmap_area+0x95d/0x2bb0 [ 46.890987][ T6050] ? kasan_save_track+0x14/0x30 [ 46.891005][ T6050] ? __kasan_kmalloc+0xaa/0xb0 [ 46.891021][ T6050] ? __pfx_alloc_vmap_area+0x10/0x10 [ 46.891039][ T6050] ? __get_vm_area_node+0x124/0x350 [ 46.891058][ T6050] __get_vm_area_node+0x1ed/0x350 [ 46.891077][ T6050] __vmalloc_node_range_noprof+0x268/0x1420 [ 46.891096][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.891110][ T6050] ? lock_acquire+0x1d1/0x380 [ 46.891127][ T6050] ? do_alloc_pages+0x39/0x1e0 [ 46.891147][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.891161][ T6050] ? __mutex_lock+0x26c/0x1bd0 [ 46.891172][ T6050] ? do_alloc_pages+0x39/0x1e0 [ 46.891189][ T6050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.891208][ T6050] ? do_alloc_pages+0xb3/0x1e0 [ 46.891226][ T6050] ? do_alloc_pages+0xb3/0x1e0 [ 46.891246][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.891259][ T6050] __vmalloc_node_noprof+0xad/0xf0 [ 46.891277][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.891290][ T6050] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 46.891303][ T6050] __snd_dma_alloc_pages+0xd2/0x150 [ 46.891317][ T6050] snd_dma_alloc_dir_pages+0x151/0x240 [ 46.891337][ T6050] do_alloc_pages+0xe5/0x1e0 [ 46.891365][ T6050] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 46.891397][ T6050] snd_pcm_hw_params+0x1738/0x1cd0 [ 46.891417][ T6050] ? do_raw_spin_lock+0x128/0x260 [ 46.891437][ T6050] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 46.891454][ T6050] ? find_held_lock+0x2b/0x80 [ 46.891476][ T6050] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.891501][ T6050] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.891547][ T6050] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 46.891574][ T6050] snd_pcm_kernel_ioctl+0x104/0x280 [ 46.891593][ T6050] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 46.891633][ T6050] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 46.891657][ T6050] ? __pfx___mutex_lock+0x10/0x10 [ 46.891687][ T6050] ? do_vfs_ioctl+0x226/0x13e0 [ 46.891712][ T6050] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 46.891737][ T6050] snd_pcm_oss_ioctl+0x7aa/0x3790 [ 46.891760][ T6050] ? __fget_files+0x215/0x3d0 [ 46.891781][ T6050] ? hook_file_ioctl_common+0x140/0x440 [ 46.891804][ T6050] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 46.891829][ T6050] ? __fget_files+0x21f/0x3d0 [ 46.891863][ T6050] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 46.891887][ T6050] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 46.891910][ T6050] __do_fast_syscall_32+0x13a/0x8b0 [ 46.891932][ T6050] do_fast_syscall_32+0x32/0x70 [ 46.891951][ T6050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 46.891974][ T6050] RIP: 0023:0xf7fb2fec [ 46.891995][ T6050] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 46.892003][ T6050] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 46.892020][ T6050] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800c5011 [ 46.892031][ T6050] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.892042][ T6050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 46.892053][ T6050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 46.892064][ T6050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.892090][ T6050] [ 46.893615][ T6050] syz.0.66: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 46.893738][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 46.893760][ T6050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.893771][ T6050] Call Trace: [ 46.893778][ T6050] [ 46.893786][ T6050] dump_stack_lvl+0x100/0x190 [ 46.893816][ T6050] warn_alloc.cold+0x9e/0xb2 [ 46.893848][ T6050] ? __pfx_warn_alloc+0x10/0x10 [ 46.893872][ T6050] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.893903][ T6050] ? __get_vm_area_node+0x2f0/0x350 [ 46.893937][ T6050] ? __get_vm_area_node+0x22b/0x350 [ 46.893967][ T6050] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 46.893995][ T6050] ? lock_acquire+0x1d1/0x380 [ 46.894021][ T6050] ? do_alloc_pages+0x39/0x1e0 [ 46.894055][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.894078][ T6050] ? __mutex_lock+0x26c/0x1bd0 [ 46.894095][ T6050] ? do_alloc_pages+0x39/0x1e0 [ 46.894121][ T6050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.894150][ T6050] ? do_alloc_pages+0xb3/0x1e0 [ 46.894203][ T6050] ? do_alloc_pages+0xb3/0x1e0 [ 46.894236][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.894255][ T6050] __vmalloc_node_noprof+0xad/0xf0 [ 46.894281][ T6050] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.894301][ T6050] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 46.894321][ T6050] __snd_dma_alloc_pages+0xd2/0x150 [ 46.894342][ T6050] snd_dma_alloc_dir_pages+0x151/0x240 [ 46.894366][ T6050] do_alloc_pages+0xe5/0x1e0 [ 46.894399][ T6050] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 46.894431][ T6050] snd_pcm_hw_params+0x1738/0x1cd0 [ 46.894450][ T6050] ? do_raw_spin_lock+0x128/0x260 [ 46.894469][ T6050] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 46.894485][ T6050] ? find_held_lock+0x2b/0x80 [ 46.894510][ T6050] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.894536][ T6050] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.894564][ T6050] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 46.894593][ T6050] snd_pcm_kernel_ioctl+0x104/0x280 [ 46.894612][ T6050] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 46.894650][ T6050] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 46.894675][ T6050] ? __pfx___mutex_lock+0x10/0x10 [ 46.894704][ T6050] ? do_vfs_ioctl+0x226/0x13e0 [ 46.894730][ T6050] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 46.894759][ T6050] snd_pcm_oss_ioctl+0x7aa/0x3790 [ 46.894787][ T6050] ? __fget_files+0x215/0x3d0 [ 46.894810][ T6050] ? hook_file_ioctl_common+0x140/0x440 [ 46.894841][ T6050] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 46.894870][ T6050] ? __fget_files+0x21f/0x3d0 [ 46.894899][ T6050] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 46.894927][ T6050] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 46.894952][ T6050] __do_fast_syscall_32+0x13a/0x8b0 [ 46.894975][ T6050] do_fast_syscall_32+0x32/0x70 [ 46.894996][ T6050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 46.895021][ T6050] RIP: 0023:0xf7fb2fec [ 46.895041][ T6050] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 46.895049][ T6050] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 46.895067][ T6050] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800c5011 [ 46.895079][ T6050] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.895107][ T6050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 46.895120][ T6050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 46.895130][ T6050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.895155][ T6050] [ 46.901613][ T6050] Mem-Info: [ 46.901626][ T6050] active_anon:5815 inactive_anon:100 isolated_anon:0 [ 46.901626][ T6050] active_file:7 inactive_file:53679 isolated_file:0 [ 46.901626][ T6050] unevictable:1000 dirty:335 writeback:0 [ 46.901626][ T6050] slab_reclaimable:9583 slab_unreclaimable:53047 [ 46.901626][ T6050] mapped:23745 shmem:1499 pagetables:1077 [ 46.901626][ T6050] sec_pagetables:295 bounce:0 [ 46.901626][ T6050] kernel_misc_reclaimable:0 [ 46.901626][ T6050] free:24632 free_pcp:13329 free_cma:0 [ 46.901703][ T6050] Node 0 active_anon:52kB inactive_anon:28kB active_file:28kB inactive_file:224kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1168kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.901749][ T6050] Node 1 active_anon:23208kB inactive_anon:372kB active_file:0kB inactive_file:214492kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:94864kB dirty:1328kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4960kB pagetables:3140kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.901793][ T6050] Node 0 DMA free:2144kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:48kB free_cma:0kB [ 46.901853][ T6050] lowmem_reserve[]: 0 259 259 259 259 [ 46.901887][ T6050] Node 0 DMA32 free:14208kB boost:0kB min:11704kB low:14628kB high:17552kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52kB inactive_anon:28kB active_file:28kB inactive_file:88kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:5492kB local_pcp:1428kB free_cma:0kB [ 46.901934][ T6050] lowmem_reserve[]: 0 0 0 0 0 [ 46.901962][ T6050] Node 1 DMA32 free:82176kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23208kB inactive_anon:372kB active_file:0kB inactive_file:214492kB unevictable:2000kB writepending:1328kB zspages:1972kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:47552kB local_pcp:9632kB free_cma:0kB [ 46.902009][ T6050] lowmem_reserve[]: 0 0 0 0 0 [ 46.902038][ T6050] Node 0 DMA: 94*4kB (U) 29*8kB (UE) 14*16kB (UE) 15*32kB (UE) 5*64kB (UE) 2*128kB (E) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2144kB [ 46.902158][ T6050] Node 0 DMA32: 2*4kB (ME) 11*8kB (E) 24*16kB (UME) 37*32kB (ME) 22*64kB (ME) 13*128kB (ME) 5*256kB (M) 8*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 14208kB [ 46.902333][ T6050] Node 1 DMA32: 3*4kB (UME) 2*8kB (UE) 21*16kB (UM) 73*32kB (UME) 37*64kB (UM) 18*128kB (UME) 12*256kB (UME) 8*512kB (UM) 8*1024kB (UME) 3*2048kB (UM) 13*4096kB (UM) = 82124kB [ 46.902475][ T6050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.902488][ T6050] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.902501][ T6050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.902514][ T6050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.902527][ T6050] 55294 total pagecache pages [ 46.902533][ T6050] 112 pages in swap cache [ 46.902539][ T6050] Free swap = 122248kB [ 46.902546][ T6050] Total swap = 124996kB [ 46.902552][ T6050] 524155 pages RAM [ 46.902558][ T6050] 0 pages HighMem/MovableOnly [ 46.902564][ T6050] 216924 pages reserved [ 46.902570][ T6050] 0 pages cma reserved [ 47.132344][ T6056] FAULT_INJECTION: forcing a failure. [ 47.132344][ T6056] name failslab, interval 1, probability 0, space 0, times 0 [ 47.132375][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 47.132396][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.132407][ T6056] Call Trace: [ 47.132413][ T6056] [ 47.132421][ T6056] dump_stack_lvl+0x100/0x190 [ 47.132452][ T6056] should_fail_ex.cold+0x5/0xa [ 47.132479][ T6056] should_failslab+0xc2/0x120 [ 47.132509][ T6056] __kmalloc_noprof+0xfc/0x840 [ 47.132535][ T6056] ? anon_vma_name_alloc+0x58/0x100 [ 47.132558][ T6056] anon_vma_name_alloc+0x58/0x100 [ 47.132578][ T6056] set_anon_vma_name+0x214/0x4c0 [ 47.132600][ T6056] ? __pfx_set_anon_vma_name+0x10/0x10 [ 47.132621][ T6056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 47.132652][ T6056] ? cap_task_prctl+0x104/0xa50 [ 47.132674][ T6056] ? static_key_count+0x5a/0x70 [ 47.132695][ T6056] ? security_task_prctl+0x11c/0x160 [ 47.132720][ T6056] __do_sys_prctl+0xb41/0x2270 [ 47.132739][ T6056] ? __pfx___do_sys_prctl+0x10/0x10 [ 47.132768][ T6056] __do_fast_syscall_32+0x13a/0x8b0 [ 47.132793][ T6056] do_fast_syscall_32+0x32/0x70 [ 47.132813][ T6056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.132837][ T6056] RIP: 0023:0xf7f66fec [ 47.132857][ T6056] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 47.132866][ T6056] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ac [ 47.132885][ T6056] RAX: ffffffffffffffda RBX: 0000000053564d41 RCX: 0000000000000000 [ 47.132897][ T6056] RDX: 0000000080ffd000 RSI: 0000000000002000 RDI: 0000000080000380 [ 47.132909][ T6056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.132920][ T6056] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 47.132931][ T6056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.132952][ T6056] [ 47.159699][ T144] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 47.159712][ T144] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 47.173258][ T144] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 47.183594][ T144] usb 7-1: USB disconnect, device number 3 [ 47.198889][ T6018] FAULT_INJECTION: forcing a failure. [ 47.198889][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 47.198910][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 47.198924][ T6018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.198932][ T6018] Call Trace: [ 47.198936][ T6018] [ 47.198941][ T6018] dump_stack_lvl+0x100/0x190 [ 47.198960][ T6018] should_fail_ex.cold+0x5/0xa [ 47.198977][ T6018] should_failslab+0xc2/0x120 [ 47.198997][ T6018] __kmalloc_cache_noprof+0x91/0x6d0 [ 47.199010][ T6018] ? kasan_save_stack+0x3f/0x50 [ 47.199026][ T6018] ? dummy_urb_enqueue+0xa3/0x880 [ 47.199042][ T6018] dummy_urb_enqueue+0xa3/0x880 [ 47.199053][ T6018] ? do_sys_openat2+0x10f/0x1e0 [ 47.199064][ T6018] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 47.199081][ T6018] ? do_int80_emulation+0x166/0x650 [ 47.199093][ T6018] ? asm_int80_emulation+0x1a/0x20 [ 47.199107][ T6018] usb_hcd_submit_urb+0x268/0x2150 [ 47.199130][ T6018] usb_submit_urb+0x827/0x19b0 [ 47.199144][ T6018] ? __init_swait_queue_head+0xca/0x150 [ 47.199158][ T6018] usb_start_wait_urb+0x10e/0x580 [ 47.199172][ T6018] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 47.199189][ T6018] ? __asan_memset+0x23/0x50 [ 47.199206][ T6018] usb_control_msg+0x328/0x4b0 [ 47.199220][ T6018] ? __pfx_usb_control_msg+0x10/0x10 [ 47.199233][ T6018] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.199269][ T6018] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.199289][ T6018] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 47.199310][ T6018] idmouse_open+0x8a2/0xd90 [ 47.199331][ T6018] ? down_read+0x13b/0x4c0 [ 47.199343][ T6018] ? __pfx_idmouse_open+0x10/0x10 [ 47.199361][ T6018] ? do_raw_spin_lock+0x128/0x260 [ 47.199374][ T6018] ? find_held_lock+0x2b/0x80 [ 47.199388][ T6018] ? chrdev_open+0x589/0x6a0 [ 47.199404][ T6018] ? __pfx_idmouse_open+0x10/0x10 [ 47.199422][ T6018] usb_open+0x189/0x220 [ 47.199433][ T6018] ? __pfx_usb_open+0x10/0x10 [ 47.199442][ T6018] chrdev_open+0x234/0x6a0 [ 47.199459][ T6018] ? __pfx_chrdev_open+0x10/0x10 [ 47.199475][ T6018] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 47.199490][ T6018] do_dentry_open+0x6ab/0x14d0 [ 47.199504][ T6018] ? __pfx_chrdev_open+0x10/0x10 [ 47.199523][ T6018] vfs_open+0x82/0x3f0 [ 47.199536][ T6018] path_openat+0x19fa/0x2440 [ 47.199555][ T6018] ? __pfx_path_openat+0x10/0x10 [ 47.199575][ T6018] do_file_open+0x20e/0x430 [ 47.199592][ T6018] ? __pfx_do_file_open+0x10/0x10 [ 47.199619][ T6018] ? _raw_spin_unlock+0x28/0x50 [ 47.199634][ T6018] ? alloc_fd+0x471/0x7a0 [ 47.199654][ T6018] do_sys_openat2+0x10f/0x1e0 [ 47.199665][ T6018] ? __pfx_do_sys_openat2+0x10/0x10 [ 47.199679][ T6018] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 47.199696][ T6018] __ia32_compat_sys_openat+0x12d/0x210 [ 47.199709][ T6018] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 47.199728][ T6018] do_int80_emulation+0x166/0x650 [ 47.199741][ T6018] asm_int80_emulation+0x1a/0x20 [ 47.199752][ T6018] RIP: 0023:0xf71477eb [ 47.199763][ T6018] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 47.199780][ T6018] RSP: 002b:00000000f540603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 47.199792][ T6018] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5406100 [ 47.199799][ T6018] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.199806][ T6018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.199813][ T6018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 47.199820][ T6018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.199835][ T6018] [ 47.214305][ T25] usb 8-1: USB disconnect, device number 2 [ 47.226054][ T25] idmouse 8-1:1.0: disconnected [ 47.263779][ T6060] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 47.390163][ T6066] process 'syz.1.73' launched './file0' with NULL argv: empty string added [ 47.767686][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.841128][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.920731][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.965549][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 47.985291][ T1808] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 48.048909][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.050119][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.051030][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.063885][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.065411][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.146078][ T1808] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 48.147211][ T1808] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 48.147249][ T1808] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 48.147288][ T1808] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 48.147330][ T1808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.151062][ T6070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.151218][ T6070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.155847][ T1808] pl2303 7-1:1.0: pl2303 converter detected [ 48.168185][ T1808] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 48.537096][ T6070] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 48.537472][ T6070] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 48.538764][ T6070] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 48.539207][ T6070] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 48.849092][ T6070] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 48.854595][ T6070] pl2303 ttyUSB0: error sending break = -32 [ 48.968466][ T30] usb 7-1: USB disconnect, device number 4 [ 48.979748][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.984918][ T30] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 48.992136][ T30] pl2303 7-1:1.0: device disconnected [ 49.443711][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.487612][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.509706][ T12] bond0 (unregistering): Released all slaves [ 49.536121][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.558791][ T6074] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.681161][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 49.682232][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 49.836668][ T6107] Zero length message leads to an empty skb [ 49.991765][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.021192][ T6118] Illegal XDP return value 4294967294 on prog (id 12) dev syz_tun, expect packet loss! [ 50.155270][ T5739] Bluetooth: hci1: command tx timeout [ 50.188854][ T6127] input: syz0 as /devices/virtual/input/input6 [ 50.421140][ T12] hsr_slave_0: left promiscuous mode [ 50.427458][ T12] hsr_slave_1: left promiscuous mode [ 50.428088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.428113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.429095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.429104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.441784][ T12] veth1_macvtap: left promiscuous mode [ 50.441835][ T12] veth0_macvtap: left promiscuous mode [ 50.441912][ T12] veth1_vlan: left promiscuous mode [ 50.441952][ T12] veth0_vlan: left promiscuous mode [ 50.701978][ T12] team0 (unregistering): Port device team_slave_1 removed [ 50.725182][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.733080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 50.823547][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 50.823925][ T6147] bridge_slaveB: renamed from lo (while UP) [ 50.846245][ T1808] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.877038][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 50.879441][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.966909][ T5841] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.046841][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.046970][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.047101][ T6074] bridge_slave_0: entered allmulticast mode [ 51.048624][ T6074] bridge_slave_0: entered promiscuous mode [ 51.052290][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.052407][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.052528][ T6074] bridge_slave_1: entered allmulticast mode [ 51.054061][ T6074] bridge_slave_1: entered promiscuous mode [ 51.103382][ T10] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 51.115277][ T5841] usb 8-1: Using ep0 maxpacket: 32 [ 51.116272][ T5841] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 51.117283][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.117306][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.117326][ T5841] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 51.117376][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.120854][ T5841] usb 8-1: config 0 descriptor?? [ 51.212560][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.218589][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.259796][ T6074] team0: Port device team_slave_0 added [ 51.279768][ T6074] team0: Port device team_slave_1 added [ 51.310205][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.310211][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.310223][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.311162][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.311169][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.311181][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.370229][ T6074] hsr_slave_0: entered promiscuous mode [ 51.370982][ T6074] hsr_slave_1: entered promiscuous mode [ 51.384722][ T6074] debugfs: 'hsr0' already exists in 'hsr' [ 51.384732][ T6074] Cannot create hsr debugfs directory [ 51.472043][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 51.483268][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 51.590753][ T5841] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0002/input/input7 [ 51.630063][ T6074] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.640717][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.662723][ T6074] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.668036][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.668466][ T6074] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.680270][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.685745][ T6074] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.688749][ T5841] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0002/input/input8 [ 51.721295][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.723749][ T5841] kye 0003:0458:5011.0002: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 51.818295][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.838735][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.868306][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.868817][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.878207][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.878254][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.225229][ T5739] Bluetooth: hci1: command tx timeout [ 52.268382][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.708118][ C0] kye 0003:0458:5011.0002: usb_submit_urb(ctrl) failed: -1 [ 52.732865][ T6074] veth0_vlan: entered promiscuous mode [ 52.745365][ T6074] veth1_vlan: entered promiscuous mode ** 1099 printk messages dropped ** ** 116 printk messages dropped ** ** 117 printk messages dropped ** ** 149 printk messages dropped ** ** 126 printk messages dropped ** ** 180 printk messages dropped ** ** 219 printk messages dropped ** ** 201 printk messages dropped ** ** 196 printk messages dropped ** ** 182 printk messages dropped ** ** 195 printk messages dropped ** ** 127 printk messages dropped ** ** 135 printk messages dropped ** ** 124 printk messages dropped ** ** 110 printk messages dropped ** ** 101 printk messages dropped ** ** 101 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 126 printk messages dropped ** ** 106 printk messages dropped ** ** 75 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 127 printk messages dropped ** ** 131 printk messages dropped ** ** 155 printk messages dropped ** ** 201 printk messages dropped ** ** 212 printk messages dropped ** ** 216 printk messages dropped ** ** 137 printk messages dropped ** ** 7 printk messages dropped ** ** 10 printk messages dropped ** ** 3 printk messages dropped ** ** 4 printk messages dropped ** ** 8 printk messages dropped ** ** 8 printk messages dropped ** [ 52.788067][ T6074] veth0_macvtap: entered promiscuous mode [ 52.793143][ T6074] veth1_macvtap: entered promiscuous mode [ 52.810908][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.817012][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.915671][ T5778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.915697][ T5778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.915765][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.915785][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.016670][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.016681][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.059685][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.059700][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.130987][ T6247] syz.2.102 uses obsolete (PF_INET,SOCK_PACKET) [ 53.435156][ C3] net_ratelimit: 215 callbacks suppressed [ 53.491288][ T5841] usb 8-1: USB disconnect, device number 3 [ 53.537023][ T6267] bridge0: port 3(syz_tun) entered blocking state [ 53.537068][ T6267] bridge0: port 3(syz_tun) entered disabled state [ 53.537224][ T6267] syz_tun: entered allmulticast mode [ 53.551400][ T6267] syz_tun: entered promiscuous mode [ 53.556078][ T6267] bridge0: port 3(syz_tun) entered blocking state [ 53.556165][ T6267] bridge0: port 3(syz_tun) entered forwarding state [ 53.839878][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 53.839892][ T43] audit: type=1326 audit(1792074182.344:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.840005][ T43] audit: type=1326 audit(1792074182.344:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.841796][ T43] audit: type=1326 audit(1792074182.344:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.841976][ T43] audit: type=1326 audit(1792074182.344:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.842130][ T43] audit: type=1326 audit(1792074182.344:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.842941][ T43] audit: type=1326 audit(1792074182.344:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.843624][ T43] audit: type=1326 audit(1792074182.344:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.846953][ T43] audit: type=1326 audit(1792074182.354:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.849053][ T43] audit: type=1326 audit(1792074182.354:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 53.849235][ T43] audit: type=1326 audit(1792074182.354:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6273 comm="syz.4.112" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 54.125383][ T2392] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 54.192779][ T6285] FAULT_INJECTION: forcing a failure. [ 54.192779][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 54.192795][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 54.192809][ T6285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.192816][ T6285] Call Trace: [ 54.192821][ T6285] [ 54.192826][ T6285] dump_stack_lvl+0x100/0x190 [ 54.192846][ T6285] should_fail_ex.cold+0x5/0xa [ 54.192862][ T6285] should_failslab+0xc2/0x120 [ 54.192882][ T6285] __kmalloc_noprof+0xfc/0x840 [ 54.192898][ T6285] ? public_key_verify_signature+0x2ab/0x910 [ 54.192920][ T6285] public_key_verify_signature+0x2ab/0x910 [ 54.192940][ T6285] ? __pfx_public_key_verify_signature+0x10/0x10 [ 54.192964][ T6285] ? asymmetric_key_generate_id+0x7e/0x180 [ 54.192983][ T6285] x509_check_for_self_signed+0x325/0x510 [ 54.193003][ T6285] x509_cert_parse+0x60c/0x910 [ 54.193022][ T6285] x509_key_preparse+0x65/0x9c0 [ 54.193042][ T6285] asymmetric_key_preparse+0xce/0x1d0 [ 54.193057][ T6285] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 54.193073][ T6285] __key_create_or_update+0x413/0xe30 [ 54.193091][ T6285] ? __pfx___key_create_or_update+0x10/0x10 [ 54.193107][ T6285] ? lookup_user_key+0x3f3/0x1300 [ 54.193127][ T6285] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 54.193144][ T6285] key_create_or_update+0x42/0x60 [ 54.193161][ T6285] __do_sys_add_key+0x2e8/0x460 [ 54.193180][ T6285] ? __pfx___do_sys_add_key+0x10/0x10 [ 54.193203][ T6285] __do_fast_syscall_32+0x13a/0x8b0 [ 54.193218][ T6285] do_fast_syscall_32+0x32/0x70 [ 54.193230][ T6285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.193244][ T6285] RIP: 0023:0xf7f98fec [ 54.193264][ T6285] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 54.193270][ T6285] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 54.193282][ T6285] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 54.193290][ T6285] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 54.193298][ T6285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.193306][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.193313][ T6285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.193328][ T6285] [ 54.275270][ T2392] usb 9-1: Using ep0 maxpacket: 32 [ 54.275740][ T2392] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 54.278221][ T2392] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.278234][ T2392] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.278245][ T2392] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 54.278274][ T2392] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.279622][ T2392] usb 9-1: config 0 descriptor?? [ 54.307557][ T5739] Bluetooth: hci1: command tx timeout [ 54.577328][ T6293] bridge1: entered promiscuous mode [ 54.577337][ T6293] bridge1: entered allmulticast mode [ 54.582902][ T6293] team0: Port device bridge1 added [ 54.619740][ T6293] bridge0: port 3(team0) entered blocking state [ 54.620154][ T6293] bridge0: port 3(team0) entered disabled state [ 54.621001][ T6293] team0: entered allmulticast mode [ 54.621010][ T6293] team_slave_0: entered allmulticast mode [ 54.621029][ T6293] team_slave_1: entered allmulticast mode [ 54.624986][ T6293] team0: entered promiscuous mode [ 54.624996][ T6293] team_slave_0: entered promiscuous mode [ 54.625416][ T6293] team_slave_1: entered promiscuous mode [ 54.627588][ T6293] bridge0: port 3(team0) entered blocking state [ 54.628012][ T6293] bridge0: port 3(team0) entered forwarding state [ 54.709253][ T2392] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0003/input/input9 [ 54.770998][ T2392] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0003/input/input10 [ 54.789729][ T2392] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 55.104034][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 55.105972][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 55.715313][ C1] kye 0003:0458:5011.0003: usb_submit_urb(ctrl) failed: -1 [ 56.311249][ T6321] bridge1: entered promiscuous mode [ 56.311263][ T6321] bridge1: entered allmulticast mode [ 56.315414][ T6321] team0: Port device bridge1 added [ 56.354573][ T6321] bridge0: port 4(team0) entered blocking state [ 56.354710][ T6321] bridge0: port 4(team0) entered disabled state [ 56.354878][ T6321] team0: entered allmulticast mode [ 56.354893][ T6321] team_slave_0: entered allmulticast mode [ 56.354910][ T6321] team_slave_1: entered allmulticast mode [ 56.359247][ T6321] team0: entered promiscuous mode [ 56.359260][ T6321] team_slave_0: entered promiscuous mode [ 56.359409][ T6321] team_slave_1: entered promiscuous mode [ 56.360306][ T6321] bridge0: port 4(team0) entered blocking state [ 56.360382][ T6321] bridge0: port 4(team0) entered forwarding state [ 56.387575][ T5739] Bluetooth: hci1: command tx timeout [ 56.512144][ T144] usb 9-1: USB disconnect, device number 2 [ 56.783927][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 56.950710][ T1808] usb 5-1: USB disconnect, device number 2 [ 57.743985][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 57.744810][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 57.827876][ T6366] ubi0: attaching mtd0 [ 57.834537][ T6366] ubi0: scanning is finished [ 57.834547][ T6366] ubi0: empty MTD device detected [ 57.901056][ T6374] bridge1: entered promiscuous mode [ 57.901065][ T6374] bridge1: entered allmulticast mode [ 57.902686][ T6374] team0: Port device bridge1 added [ 57.933306][ T6374] bridge0: port 3(team0) entered blocking state [ 57.933466][ T6374] bridge0: port 3(team0) entered disabled state [ 57.933597][ T6374] team0: entered allmulticast mode [ 57.933605][ T6374] team_slave_0: entered allmulticast mode [ 57.933616][ T6374] team_slave_1: entered allmulticast mode [ 57.934852][ T6374] team0: entered promiscuous mode [ 57.934859][ T6374] team_slave_0: entered promiscuous mode [ 57.934942][ T6374] team_slave_1: entered promiscuous mode [ 57.935852][ T6374] bridge0: port 3(team0) entered blocking state [ 57.935894][ T6374] bridge0: port 3(team0) entered forwarding state [ 57.997761][ T6366] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 57.997781][ T6366] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 57.997797][ T6366] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 57.997812][ T6366] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 57.997829][ T6366] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 57.997849][ T6366] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 57.997865][ T6366] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2953529480 [ 57.997884][ T6366] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 57.998995][ T6381] ubi0: background thread "ubi_bgt0d" started, PID 6381 [ 58.032996][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 58.077330][ T6389] FAULT_INJECTION: forcing a failure. [ 58.077330][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 58.077349][ T6389] CPU: 2 UID: 0 PID: 6389 Comm: syz.4.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.077365][ T6389] Tainted: [L]=SOFTLOCKUP [ 58.077369][ T6389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.077376][ T6389] Call Trace: [ 58.077381][ T6389] [ 58.077386][ T6389] dump_stack_lvl+0x100/0x190 [ 58.077406][ T6389] should_fail_ex.cold+0x5/0xa [ 58.077423][ T6389] should_failslab+0xc2/0x120 [ 58.077442][ T6389] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.077459][ T6389] ? sk_prot_alloc+0x60/0x2a0 [ 58.077500][ T6389] sk_prot_alloc+0x60/0x2a0 [ 58.077519][ T6389] sk_alloc+0x36/0xe80 [ 58.077534][ T6389] kcm_create+0xfc/0x6a0 ** 82 printk messages dropped ** ** 97 printk messages dropped ** ** 164 printk messages dropped ** ** 117 printk messages dropped ** [ 58.086886][ T2392] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.241641][ T2392] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 58.247860][ T2392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.458810][ T2392] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 58.545237][ C1] net_ratelimit: 236 callbacks suppressed [ 58.921781][ T6402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.640851][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 59.650695][ T6429] FAULT_INJECTION: forcing a failure. [ 59.650695][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 59.651214][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.4.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.651234][ T6429] Tainted: [L]=SOFTLOCKUP [ 59.651239][ T6429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.651246][ T6429] Call Trace: [ 59.651251][ T6429] [ 59.651257][ T6429] dump_stack_lvl+0x100/0x190 [ 59.651279][ T6429] should_fail_ex.cold+0x5/0xa [ 59.651296][ T6429] should_failslab+0xc2/0x120 [ 59.651315][ T6429] __kmalloc_noprof+0xfc/0x840 [ 59.651331][ T6429] ? inode_set_ctime_current+0x283/0x850 [ 59.651348][ T6429] ? security_inode_init_security+0x113/0x370 [ 59.651370][ T6429] security_inode_init_security+0x113/0x370 [ 59.651388][ T6429] ? __pfx_bpf_fs_initxattrs+0x10/0x10 [ 59.651407][ T6429] ? __pfx_security_inode_init_security+0x10/0x10 [ 59.651430][ T6429] bpf_mkobj_ops+0xdd/0x2a0 [ 59.651444][ T6429] bpf_fill_super+0x5e1/0x960 [ 59.651458][ T6429] ? __pfx_bpf_fill_super+0x10/0x10 [ 59.651471][ T6429] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 59.651486][ T6429] ? rcu_is_watching+0x13/0xc0 [ 59.651500][ T6429] ? apparmor_capable+0x1d7/0x4d0 [ 59.651514][ T6429] ? __pfx_bpf_fill_super+0x10/0x10 [ 59.651527][ T6429] get_tree_nodev+0xdd/0x190 [ 59.651542][ T6429] vfs_get_tree+0x92/0x320 [ 59.651555][ T6429] path_mount+0x7d0/0x2850 [ 59.651587][ T6429] ? __pfx_path_mount+0x10/0x10 [ 59.651598][ T6429] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.651618][ T6429] ? putname+0xb1/0x110 [ 59.651635][ T6429] ? kmem_cache_free+0x127/0x6c0 [ 59.651655][ T6429] ? __ia32_sys_mount+0x292/0x310 [ 59.651666][ T6429] __ia32_sys_mount+0x292/0x310 [ 59.651677][ T6429] ? __pfx___ia32_sys_mount+0x10/0x10 [ 59.651693][ T6429] __do_fast_syscall_32+0x13a/0x8b0 [ 59.651709][ T6429] do_fast_syscall_32+0x32/0x70 [ 59.651722][ T6429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.651737][ T6429] RIP: 0023:0xf73eefec [ 59.651751][ T6429] Code: Unable to access opcode bytes at 0xf73eefc2. [ 59.651757][ T6429] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 59.651769][ T6429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 59.651776][ T6429] RDX: 00000000800000c0 RSI: 0000000000000040 RDI: 0000000000000000 [ 59.651783][ T6429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.651790][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.651797][ T6429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.651813][ T6429] [ 60.757566][ T6446] batman_adv: batadv0: Adding interface: syzkaller0 [ 60.757572][ T6446] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.757587][ T6446] batman_adv: batadv0: Interface activated: syzkaller0 [ 60.761290][ T6442] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 60.769130][ T6442] batman_adv: batadv0: Removing interface: syzkaller0 [ 61.556819][ T6462] ALSA: seq fatal error: cannot create timer (-22) [ 61.620163][ T6467] FAULT_INJECTION: forcing a failure. [ 61.620163][ T6467] name failslab, interval 1, probability 0, space 0, times 0 [ 61.620184][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.4.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.620200][ T6467] Tainted: [L]=SOFTLOCKUP [ 61.620205][ T6467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.620213][ T6467] Call Trace: [ 61.620218][ T6467] [ 61.620223][ T6467] dump_stack_lvl+0x100/0x190 [ 61.620244][ T6467] should_fail_ex.cold+0x5/0xa [ 61.620264][ T6467] should_failslab+0xc2/0x120 [ 61.620296][ T6467] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.620311][ T6467] ? shrinker_alloc+0xf5/0xd00 [ 61.620327][ T6467] shrinker_alloc+0xf5/0xd00 [ 61.620343][ T6467] ? mark_held_locks+0x40/0x70 [ 61.620361][ T6467] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 61.620380][ T6467] ? rcu_is_watching+0x13/0xc0 [ 61.620394][ T6467] ? __pfx_shrinker_alloc+0x10/0x10 [ 61.620409][ T6467] ? lockdep_init_map_type+0x5c/0x250 [ 61.620427][ T6467] ? lockdep_init_map_type+0x5c/0x250 [ 61.620445][ T6467] ? __raw_spin_lock_init+0x3a/0x110 [ 61.620457][ T6467] ? __init_rwsem+0x10e/0x180 [ 61.620470][ T6467] sget_fc+0x97d/0x1f70 [ 61.620488][ T6467] ? rcu_is_watching+0x13/0xc0 [ 61.620502][ T6467] ? __pfx_set_anon_super_fc+0x10/0x10 [ 61.620514][ T6467] ? kfree+0x1e5/0x6d0 [ 61.620526][ T6467] ? __pfx_sget_fc+0x10/0x10 [ 61.620542][ T6467] ? rcu_is_watching+0x13/0xc0 [ 61.620555][ T6467] ? apparmor_capable+0x1d7/0x4d0 [ 61.620570][ T6467] ? __pfx_binderfs_fill_super+0x10/0x10 [ 61.620588][ T6467] get_tree_nodev+0x28/0x190 [ 61.620603][ T6467] vfs_get_tree+0x92/0x320 [ 61.620615][ T6467] path_mount+0x7d0/0x2850 [ 61.620630][ T6467] ? __pfx_path_mount+0x10/0x10 [ 61.620640][ T6467] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.620665][ T6467] ? putname+0xb1/0x110 [ 61.620680][ T6467] ? kmem_cache_free+0x127/0x6c0 [ 61.620699][ T6467] ? __ia32_sys_mount+0x292/0x310 [ 61.620710][ T6467] __ia32_sys_mount+0x292/0x310 [ 61.620722][ T6467] ? __pfx___ia32_sys_mount+0x10/0x10 [ 61.620739][ T6467] __do_fast_syscall_32+0x13a/0x8b0 [ 61.620754][ T6467] do_fast_syscall_32+0x32/0x70 [ 61.620767][ T6467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.620783][ T6467] RIP: 0023:0xf73eefec [ 61.620797][ T6467] Code: Unable to access opcode bytes at 0xf73eefc2. [ 61.620802][ T6467] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 61.620814][ T6467] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 00000000800000c0 [ 61.620822][ T6467] RDX: 0000000080000100 RSI: 0000000000000080 RDI: 0000000000000000 [ 61.620829][ T6467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.620836][ T6467] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.620843][ T6467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.620858][ T6467] [ 61.896411][ T6482] vivid-004: disconnect [ 61.912604][ T6482] vivid-004: reconnect [ 62.505480][ T144] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 62.656914][ T144] usb 7-1: not running at top speed; connect to a high speed hub [ 62.656934][ T144] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 62.657975][ T144] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 62.658055][ T144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.662030][ T6501] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.663288][ T144] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 62.689933][ T144] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 62.890679][ T1808] usb 7-1: USB disconnect, device number 5 [ 62.900956][ T1808] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 62.901353][ T1808] cyberjack 7-1:1.0: device disconnected [ 63.255481][ T2392] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.425315][ T2392] usb 9-1: Using ep0 maxpacket: 16 [ 63.426633][ T2392] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 63.427440][ T2392] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.427456][ T2392] usb 9-1: config 0 interface 0 has no altsetting 0 [ 63.429064][ T2392] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.429073][ T2392] usb 9-1: Product: syz [ 63.429081][ T2392] usb 9-1: Manufacturer: syz [ 63.429089][ T2392] usb 9-1: SerialNumber: syz [ 63.430621][ T2392] usb 9-1: config 0 descriptor?? [ 63.585253][ C1] net_ratelimit: 317 callbacks suppressed [ 63.688688][ T2392] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input11 [ 63.987305][ T2392] rc_core: IR keymap rc-imon-pad not found [ 63.987314][ T2392] Registered IR keymap rc-empty [ 63.987412][ T2392] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 63.987420][ T2392] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 64.076903][ T2392] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 64.080635][ T2392] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input12 [ 64.086576][ T2392] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:3> initialized [ 64.244146][ T144] usb 8-1: USB disconnect, device number 4 [ 64.266837][ C3] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 64.267513][ T6242] usb 9-1: USB disconnect, device number 3 [ 64.436336][ T6584] Bluetooth: MGMT ver 1.23 [ 64.436351][ T6584] Bluetooth: hci0: unsupported parameter 5135 [ 64.436358][ T6584] Bluetooth: hci0: unsupported parameter 8192 [ 64.436365][ T6584] Bluetooth: hci0: unsupported parameter 5135 [ 64.436373][ T6584] Bluetooth: hci0: unsupported parameter 8192 [ 64.534881][ T6590] FAULT_INJECTION: forcing a failure. [ 64.534881][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 64.534914][ T6590] CPU: 1 UID: 0 PID: 6590 Comm: syz.2.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.534939][ T6590] Tainted: [L]=SOFTLOCKUP [ 64.534946][ T6590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.534957][ T6590] Call Trace: [ 64.534964][ T6590] [ 64.534971][ T6590] dump_stack_lvl+0x100/0x190 [ 64.535002][ T6590] should_fail_ex.cold+0x5/0xa [ 64.535028][ T6590] should_failslab+0xc2/0x120 [ 64.535058][ T6590] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 64.535105][ T6590] ? alloc_vmap_area+0x640/0x2bb0 [ 64.535144][ T6590] alloc_vmap_area+0x640/0x2bb0 [ 64.535179][ T6590] ? kasan_save_track+0x14/0x30 [ 64.535206][ T6590] ? __kasan_kmalloc+0xaa/0xb0 [ 64.535230][ T6590] ? __pfx_alloc_vmap_area+0x10/0x10 [ 64.535256][ T6590] ? __get_vm_area_node+0x124/0x350 [ 64.535286][ T6590] __get_vm_area_node+0x1ed/0x350 [ 64.535317][ T6590] __vmalloc_node_range_noprof+0x268/0x1420 [ 64.535346][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.535366][ T6590] ? do_fast_syscall_32+0x32/0x70 [ 64.535384][ T6590] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.535415][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.535439][ T6590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 64.535477][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.535496][ T6590] __vmalloc_node_noprof+0xad/0xf0 [ 64.535523][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.535547][ T6590] __vmalloc_noprof+0xa3/0x120 [ 64.535563][ T6590] ? __pfx___vmalloc_noprof+0x10/0x10 [ 64.535580][ T6590] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.535601][ T6590] ? down_write_killable+0x152/0x240 [ 64.535620][ T6590] ? alloc_ldt_struct+0x5d/0x1b0 [ 64.535643][ T6590] alloc_ldt_struct+0x14f/0x1b0 [ 64.535664][ T6590] write_ldt+0x62b/0xd40 [ 64.535690][ T6590] ? __pfx_write_ldt+0x10/0x10 [ 64.535711][ T6590] ? xfd_validate_state+0x129/0x190 [ 64.535748][ T6590] __ia32_sys_modify_ldt+0xb0/0x170 [ 64.535770][ T6590] __do_fast_syscall_32+0x13a/0x8b0 [ 64.535792][ T6590] do_fast_syscall_32+0x32/0x70 [ 64.535812][ T6590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.535834][ T6590] RIP: 0023:0xf7f98fec [ 64.535855][ T6590] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 64.535864][ T6590] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000007b [ 64.535883][ T6590] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080000540 [ 64.535896][ T6590] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.535908][ T6590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.535921][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.535933][ T6590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.535959][ T6590] [ 64.545982][ T6590] syz.2.206: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 64.546031][ T6590] CPU: 1 UID: 0 PID: 6590 Comm: syz.2.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.546048][ T6590] Tainted: [L]=SOFTLOCKUP [ 64.546054][ T6590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.546061][ T6590] Call Trace: [ 64.546066][ T6590] [ 64.546071][ T6590] dump_stack_lvl+0x100/0x190 [ 64.546129][ T6590] warn_alloc.cold+0x9e/0xb2 [ 64.546150][ T6590] ? __pfx_warn_alloc+0x10/0x10 [ 64.546164][ T6590] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.546185][ T6590] ? __get_vm_area_node+0x2f0/0x350 [ 64.546208][ T6590] ? __get_vm_area_node+0x22b/0x350 [ 64.546230][ T6590] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 64.546249][ T6590] ? do_fast_syscall_32+0x32/0x70 [ 64.546260][ T6590] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.546279][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.546296][ T6590] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 64.546322][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.546335][ T6590] __vmalloc_node_noprof+0xad/0xf0 [ 64.546353][ T6590] ? alloc_ldt_struct+0x14f/0x1b0 [ 64.546367][ T6590] __vmalloc_noprof+0xa3/0x120 [ 64.546378][ T6590] ? __pfx___vmalloc_noprof+0x10/0x10 [ 64.546389][ T6590] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.546403][ T6590] ? down_write_killable+0x152/0x240 [ 64.546415][ T6590] ? alloc_ldt_struct+0x5d/0x1b0 [ 64.546431][ T6590] alloc_ldt_struct+0x14f/0x1b0 [ 64.546444][ T6590] write_ldt+0x62b/0xd40 [ 64.546460][ T6590] ? __pfx_write_ldt+0x10/0x10 [ 64.546474][ T6590] ? xfd_validate_state+0x129/0x190 [ 64.546497][ T6590] __ia32_sys_modify_ldt+0xb0/0x170 [ 64.546511][ T6590] __do_fast_syscall_32+0x13a/0x8b0 [ 64.546525][ T6590] do_fast_syscall_32+0x32/0x70 [ 64.546537][ T6590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.546551][ T6590] RIP: 0023:0xf7f98fec [ 64.546564][ T6590] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 64.546570][ T6590] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000007b [ 64.546581][ T6590] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080000540 [ 64.546588][ T6590] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.546595][ T6590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.546602][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.546608][ T6590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.546623][ T6590] [ 64.546654][ T6590] Mem-Info: [ 64.546662][ T6590] active_anon:6429 inactive_anon:9 isolated_anon:0 [ 64.546662][ T6590] active_file:1818 inactive_file:40644 isolated_file:0 [ 64.546662][ T6590] unevictable:1600 dirty:502 writeback:0 [ 64.546662][ T6590] slab_reclaimable:7689 slab_unreclaimable:55364 [ 64.546662][ T6590] mapped:24581 shmem:1503 pagetables:1299 [ 64.546662][ T6590] sec_pagetables:297 bounce:0 [ 64.546662][ T6590] kernel_misc_reclaimable:0 [ 64.546662][ T6590] free:21019 free_pcp:7630 free_cma:0 [ 64.546691][ T6590] Node 0 active_anon:76kB inactive_anon:36kB active_file:28kB inactive_file:1424kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1204kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 64.546721][ T6590] Node 1 active_anon:25640kB inactive_anon:0kB active_file:7244kB inactive_file:161152kB unevictable:4400kB isolated(anon):0kB isolated(file):0kB mapped:98208kB dirty:1996kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5580kB pagetables:3992kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 64.546752][ T6590] Node 0 DMA free:3896kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 64.546786][ T6590] lowmem_reserve[]: 0 259 259 259 259 [ 64.546806][ T6590] Node 0 DMA32 free:14924kB boost:2048kB min:13752kB low:16676kB high:19600kB reserved_highatomic:0kB free_highatomic:0kB active_anon:76kB inactive_anon:36kB active_file:28kB inactive_file:1288kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:5612kB local_pcp:2524kB free_cma:0kB [ 64.546839][ T6590] lowmem_reserve[]: 0 0 0 0 0 [ 64.546859][ T6590] Node 1 DMA32 free:65256kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25640kB inactive_anon:0kB active_file:7244kB inactive_file:161152kB unevictable:4400kB writepending:1996kB zspages:1880kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:24908kB local_pcp:7720kB free_cma:0kB [ 64.546891][ T6590] lowmem_reserve[]: 0 0 0 0 0 [ 64.546908][ T6590] Node 0 DMA: 180*4kB (UE) 45*8kB (UE) 44*16kB (UE) 28*32kB (UE) 9*64kB (UE) 3*128kB (UE) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3896kB [ 64.546988][ T6590] Node 0 DMA32: 3*4kB (ME) 22*8kB (UE) 9*16kB (UE) 56*32kB (UME) 26*64kB (UME) 19*128kB (UME) 6*256kB (M) 8*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 14924kB [ 64.547071][ T6590] Node 1 DMA32: 9*4kB (UME) 57*8kB (UE) 25*16kB (ME) 161*32kB (UE) 122*64kB (UME) 64*128kB (UME) 12*256kB (UME) 12*512kB (ME) 21*1024kB (UME) 4*2048kB (UM) 1*4096kB (M) = 65052kB [ 64.547166][ T6590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.547176][ T6590] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 64.547186][ T6590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 64.547195][ T6590] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 64.547204][ T6590] 44677 total pagecache pages [ 64.547209][ T6590] 90 pages in swap cache [ 64.547214][ T6590] Free swap = 122440kB [ 64.547219][ T6590] Total swap = 124996kB [ 64.547223][ T6590] 524155 pages RAM [ 64.547227][ T6590] 0 pages HighMem/MovableOnly [ 64.547231][ T6590] 216924 pages reserved [ 64.547236][ T6590] 0 pages cma reserved [ 64.810960][ T6599] ubi: mtd0 is already attached to ubi0 [ 66.385329][ C3] ipvlan_process_outbound: 2 callbacks suppressed [ 66.529419][ T6661] FAULT_INJECTION: forcing a failure. [ 66.529419][ T6661] name failslab, interval 1, probability 0, space 0, times 0 [ 66.529441][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.2.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.529457][ T6661] Tainted: [L]=SOFTLOCKUP [ 66.529461][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.529468][ T6661] Call Trace: [ 66.529473][ T6661] [ 66.529478][ T6661] dump_stack_lvl+0x100/0x190 [ 66.529499][ T6661] should_fail_ex.cold+0x5/0xa [ 66.529515][ T6661] should_failslab+0xc2/0x120 [ 66.529535][ T6661] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.529552][ T6661] ? sk_prot_alloc+0x60/0x2a0 [ 66.529589][ T6661] sk_prot_alloc+0x60/0x2a0 [ 66.529626][ T6661] sk_alloc+0x36/0xe80 [ 66.529640][ T6661] pn_socket_create+0x22d/0x560 [ 66.529658][ T6661] __sock_create+0x339/0x860 [ 66.529678][ T6661] __sys_socket+0x14d/0x260 [ 66.529696][ T6661] ? xfd_validate_state+0x129/0x190 [ 66.529714][ T6661] ? __pfx___sys_socket+0x10/0x10 [ 66.529737][ T6661] __ia32_sys_socket+0x72/0xb0 [ 66.529748][ T6661] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.529766][ T6661] __do_fast_syscall_32+0x13a/0x8b0 [ 66.529780][ T6661] do_fast_syscall_32+0x32/0x70 [ 66.529792][ T6661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.529807][ T6661] RIP: 0023:0xf7f98fec [ 66.529820][ T6661] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 66.529826][ T6661] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 66.529837][ T6661] RAX: ffffffffffffffda RBX: 0000000000000023 RCX: 0000000000000002 [ 66.529845][ T6661] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.529852][ T6661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.529858][ T6661] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.529865][ T6661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.529880][ T6661] [ 66.532497][ T6664] FAULT_INJECTION: forcing a failure. [ 66.532497][ T6664] name fail_futex, interval 1, probability 0, space 0, times 1 [ 66.532515][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.3.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.532530][ T6664] Tainted: [L]=SOFTLOCKUP [ 66.532535][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.532542][ T6664] Call Trace: [ 66.532547][ T6664] [ 66.532552][ T6664] dump_stack_lvl+0x100/0x190 [ 66.532572][ T6664] should_fail_ex.cold+0x5/0xa [ 66.532588][ T6664] get_futex_key+0x1d0/0x14f0 [ 66.532603][ T6664] ? __pfx_get_futex_key+0x10/0x10 [ 66.532620][ T6664] futex_wake+0xf4/0x5e0 [ 66.532637][ T6664] ? __pfx_futex_wake+0x10/0x10 [ 66.532652][ T6664] ? __pfx_cp_compat_stat+0x10/0x10 [ 66.532695][ T6664] do_futex+0x2b2/0x440 [ 66.532712][ T6664] ? __pfx_do_futex+0x10/0x10 [ 66.532730][ T6664] __ia32_sys_futex_time32+0x2f4/0x470 [ 66.532748][ T6664] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 66.532774][ T6664] __do_fast_syscall_32+0x13a/0x8b0 [ 66.532789][ T6664] do_fast_syscall_32+0x32/0x70 [ 66.532802][ T6664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.532818][ T6664] RIP: 0023:0xf7f58fec [ 66.532830][ T6664] Code: Unable to access opcode bytes at 0xf7f58fc2. ** 235 printk messages dropped ** ** 267 printk messages dropped ** ** 55 printk messages dropped ** ** 116 printk messages dropped ** ** 107 printk messages dropped ** ** 247 printk messages dropped ** ** 154 printk messages dropped ** ** 132 printk messages dropped ** ** 96 printk messages dropped ** ** 23 printk messages dropped ** ** 124 printk messages dropped ** ** 233 printk messages dropped ** ** 152 printk messages dropped ** ** 122 printk messages dropped ** ** 153 printk messages dropped ** ** 132 printk messages dropped ** ** 166 printk messages dropped ** ** 69 printk messages dropped ** ** 107 printk messages dropped ** ** 203 printk messages dropped ** ** 69 printk messages dropped ** ** 134 printk messages dropped ** ** 189 printk messages dropped ** [ 66.981366][ T6696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.237'. [ 67.495231][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.675781][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 67.676246][ T9] usb 5-1: config 0 has no interfaces? [ 67.676272][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.688800][ T9] usb 5-1: config 0 descriptor?? [ 67.885533][ T6743] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 67.901933][ T6743] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 67.902015][ T6743] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 67.902264][ T6743] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 67.912656][ T9] usb 5-1: USB disconnect, device number 3 [ 67.938577][ T6743] pci 0000:00:03.0: Adding to iommu group 3 [ 67.967493][ T6743] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 67.969842][ T6743] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 67.971075][ T6743] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 68.268149][ T6756] FAULT_INJECTION: forcing a failure. [ 68.268149][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 68.268166][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.3.254 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.268182][ T6756] Tainted: [L]=SOFTLOCKUP [ 68.268187][ T6756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.268195][ T6756] Call Trace: [ 68.268199][ T6756] [ 68.268204][ T6756] dump_stack_lvl+0x100/0x190 [ 68.268224][ T6756] should_fail_ex.cold+0x5/0xa [ 68.268240][ T6756] should_failslab+0xc2/0x120 [ 68.268259][ T6756] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.268276][ T6756] ? __kernfs_new_node+0xd2/0xa10 [ 68.268291][ T6756] __kernfs_new_node+0xd2/0xa10 [ 68.268305][ T6756] ? __pfx___kernfs_new_node+0x10/0x10 [ 68.268318][ T6756] ? lock_acquire+0x1d1/0x380 [ 68.268335][ T6756] ? kernfs_root+0x23/0x2a0 [ 68.268353][ T6756] ? find_held_lock+0x2b/0x80 [ 68.268368][ T6756] ? kernfs_root+0xee/0x2a0 [ 68.268383][ T6756] ? kernfs_root+0xee/0x2a0 [ 68.268403][ T6756] kernfs_new_node+0x117/0x150 [ 68.268418][ T6756] __kernfs_create_file+0x53/0x350 [ 68.268435][ T6756] sysfs_add_file_mode_ns+0x207/0x3c0 [ 68.268457][ T6756] sysfs_merge_group+0x194/0x340 [ 68.268475][ T6756] ? __pfx_sysfs_merge_group+0x10/0x10 [ 68.268492][ T6756] ? bus_add_device+0x2e2/0x6c0 [ 68.268506][ T6756] ? __pfx_bus_add_device+0x10/0x10 [ 68.268516][ T6756] ? __pfx_dev_add_physical_location+0x10/0x10 [ 68.268535][ T6756] dpm_sysfs_add+0x237/0x280 [ 68.268553][ T6756] device_add+0x9f4/0x1970 [ 68.268570][ T6756] ? __pfx_device_add+0x10/0x10 [ 68.268591][ T6756] nfc_register_device+0x41/0x3e0 [ 68.268611][ T6756] nci_register_device+0x7f1/0xb80 [ 68.268628][ T6756] ? __pfx_nci_register_device+0x10/0x10 [ 68.268646][ T6756] ? lockdep_init_map_type+0x5c/0x250 [ 68.268667][ T6756] virtual_ncidev_open+0x141/0x220 [ 68.268683][ T6756] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 68.268698][ T6756] misc_open+0x26d/0x450 [ 68.268711][ T6756] ? __pfx_misc_open+0x10/0x10 [ 68.268721][ T6756] chrdev_open+0x234/0x6a0 [ 68.268737][ T6756] ? __pfx_apparmor_file_open+0x10/0x10 [ 68.268753][ T6756] ? __pfx_chrdev_open+0x10/0x10 [ 68.268780][ T6756] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 68.268797][ T6756] do_dentry_open+0x6ab/0x14d0 [ 68.268813][ T6756] ? __pfx_chrdev_open+0x10/0x10 [ 68.268834][ T6756] vfs_open+0x82/0x3f0 [ 68.268848][ T6756] path_openat+0x19fa/0x2440 [ 68.268868][ T6756] ? __pfx_path_openat+0x10/0x10 [ 68.268890][ T6756] do_file_open+0x20e/0x430 [ 68.268909][ T6756] ? __pfx_do_file_open+0x10/0x10 [ 68.268936][ T6756] ? _raw_spin_unlock+0x28/0x50 [ 68.268951][ T6756] ? alloc_fd+0x471/0x7a0 [ 68.268972][ T6756] do_sys_openat2+0x10f/0x1e0 [ 68.268984][ T6756] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.269001][ T6756] __ia32_compat_sys_openat+0x12d/0x210 [ 68.269015][ T6756] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 68.269033][ T6756] __do_fast_syscall_32+0x13a/0x8b0 [ 68.269045][ T6756] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.269064][ T6756] do_fast_syscall_32+0x32/0x70 [ 68.269076][ T6756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.269091][ T6756] RIP: 0023:0xf7f58fec [ 68.269106][ T6756] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 68.269111][ T6756] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 68.269123][ T6756] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 68.269131][ T6756] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.269138][ T6756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.269146][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.269153][ T6756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.269169][ T6756] [ 68.367738][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 68.626270][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 68.627212][ T6781] net_ratelimit: 1644 callbacks suppressed [ 69.470780][ T6777] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 69.485499][ T6777] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 69.485558][ T6777] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 69.485738][ T6777] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 69.509428][ T6777] pci 0000:00:03.0: Adding to iommu group 3 [ 69.540726][ T6777] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 69.545465][ T6777] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 69.545613][ T6777] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 69.698971][ T6777] hwrng_fill thread creation failed [ 70.568712][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 70.950766][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.950804][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.964909][ T1362] cfg80211: failed to load regulatory.db [ 71.498502][ T6828] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 71.503177][ T6828] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 71.503236][ T6828] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 71.503411][ T6828] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 71.511473][ T6828] pci 0000:00:03.0: Adding to iommu group 3 [ 71.532169][ T6828] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 71.534389][ T6828] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 71.534781][ T6828] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 71.908952][ T6699] syz.0.238 (6699) used greatest stack depth: 17744 bytes left [ 71.918177][ T6861] batman_adv: batadv0: Adding interface: syzkaller0 [ 71.918184][ T6861] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.918272][ T6861] batman_adv: batadv0: Interface activated: syzkaller0 [ 71.929014][ T6860] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 71.942836][ T6860] batman_adv: batadv0: Removing interface: syzkaller0 [ 72.122510][ T6869] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 72.138828][ T6869] bond1: entered promiscuous mode [ 72.139198][ T6869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.172053][ T6869] bond1: (slave bridge1): making interface the new active one [ 72.172063][ T6869] bridge1: entered promiscuous mode [ 72.175410][ T6869] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 72.178894][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 72.394220][ T6880] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 73.183451][ T6885] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 73.205359][ T6885] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 73.205420][ T6885] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 73.205595][ T6885] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 73.237934][ T6885] pci 0000:00:03.0: Adding to iommu group 3 [ 73.242253][ T6890] batman_adv: batadv0: Adding interface: syzkaller0 [ 73.242260][ T6890] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.242275][ T6890] batman_adv: batadv0: Interface activated: syzkaller0 [ 73.249945][ T6889] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 73.255526][ T6885] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 73.264574][ T6885] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 73.264708][ T6885] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 73.283115][ T6889] batman_adv: batadv0: Removing interface: syzkaller0 [ 73.344606][ T6904] FAULT_INJECTION: forcing a failure. [ 73.344606][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 73.344630][ T6904] CPU: 3 UID: 0 PID: 6904 Comm: syz.3.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.344647][ T6904] Tainted: [L]=SOFTLOCKUP [ 73.344652][ T6904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.344659][ T6904] Call Trace: [ 73.344664][ T6904] [ 73.344670][ T6904] dump_stack_lvl+0x100/0x190 [ 73.344690][ T6904] should_fail_ex.cold+0x5/0xa [ 73.344708][ T6904] should_failslab+0xc2/0x120 [ 73.344727][ T6904] __kmalloc_noprof+0xfc/0x840 [ 73.344744][ T6904] ? ___neigh_create+0x1532/0x2940 [ 73.344765][ T6904] ___neigh_create+0x1532/0x2940 [ 73.344786][ T6904] ? neigh_lookup+0x40f/0x6d0 ** 150 printk messages dropped ** ** 149 printk messages dropped ** ** 45 printk messages dropped ** [ 73.665178][ C2] net_ratelimit: 375 callbacks suppressed [ 73.960023][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 74.949243][ T6938] input: syz0 as /devices/virtual/input/input13 [ 75.132498][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 75.363294][ T6964] FAULT_INJECTION: forcing a failure. [ 75.363294][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 75.363328][ T6964] CPU: 2 UID: 0 PID: 6964 Comm: syz.4.324 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.363359][ T6964] Tainted: [L]=SOFTLOCKUP [ 75.363368][ T6964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.363381][ T6964] Call Trace: [ 75.363390][ T6964] [ 75.363399][ T6964] dump_stack_lvl+0x100/0x190 [ 75.363434][ T6964] should_fail_ex.cold+0x5/0xa [ 75.363463][ T6964] should_failslab+0xc2/0x120 [ 75.363497][ T6964] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.363524][ T6964] ? __pfx_map_id_range_down+0x10/0x10 [ 75.363556][ T6964] ? security_inode_alloc+0x3b/0x2c0 [ 75.363584][ T6964] security_inode_alloc+0x3b/0x2c0 [ 75.363608][ T6964] inode_init_always_gfp+0xc6f/0xfb0 [ 75.363640][ T6964] alloc_inode+0x8e/0x250 [ 75.363663][ T6964] new_inode+0x22/0x1c0 [ 75.363688][ T6964] proc_get_inode+0x1d/0x780 [ 75.363710][ T6964] proc_fill_super+0x566/0x870 [ 75.363734][ T6964] ? __pfx_proc_fill_super+0x10/0x10 [ 75.363756][ T6964] get_tree_nodev+0xdd/0x190 [ 75.363783][ T6964] vfs_get_tree+0x92/0x320 [ 75.363806][ T6964] path_mount+0x7d0/0x2850 [ 75.363832][ T6964] ? __pfx_path_mount+0x10/0x10 [ 75.363851][ T6964] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.363906][ T6964] ? putname+0xb1/0x110 [ 75.363938][ T6964] ? kmem_cache_free+0x127/0x6c0 [ 75.363973][ T6964] ? __ia32_sys_mount+0x292/0x310 [ 75.363995][ T6964] __ia32_sys_mount+0x292/0x310 [ 75.364017][ T6964] ? __pfx___ia32_sys_mount+0x10/0x10 [ 75.364048][ T6964] __do_fast_syscall_32+0x13a/0x8b0 [ 75.364076][ T6964] do_fast_syscall_32+0x32/0x70 [ 75.364099][ T6964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.364131][ T6964] RIP: 0023:0xf73eefec [ 75.364151][ T6964] Code: Unable to access opcode bytes at 0xf73eefc2. [ 75.364159][ T6964] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 75.364181][ T6964] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000480 [ 75.364196][ T6964] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.364211][ T6964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.364224][ T6964] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.364238][ T6964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.364268][ T6964] [ 75.364373][ T6964] proc_fill_super: get root inode failed [ 75.839378][ T6980] tls_set_device_offload: netdev not found [ 76.211550][ T7008] bond0: option arp_validate: invalid value () [ 76.508626][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 77.105197][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.110579][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 77.110592][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 77.118081][ T7045] FAULT_INJECTION: forcing a failure. [ 77.118081][ T7045] name failslab, interval 1, probability 0, space 0, times 0 [ 77.118101][ T7045] CPU: 2 UID: 0 PID: 7045 Comm: syz.2.346 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.118116][ T7045] Tainted: [L]=SOFTLOCKUP [ 77.118121][ T7045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.118128][ T7045] Call Trace: [ 77.118132][ T7045] [ 77.118137][ T7045] dump_stack_lvl+0x100/0x190 [ 77.118157][ T7045] should_fail_ex.cold+0x5/0xa [ 77.118173][ T7045] should_failslab+0xc2/0x120 [ 77.118192][ T7045] __kmalloc_noprof+0xfc/0x840 [ 77.118209][ T7045] ? udpv6_init_sock+0x24e/0x450 [ 77.118230][ T7045] udpv6_init_sock+0x24e/0x450 [ 77.118246][ T7045] ? __pfx_udpv6_init_sock+0x10/0x10 [ 77.118263][ T7045] inet6_create+0xb1a/0x12b0 [ 77.118276][ T7045] ? inet6_create+0x7f/0x12b0 [ 77.118292][ T7045] __sock_create+0x339/0x860 [ 77.118318][ T7045] __sys_socket+0x14d/0x260 [ 77.118335][ T7045] ? fput+0x7c/0x100 [ 77.118353][ T7045] ? __pfx___sys_socket+0x10/0x10 [ 77.118370][ T7045] ? ksys_write+0x1ac/0x250 [ 77.118384][ T7045] ? __pfx_ksys_write+0x10/0x10 [ 77.118401][ T7045] __ia32_sys_socket+0x72/0xb0 [ 77.118411][ T7045] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.118429][ T7045] __do_fast_syscall_32+0x13a/0x8b0 [ 77.118443][ T7045] do_fast_syscall_32+0x32/0x70 [ 77.118455][ T7045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.118469][ T7045] RIP: 0023:0xf7f98fec [ 77.118483][ T7045] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 77.118488][ T7045] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 77.118500][ T7045] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 77.118508][ T7045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.118515][ T7045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.118523][ T7045] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.118529][ T7045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.118544][ T7045] [ 77.423601][ T7048] netlink: 6 bytes leftover after parsing attributes in process `syz.4.354'. [ 77.498500][ T7054] FAULT_INJECTION: forcing a failure. [ 77.498500][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 77.498522][ T7054] CPU: 3 UID: 0 PID: 7054 Comm: syz.4.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.498539][ T7054] Tainted: [L]=SOFTLOCKUP [ 77.498544][ T7054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.498551][ T7054] Call Trace: [ 77.498556][ T7054] [ 77.498562][ T7054] dump_stack_lvl+0x100/0x190 [ 77.498583][ T7054] should_fail_ex.cold+0x5/0xa [ 77.498600][ T7054] should_failslab+0xc2/0x120 [ 77.498621][ T7054] __kvmalloc_node_noprof+0x113/0x9b0 [ 77.498639][ T7054] ? ip_vs_rht_alloc+0x3d1/0x710 [ 77.498655][ T7054] ip_vs_rht_alloc+0x3d1/0x710 [ 77.498671][ T7054] ip_vs_conn_tab_alloc+0x3d/0xf0 [ 77.498683][ T7054] start_sync_thread+0x187e/0x2b60 [ 77.498700][ T7054] ? __lock_acquire+0xe8b/0x1f40 [ 77.498725][ T7054] ? __pfx_start_sync_thread+0x10/0x10 [ 77.498741][ T7054] ? lock_acquire+0x1d1/0x380 [ 77.498756][ T7054] ? __might_fault+0xc5/0x140 [ 77.498769][ T7054] ? find_held_lock+0x2b/0x80 [ 77.498782][ T7054] ? __might_fault+0xc5/0x140 [ 77.498794][ T7054] ? __might_fault+0xc5/0x140 [ 77.498812][ T7054] ? do_ip_vs_set_ctl+0x471/0xc90 [ 77.498823][ T7054] do_ip_vs_set_ctl+0x471/0xc90 [ 77.498836][ T7054] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 77.498847][ T7054] ? rcu_is_watching+0x13/0xc0 [ 77.498864][ T7054] ? find_held_lock+0x2b/0x80 [ 77.498877][ T7054] ? nf_sockopt_find.isra.0+0x222/0x290 [ 77.498899][ T7054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.498920][ T7054] ? nf_setsockopt+0x8d/0xf0 [ 77.498932][ T7054] nf_setsockopt+0x8d/0xf0 [ 77.498947][ T7054] ip_setsockopt+0xcb/0xf0 [ 77.498960][ T7054] tcp_setsockopt+0xa7/0x100 [ 77.498975][ T7054] smc_setsockopt+0x1b6/0xa40 [ 77.498990][ T7054] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 77.499009][ T7054] ? __pfx_smc_setsockopt+0x10/0x10 [ 77.499025][ T7054] ? aa_sock_opt_perm+0x114/0x1e0 [ 77.499044][ T7054] ? __pfx_smc_setsockopt+0x10/0x10 [ 77.499060][ T7054] do_sock_setsockopt+0xf3/0x1d0 [ 77.499078][ T7054] __sys_setsockopt+0x119/0x190 [ 77.499094][ T7054] __ia32_sys_setsockopt+0xbc/0x160 [ 77.499107][ T7054] ? __do_fast_syscall_32+0xb3/0x8b0 [ 77.499119][ T7054] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.499136][ T7054] __do_fast_syscall_32+0x13a/0x8b0 [ 77.499150][ T7054] do_fast_syscall_32+0x32/0x70 [ 77.499162][ T7054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.499177][ T7054] RIP: 0023:0xf73eefec [ 77.499191][ T7054] Code: Unable to access opcode bytes at 0xf73eefc2. [ 77.499196][ T7054] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 77.499213][ T7054] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 77.499222][ T7054] RDX: 000000000000048b RSI: 00000000800007c0 RDI: 0000000000000018 [ 77.499230][ T7054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.499237][ T7054] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.499245][ T7054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.499261][ T7054] [ 77.553737][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 77.790949][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 77.825381][ T7076] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 78.476576][ T7083] FAULT_INJECTION: forcing a failure. [ 78.476576][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 78.476606][ T7083] CPU: 2 UID: 0 PID: 7083 Comm: syz.4.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.476631][ T7083] Tainted: [L]=SOFTLOCKUP [ 78.476638][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.476652][ T7083] Call Trace: [ 78.476659][ T7083] [ 78.476670][ T7083] dump_stack_lvl+0x100/0x190 [ 78.476700][ T7083] should_fail_ex.cold+0x5/0xa [ 78.476724][ T7083] should_failslab+0xc2/0x120 [ 78.476752][ T7083] __kmalloc_cache_noprof+0x91/0x6d0 [ 78.476774][ T7083] ? newque+0xa3/0x680 [ 78.476803][ T7083] newque+0xa3/0x680 [ 78.476830][ T7083] ipcget+0xee/0xf50 [ 78.476856][ T7083] ? __pfx_do_futex+0x10/0x10 [ 78.476878][ T7083] ? find_held_lock+0x2b/0x80 [ 78.476898][ T7083] ? __fget_files+0x215/0x3d0 [ 78.476920][ T7083] ? __pfx_ipcget+0x10/0x10 [ 78.476943][ T7083] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 78.476964][ T7083] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 78.476990][ T7083] __ia32_sys_msgget+0x125/0x1a0 [ 78.477017][ T7083] ? __pfx___ia32_sys_msgget+0x10/0x10 [ 78.477049][ T7083] __do_fast_syscall_32+0x13a/0x8b0 [ 78.477072][ T7083] do_fast_syscall_32+0x32/0x70 [ 78.477092][ T7083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.477115][ T7083] RIP: 0023:0xf73eefec [ 78.477134][ T7083] Code: Unable to access opcode bytes at 0xf73eefc2. [ 78.477142][ T7083] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000018f [ 78.477161][ T7083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000722 [ 78.477173][ T7083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.477185][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.477196][ T7083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.477207][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.477242][ T7083] [ 78.704455][ T5885] kernel read not supported for file /mdstat (pid: 5885 comm: kworker/1:4) [ 78.906604][ T7107] FAULT_INJECTION: forcing a failure. [ 78.906604][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.906625][ T7107] CPU: 2 UID: 0 PID: 7107 Comm: syz.4.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.906642][ T7107] Tainted: [L]=SOFTLOCKUP [ 78.906646][ T7107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.906653][ T7107] Call Trace: [ 78.906658][ T7107] [ 78.906663][ T7107] dump_stack_lvl+0x100/0x190 [ 78.906684][ T7107] should_fail_ex.cold+0x5/0xa [ 78.906700][ T7107] _copy_to_iter+0x5a4/0x1720 [ 78.906716][ T7107] ? __pfx__copy_to_iter+0x10/0x10 [ 78.906743][ T7107] ? netstat_seq_show+0x621/0x9b0 [ 78.906769][ T7107] seq_read_iter+0xdab/0x1270 [ 78.906795][ T7107] seq_read+0x344/0x4d0 [ 78.906810][ T7107] ? __pfx_seq_read+0x10/0x10 [ 78.906828][ T7107] ? lock_acquire+0x1d1/0x380 [ 78.906845][ T7107] ? fdget_pos+0x2aa/0x380 [ 78.906863][ T7107] ? common_file_perm+0x266/0x500 [ 78.906881][ T7107] ? __pfx_seq_read+0x10/0x10 [ 78.906895][ T7107] proc_reg_read+0x240/0x330 [ 78.906906][ T7107] ? __pfx_proc_reg_read+0x10/0x10 [ 78.906918][ T7107] vfs_read+0x1e4/0xb40 [ 78.906933][ T7107] ? lock_acquire+0x1d1/0x380 [ 78.906949][ T7107] ? __fget_files+0x34/0x3d0 [ 78.906964][ T7107] ? __pfx_vfs_read+0x10/0x10 [ 78.906977][ T7107] ? find_held_lock+0x2b/0x80 [ 78.906991][ T7107] ? __fget_files+0x215/0x3d0 [ 78.907009][ T7107] ? __fget_files+0x21f/0x3d0 [ 78.907029][ T7107] ksys_read+0x12a/0x250 [ 78.907043][ T7107] ? __pfx_ksys_read+0x10/0x10 [ 78.907067][ T7107] __do_fast_syscall_32+0x13a/0x8b0 [ 78.907086][ T7107] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.907117][ T7107] do_fast_syscall_32+0x32/0x70 [ 78.907139][ T7107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.907161][ T7107] RIP: 0023:0xf73eefec [ 78.907174][ T7107] Code: Unable to access opcode bytes at 0xf73eefc2. [ 78.907180][ T7107] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 78.907193][ T7107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 78.907201][ T7107] RDX: 0000000000000229 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.907209][ T7107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.907216][ T7107] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.907224][ T7107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.907240][ T7107] [ 78.946270][ C1] net_ratelimit: 50 callbacks suppressed [ 79.021395][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 79.021410][ T43] audit: type=1800 audit(1792074207.524:47): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.375" name="bus" dev="9p" ino=71827881 res=0 errno=0 [ 79.074232][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 79.425513][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.426815][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 79.426825][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 80.381863][ T7145] FAULT_INJECTION: forcing a failure. [ 80.381863][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 80.381890][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.4.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.381917][ T7145] Tainted: [L]=SOFTLOCKUP [ 80.381925][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.381938][ T7145] Call Trace: [ 80.381944][ T7145] [ 80.381953][ T7145] dump_stack_lvl+0x100/0x190 [ 80.381984][ T7145] should_fail_ex.cold+0x5/0xa [ 80.382041][ T7145] should_failslab+0xc2/0x120 [ 80.382072][ T7145] __kmalloc_cache_noprof+0x91/0x6d0 [ 80.382097][ T7145] ? assoc_array_insert+0x262/0x32c0 [ 80.382121][ T7145] assoc_array_insert+0x262/0x32c0 [ 80.382139][ T7145] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 80.382172][ T7145] ? __key_link_lock+0x4a/0xb0 [ 80.382201][ T7145] ? __pfx_assoc_array_insert+0x10/0x10 [ 80.382224][ T7145] ? down_write+0x146/0x1f0 [ 80.382249][ T7145] ? __pfx_down_write+0x10/0x10 [ 80.382276][ T7145] __key_link_begin+0xf5/0x260 [ 80.382305][ T7145] __key_create_or_update+0x499/0xe30 [ 80.382335][ T7145] ? __pfx___key_create_or_update+0x10/0x10 [ 80.382364][ T7145] ? lookup_user_key+0x3f3/0x1300 [ 80.382399][ T7145] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 80.382430][ T7145] key_create_or_update+0x42/0x60 [ 80.382459][ T7145] __do_sys_add_key+0x2e8/0x460 [ 80.382490][ T7145] ? __pfx___do_sys_add_key+0x10/0x10 [ 80.382527][ T7145] __do_fast_syscall_32+0x13a/0x8b0 [ 80.382551][ T7145] do_fast_syscall_32+0x32/0x70 [ 80.382571][ T7145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.382591][ T7145] RIP: 0023:0xf73eefec [ 80.382610][ T7145] Code: Unable to access opcode bytes at 0xf73eefc2. [ 80.382618][ T7145] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 80.382637][ T7145] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 80.382650][ T7145] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 80.382661][ T7145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.382673][ T7145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.382684][ T7145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.382710][ T7145] [ 80.428903][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 81.005003][ T7151] loop0: detected capacity change from 0 to 1 [ 81.347029][ T7151] loop0: p1 [ 81.347042][ T7151] loop0: partition table partially beyond EOD, truncated [ 81.347180][ T7151] loop0: p1 start 1503650146 is beyond EOD, truncated [ 81.560532][ T7166] syzkaller1: entered promiscuous mode [ 81.560548][ T7166] syzkaller1: entered allmulticast mode [ 81.653508][ T7169] FAULT_INJECTION: forcing a failure. [ 81.653508][ T7169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.653544][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.653595][ T7169] Tainted: [L]=SOFTLOCKUP [ 81.653604][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.653616][ T7169] Call Trace: [ 81.653624][ T7169] [ 81.653633][ T7169] dump_stack_lvl+0x100/0x190 [ 81.653665][ T7169] should_fail_ex.cold+0x5/0xa [ 81.653687][ T7169] ? prepare_alloc_pages+0x16d/0x5b0 [ 81.653726][ T7169] should_fail_alloc_page+0xeb/0x140 [ 81.653760][ T7169] prepare_alloc_pages+0x1f0/0x5b0 [ 81.653798][ T7169] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 81.653829][ T7169] ? prepare_alloc_pages+0x111/0x5b0 [ 81.653860][ T7169] ? is_bpf_text_address+0x94/0x1a0 [ 81.653893][ T7169] ? rcu_is_watching+0x13/0xc0 [ 81.653917][ T7169] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 81.653945][ T7169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.653978][ T7169] ? stack_trace_save+0x8e/0xc0 [ 81.654004][ T7169] ? __pfx_stack_trace_save+0x10/0x10 [ 81.654046][ T7169] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 81.654072][ T7169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.654096][ T7169] ? is_bpf_text_address+0x94/0x1a0 [ 81.654130][ T7169] ? kasan_save_track+0x14/0x30 [ 81.654157][ T7169] ? __kasan_slab_alloc+0x89/0x90 [ 81.654184][ T7169] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 81.654210][ T7169] ? alloc_vmap_area+0x640/0x2bb0 [ 81.654235][ T7169] ? __get_vm_area_node+0x1ed/0x350 [ 81.654262][ T7169] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 81.654287][ T7169] ? vmalloc_user_noprof+0x9e/0xe0 [ 81.654304][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.654325][ T7169] ? __vb2_queue_alloc+0x8d5/0x1160 [ 81.654343][ T7169] ? vb2_core_reqbufs+0x899/0xf30 [ 81.654362][ T7169] ? vb2_ioctl_reqbufs+0x291/0x450 [ 81.654390][ T7169] ? vidioc_reqbufs+0x86/0x100 [ 81.654410][ T7169] ? v4l_reqbufs+0x175/0x1d0 [ 81.654430][ T7169] ? __video_do_ioctl+0xb2a/0xdf0 [ 81.654455][ T7169] ? video_usercopy+0x3d3/0x14c0 [ 81.654486][ T7169] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 81.654518][ T7169] ? policy_nodemask+0xed/0x4f0 [ 81.654550][ T7169] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 81.654592][ T7169] __kasan_populate_vmalloc+0xf0/0x210 [ 81.654627][ T7169] alloc_vmap_area+0x95d/0x2bb0 [ 81.654665][ T7169] ? kasan_save_track+0x14/0x30 [ 81.654691][ T7169] ? __kasan_kmalloc+0xaa/0xb0 [ 81.654724][ T7169] ? __pfx_alloc_vmap_area+0x10/0x10 [ 81.654753][ T7169] ? __vb2_queue_alloc+0x8d5/0x1160 [ 81.654772][ T7169] ? __get_vm_area_node+0x124/0x350 [ 81.654806][ T7169] __get_vm_area_node+0x1ed/0x350 [ 81.654841][ T7169] __vmalloc_node_range_noprof+0x268/0x1420 [ 81.654869][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.654900][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.654929][ T7169] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.654965][ T7169] ? __kasan_kmalloc+0xaa/0xb0 [ 81.654997][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.655020][ T7169] vmalloc_user_noprof+0x9e/0xe0 [ 81.655039][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.655063][ T7169] vb2_vmalloc_alloc+0x135/0x410 [ 81.655084][ T7169] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 81.655109][ T7169] __vb2_queue_alloc+0x8d5/0x1160 [ 81.655146][ T7169] vb2_core_reqbufs+0x899/0xf30 [ 81.655175][ T7169] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 81.655199][ T7169] ? rcu_is_watching+0x13/0xc0 [ 81.655225][ T7169] ? __mutex_lock+0x26c/0x1bd0 [ 81.655245][ T7169] ? __video_do_ioctl+0x50f/0xdf0 [ 81.655277][ T7169] vb2_ioctl_reqbufs+0x291/0x450 [ 81.655310][ T7169] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 81.655349][ T7169] vidioc_reqbufs+0x86/0x100 [ 81.655376][ T7169] v4l_reqbufs+0x175/0x1d0 [ 81.655403][ T7169] __video_do_ioctl+0xb2a/0xdf0 [ 81.655434][ T7169] ? __might_fault+0xc5/0x140 [ 81.655457][ T7169] ? __pfx___video_do_ioctl+0x10/0x10 [ 81.655496][ T7169] video_usercopy+0x3d3/0x14c0 [ 81.655525][ T7169] ? __pfx___video_do_ioctl+0x10/0x10 [ 81.655556][ T7169] ? __pfx_video_usercopy+0x10/0x10 [ 81.655593][ T7169] ? __fget_files+0x215/0x3d0 [ 81.655620][ T7169] ? hook_file_ioctl_common+0x140/0x440 [ 81.655652][ T7169] v4l2_ioctl+0x1bd/0x250 [ 81.655685][ T7169] v4l2_compat_ioctl32+0x20f/0x2d0 [ 81.655715][ T7169] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 81.655741][ T7169] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 81.655771][ T7169] __do_fast_syscall_32+0x13a/0x8b0 [ 81.655793][ T7169] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.655828][ T7169] do_fast_syscall_32+0x32/0x70 [ 81.655850][ T7169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.655876][ T7169] RIP: 0023:0xf7f58fec [ 81.655899][ T7169] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 81.655909][ T7169] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 81.655931][ T7169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 81.655945][ T7169] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.655959][ T7169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.655971][ T7169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.655983][ T7169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.656011][ T7169] [ 81.656314][ T7169] syz.3.402: vmalloc error: size 155648, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 81.656380][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.656403][ T7169] Tainted: [L]=SOFTLOCKUP [ 81.656410][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.656420][ T7169] Call Trace: [ 81.656426][ T7169] [ 81.656432][ T7169] dump_stack_lvl+0x100/0x190 [ 81.656456][ T7169] warn_alloc.cold+0x9e/0xb2 [ 81.656474][ T7169] ? __pfx_warn_alloc+0x10/0x10 [ 81.656493][ T7169] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.656521][ T7169] ? __get_vm_area_node+0x2f0/0x350 [ 81.656549][ T7169] ? __get_vm_area_node+0x22b/0x350 [ 81.656577][ T7169] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 81.656611][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.656633][ T7169] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.656661][ T7169] ? __kasan_kmalloc+0xaa/0xb0 [ 81.656684][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.656701][ T7169] vmalloc_user_noprof+0x9e/0xe0 [ 81.656722][ T7169] ? vb2_vmalloc_alloc+0x135/0x410 [ 81.656742][ T7169] vb2_vmalloc_alloc+0x135/0x410 [ 81.656759][ T7169] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 81.656779][ T7169] __vb2_queue_alloc+0x8d5/0x1160 [ 81.656809][ T7169] vb2_core_reqbufs+0x899/0xf30 [ 81.656831][ T7169] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 81.656850][ T7169] ? rcu_is_watching+0x13/0xc0 [ 81.656872][ T7169] ? __mutex_lock+0x26c/0x1bd0 [ 81.656887][ T7169] ? __video_do_ioctl+0x50f/0xdf0 [ 81.656913][ T7169] vb2_ioctl_reqbufs+0x291/0x450 [ 81.656940][ T7169] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 81.656970][ T7169] vidioc_reqbufs+0x86/0x100 [ 81.656990][ T7169] v4l_reqbufs+0x175/0x1d0 [ 81.657010][ T7169] __video_do_ioctl+0xb2a/0xdf0 [ 81.657033][ T7169] ? __might_fault+0xc5/0x140 [ 81.657050][ T7169] ? __pfx___video_do_ioctl+0x10/0x10 [ 81.657084][ T7169] video_usercopy+0x3d3/0x14c0 [ 81.657111][ T7169] ? __pfx___video_do_ioctl+0x10/0x10 [ 81.657142][ T7169] ? __pfx_video_usercopy+0x10/0x10 [ 81.657178][ T7169] ? __fget_files+0x215/0x3d0 [ 81.657202][ T7169] ? hook_file_ioctl_common+0x140/0x440 [ 81.657234][ T7169] v4l2_ioctl+0x1bd/0x250 [ 81.657265][ T7169] v4l2_compat_ioctl32+0x20f/0x2d0 [ 81.657288][ T7169] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 81.657310][ T7169] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 81.657335][ T7169] __do_fast_syscall_32+0x13a/0x8b0 [ 81.657355][ T7169] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.657386][ T7169] do_fast_syscall_32+0x32/0x70 [ 81.657407][ T7169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.657432][ T7169] RIP: 0023:0xf7f58fec [ 81.657452][ T7169] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 81.657461][ T7169] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 81.657481][ T7169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 81.657494][ T7169] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.657506][ T7169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.657517][ T7169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.657529][ T7169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.657558][ T7169] [ 81.657567][ T7169] Mem-Info: [ 81.657576][ T7169] active_anon:998 inactive_anon:424 isolated_anon:0 [ 81.657576][ T7169] active_file:304 inactive_file:10926 isolated_file:0 [ 81.657576][ T7169] unevictable:1000 dirty:150 writeback:0 [ 81.657576][ T7169] slab_reclaimable:6744 slab_unreclaimable:58829 [ 81.657576][ T7169] mapped:23391 shmem:1020 pagetables:1385 [ 81.657576][ T7169] sec_pagetables:300 bounce:0 [ 81.657576][ T7169] kernel_misc_reclaimable:0 [ 81.657576][ T7169] free:49866 free_pcp:11422 free_cma:0 [ 81.657625][ T7169] Node 0 active_anon:20kB inactive_anon:92kB active_file:104kB inactive_file:532kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8032kB pagetables:1204kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.657677][ T7169] Node 1 active_anon:3972kB inactive_anon:1604kB active_file:1112kB inactive_file:43172kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:93448kB dirty:596kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5856kB pagetables:4336kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.657734][ T7169] Node 0 DMA free:3848kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB [ 81.657789][ T7169] lowmem_reserve[]: 0 259 259 259 259 [ 81.657821][ T7169] Node 0 DMA32 free:14564kB boost:16384kB min:28088kB low:31012kB high:33936kB reserved_highatomic:2048kB free_highatomic:624kB active_anon:20kB inactive_anon:92kB active_file:104kB inactive_file:264kB unevictable:2000kB writepending:4kB zspages:2748kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:5268kB local_pcp:2772kB free_cma:0kB [ 81.657876][ T7169] lowmem_reserve[]: 0 0 0 0 0 [ 81.657908][ T7169] Node 1 DMA32 free:181052kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:3972kB inactive_anon:1604kB active_file:1112kB inactive_file:43172kB unevictable:2000kB writepending:596kB zspages:4672kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:40344kB local_pcp:1500kB free_cma:0kB [ 81.657961][ T7169] lowmem_reserve[]: 0 0 0 0 0 [ 81.657993][ T7169] Node 0 DMA: 178*4kB (U) 34*8kB (U) 43*16kB (U) 30*32kB (U) 9*64kB (U) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3848kB [ 81.658156][ T7169] Node 0 DMA32: 9*4kB (UMEH) 50*8kB (UMEH) 43*16kB (UMEH) 140*32kB (UMEH) 66*64kB (UMEH) 21*128kB (UME) 4*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 14564kB [ 81.658297][ T7169] Node 1 DMA32: 344*4kB (ME) 889*8kB (UME) 443*16kB (UME) 517*32kB (UME) 357*64kB (UME) 181*128kB (UME) 98*256kB (UME) 54*512kB (UME) 19*1024kB (M) 13*2048kB (M) 1*4096kB (M) = 181048kB [ 81.658453][ T7169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.658470][ T7169] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.658486][ T7169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.658500][ T7169] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.658513][ T7169] 12797 total pagecache pages [ 81.658521][ T7169] 550 pages in swap cache [ 81.658527][ T7169] Free swap = 100088kB [ 81.658534][ T7169] Total swap = 124996kB [ 81.658542][ T7169] 524155 pages RAM [ 81.658549][ T7169] 0 pages HighMem/MovableOnly [ 81.658556][ T7169] 216924 pages reserved [ 81.658562][ T7169] 0 pages cma reserved [ 81.671661][ T7171] FAULT_INJECTION: forcing a failure. [ 81.671661][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 81.671689][ T7171] CPU: 2 UID: 0 PID: 7171 Comm: syz.4.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.671716][ T7171] Tainted: [L]=SOFTLOCKUP [ 81.671723][ T7171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.671735][ T7171] Call Trace: [ 81.671743][ T7171] [ 81.671751][ T7171] dump_stack_lvl+0x100/0x190 [ 81.671781][ T7171] should_fail_ex.cold+0x5/0xa [ 81.671804][ T7171] should_failslab+0xc2/0x120 [ 81.671834][ T7171] kmem_cache_alloc_noprof+0x92/0x6a0 [ 81.671860][ T7171] ? __asan_memcpy+0x3c/0x60 [ 81.671883][ T7171] ? __kernfs_new_node+0xd2/0xa10 [ 81.671907][ T7171] __kernfs_new_node+0xd2/0xa10 [ 81.671928][ T7171] ? __pfx___kernfs_new_node+0x10/0x10 [ 81.671952][ T7171] ? lock_acquire+0x1d1/0x380 [ 81.671979][ T7171] ? kernfs_root+0x23/0x2a0 [ 81.672007][ T7171] ? find_held_lock+0x2b/0x80 [ 81.672027][ T7171] ? kernfs_root+0xee/0x2a0 [ 81.672058][ T7171] ? kernfs_root+0xee/0x2a0 [ 81.672093][ T7171] kernfs_new_node+0x117/0x150 [ 81.672117][ T7171] kernfs_create_link+0xcc/0x240 [ 81.672142][ T7171] sysfs_do_create_link_sd+0x90/0x140 [ 81.672173][ T7171] sysfs_create_link+0x61/0xc0 [ 81.672203][ T7171] device_add+0x675/0x1970 [ 81.672231][ T7171] ? __pfx_device_add+0x10/0x10 [ 81.672264][ T7171] nfc_register_device+0x41/0x3e0 [ 81.672299][ T7171] nci_register_device+0x7f1/0xb80 [ 81.672328][ T7171] ? __pfx_nci_register_device+0x10/0x10 [ 81.672374][ T7171] ? lockdep_init_map_type+0x5c/0x250 [ 81.672413][ T7171] virtual_ncidev_open+0x141/0x220 [ 81.672442][ T7171] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 81.672467][ T7171] misc_open+0x26d/0x450 ** 27 printk messages dropped ** [ 81.673284][ T7171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 ** 49 printk messages dropped ** ** 21 printk messages dropped ** ** 9 printk messages dropped ** ** 9 printk messages dropped ** ** 5 printk messages dropped ** ** 2 printk messages dropped ** ** 14 printk messages dropped ** ** 31 printk messages dropped ** ** 12 printk messages dropped ** ** 2 printk messages dropped ** [ 81.780550][ T7177] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.071560][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 82.071569][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 82.075225][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.195591][ T7187] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 82.602831][ T7216] binder: 7214:7216 ioctl c0306201 80000080 returned -14 [ 82.855461][ T228] IPVS: starting estimator thread 0... [ 82.916309][ T7236] FAULT_INJECTION: forcing a failure. [ 82.916309][ T7236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.916339][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.4.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.916364][ T7236] Tainted: [L]=SOFTLOCKUP [ 82.916371][ T7236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.916384][ T7236] Call Trace: [ 82.916391][ T7236] [ 82.916398][ T7236] dump_stack_lvl+0x100/0x190 [ 82.916428][ T7236] should_fail_ex.cold+0x5/0xa [ 82.916452][ T7236] _copy_from_user+0x2e/0xd0 [ 82.916472][ T7236] video_usercopy+0x9e0/0x14c0 [ 82.916500][ T7236] ? __pfx___video_do_ioctl+0x10/0x10 [ 82.916528][ T7236] ? __pfx_video_usercopy+0x10/0x10 [ 82.916563][ T7236] ? __fget_files+0x215/0x3d0 [ 82.916586][ T7236] ? hook_file_ioctl_common+0x140/0x440 [ 82.916621][ T7236] v4l2_ioctl+0x1bd/0x250 [ 82.916651][ T7236] v4l2_compat_ioctl32+0x20f/0x2d0 [ 82.916674][ T7236] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 82.916696][ T7236] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 82.916723][ T7236] __do_fast_syscall_32+0x13a/0x8b0 [ 82.916744][ T7236] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.916777][ T7236] do_fast_syscall_32+0x32/0x70 [ 82.916796][ T7236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.916819][ T7236] RIP: 0023:0xf73eefec [ 82.916839][ T7236] Code: Unable to access opcode bytes at 0xf73eefc2. [ 82.916847][ T7236] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 82.916865][ T7236] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 82.916879][ T7236] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.916891][ T7236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.916904][ T7236] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.916917][ T7236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.916943][ T7236] [ 82.967194][ T7233] IPVS: using max 22 ests per chain, 52800 per kthread [ 82.974164][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 82.974200][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 84.145217][ C1] net_ratelimit: 115 callbacks suppressed [ 84.385213][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 84.385226][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 86.465291][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.598954][ T7268] FAULT_INJECTION: forcing a failure. [ 86.598954][ T7268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.598986][ T7268] CPU: 3 UID: 0 PID: 7268 Comm: syz.3.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.599016][ T7268] Tainted: [L]=SOFTLOCKUP [ 86.599025][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.599038][ T7268] Call Trace: [ 86.599046][ T7268] [ 86.599055][ T7268] dump_stack_lvl+0x100/0x190 [ 86.599095][ T7268] should_fail_ex.cold+0x5/0xa [ 86.599118][ T7268] ? prepare_alloc_pages+0x16d/0x5b0 [ 86.599154][ T7268] should_fail_alloc_page+0xeb/0x140 [ 86.599188][ T7268] prepare_alloc_pages+0x1f0/0x5b0 [ 86.599223][ T7268] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 86.599258][ T7268] ? rcu_is_watching+0x13/0xc0 [ 86.599285][ T7268] ? __lock_acquire+0x5c0/0x1f40 [ 86.599317][ T7268] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.599346][ T7268] ? __css_rstat_updated+0x1ce/0x590 [ 86.599370][ T7268] ? lock_acquire+0x1d1/0x380 [ 86.599400][ T7268] ? do_raw_spin_lock+0x128/0x260 [ 86.599421][ T7268] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.599443][ T7268] ? find_held_lock+0x2b/0x80 [ 86.599475][ T7268] ? __lock_acquire+0x5c0/0x1f40 [ 86.599506][ T7268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.599538][ T7268] ? policy_nodemask+0xed/0x4f0 [ 86.599572][ T7268] alloc_pages_mpol+0x201/0x550 [ 86.599593][ T7268] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.599633][ T7268] folio_alloc_mpol_noprof+0x36/0x260 [ 86.599658][ T7268] shmem_alloc_folio+0x135/0x160 [ 86.599692][ T7268] shmem_alloc_and_add_folio+0x371/0xd40 [ 86.599721][ T7268] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 86.599747][ T7268] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 86.599775][ T7268] shmem_get_folio_gfp+0x75b/0x1980 [ 86.599807][ T7268] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 86.599833][ T7268] ? filemap_map_pages+0x1155/0x2060 [ 86.599870][ T7268] shmem_fault+0x1fb/0xa30 [ 86.599894][ T7268] ? __pfx_shmem_fault+0x10/0x10 [ 86.599921][ T7268] ? __pfx_filemap_map_pages+0x10/0x10 [ 86.599955][ T7268] ? find_held_lock+0x2b/0x80 [ 86.599982][ T7268] ? __pfx_filemap_map_pages+0x10/0x10 [ 86.600011][ T7268] __do_fault+0x10b/0x440 [ 86.600039][ T7268] do_fault+0xb3f/0x1830 [ 86.600069][ T7268] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 86.600101][ T7268] ? __pfx_do_fault+0x10/0x10 [ 86.600147][ T7268] ? rcu_read_unlock+0x2d/0xb0 [ 86.600170][ T7268] ? rcu_read_unlock+0x2d/0xb0 [ 86.600193][ T7268] ? __pte_offset_map+0x179/0x310 [ 86.600225][ T7268] __handle_mm_fault+0x150b/0x2f60 [ 86.600254][ T7268] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.600276][ T7268] ? pte_offset_map_lock+0x174/0x320 [ 86.600303][ T7268] ? find_held_lock+0x2b/0x80 [ 86.600327][ T7268] ? find_held_lock+0x2b/0x80 [ 86.600349][ T7268] ? follow_page_pte+0x536/0x1050 [ 86.600394][ T7268] handle_mm_fault+0x363/0xa20 [ 86.600423][ T7268] __get_user_pages+0x8ae/0x2c30 [ 86.600461][ T7268] ? __pfx_mt_find+0x10/0x10 [ 86.600484][ T7268] ? __pfx___get_user_pages+0x10/0x10 [ 86.600524][ T7268] populate_vma_page_range+0x267/0x3f0 [ 86.600556][ T7268] ? __pfx_populate_vma_page_range+0x10/0x10 [ 86.600586][ T7268] ? __pfx_find_vma_intersection+0x10/0x10 [ 86.600623][ T7268] __mm_populate+0x107/0x3a0 [ 86.600655][ T7268] ? __pfx___mm_populate+0x10/0x10 [ 86.600688][ T7268] ? up_write+0x2dc/0x5b0 [ 86.600711][ T7268] vm_mmap_pgoff+0x441/0x470 [ 86.600741][ T7268] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 86.600769][ T7268] ? __pfx_do_futex+0x10/0x10 [ 86.600804][ T7268] ksys_mmap_pgoff+0xe4/0x610 [ 86.600837][ T7268] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 86.600873][ T7268] __do_fast_syscall_32+0x13a/0x8b0 [ 86.600899][ T7268] do_fast_syscall_32+0x32/0x70 [ 86.600921][ T7268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.600946][ T7268] RIP: 0023:0xf7f58fec [ 86.600969][ T7268] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 86.600979][ T7268] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 86.601016][ T7268] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 86.601031][ T7268] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 86.601045][ T7268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.601058][ T7268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.601071][ T7268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.601106][ T7268] [ 87.095360][ T25] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 87.098451][ T7293] capability: warning: `syz.2.450' uses 32-bit capabilities (legacy support in use) [ 87.186751][ T144] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.247003][ T25] usb 8-1: not running at top speed; connect to a high speed hub [ 87.247027][ T25] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 87.248017][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 87.248031][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.249687][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.249697][ T25] usb 8-1: Product: syz [ 87.249704][ T25] usb 8-1: Manufacturer: syz [ 87.249712][ T25] usb 8-1: SerialNumber: syz [ 87.257162][ T25] oti6858 8-1:1.0: oti6858 converter detected [ 87.259027][ T25] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 87.335216][ T144] usb 5-1: Using ep0 maxpacket: 32 [ 87.337920][ T144] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.339090][ T144] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.339122][ T144] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.339137][ T144] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.339153][ T144] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.340904][ T144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.340915][ T144] usb 5-1: Product: syz [ 87.340923][ T144] usb 5-1: Manufacturer: syz [ 87.340931][ T144] usb 5-1: SerialNumber: syz [ 87.346056][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.358069][ T144] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input14 [ 87.575169][ T144] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 87.575181][ T144] (id 0x00) [ 87.576343][ T7281] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 87.578332][ T25] usb 8-1: USB disconnect, device number 5 [ 87.602767][ T25] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 87.608449][ T25] oti6858 8-1:1.0: device disconnected [ 87.640254][ T7314] FAULT_INJECTION: forcing a failure. [ 87.640254][ T7314] name failslab, interval 1, probability 0, space 0, times 0 [ 87.640282][ T7314] CPU: 3 UID: 0 PID: 7314 Comm: syz.4.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.640306][ T7314] Tainted: [L]=SOFTLOCKUP [ 87.640314][ T7314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.640324][ T7314] Call Trace: [ 87.640330][ T7314] [ 87.640338][ T7314] dump_stack_lvl+0x100/0x190 [ 87.640387][ T7314] should_fail_ex.cold+0x5/0xa [ 87.640412][ T7314] should_failslab+0xc2/0x120 [ 87.640441][ T7314] __kmalloc_noprof+0xfc/0x840 [ 87.640464][ T7314] ? trace_kmalloc+0xeb/0x110 [ 87.640489][ T7314] ? lsm_blob_alloc+0x68/0x90 [ 87.640518][ T7314] lsm_blob_alloc+0x68/0x90 [ 87.640543][ T7314] security_sk_alloc+0x2d/0x290 [ 87.640562][ T7314] sk_prot_alloc+0x12a/0x2a0 [ 87.640589][ T7314] sk_alloc+0x36/0xe80 [ 87.640610][ T7314] llc_sk_alloc+0x32/0x4c0 [ 87.640633][ T7314] llc_ui_create+0xeb/0x440 [ 87.640658][ T7314] __sock_create+0x339/0x860 [ 87.640688][ T7314] __sys_socket+0x14d/0x260 [ 87.640714][ T7314] ? __pfx___sys_socket+0x10/0x10 [ 87.640747][ T7314] __ia32_sys_socket+0x72/0xb0 [ 87.640763][ T7314] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.640790][ T7314] __do_fast_syscall_32+0x13a/0x8b0 [ 87.640806][ T7314] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.640834][ T7314] do_fast_syscall_32+0x32/0x70 [ 87.640853][ T7314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.640874][ T7314] RIP: 0023:0xf73eefec [ 87.640894][ T7314] Code: Unable to access opcode bytes at 0xf73eefc2. [ 87.640903][ T7314] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 87.640922][ T7314] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000000000802 [ 87.640933][ T7314] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000f540653c [ 87.640944][ T7314] RBP: 00000000f54065ec R08: 0000000000000000 R09: 0000000000000000 [ 87.640956][ T7314] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 87.640969][ T7314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.640991][ T7314] [ 87.665211][ T144] rc_core: IR keymap rc-imon-pad not found [ 87.665219][ T144] Registered IR keymap rc-empty [ 87.665277][ T144] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 87.665286][ T144] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 87.736985][ T7318] db_root: cannot open: /dev/sequencer2 [ 87.736999][ T7318] db_root: not a directory: /dev/sequencer2 [ 87.768060][ T144] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 87.769416][ T144] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input15 [ 87.771545][ T144] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:4> initialized [ 87.960321][ T144] usb 5-1: USB disconnect, device number 4 [ 87.960906][ T7327] syzkaller1: entered promiscuous mode [ 87.960915][ T7327] syzkaller1: entered allmulticast mode [ 88.165350][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 88.165366][ C1] kcov: kcov_start: t = ffff88801dfba580, size = 262144, area = ffffc90001f28000 [ 88.165380][ C1] kcov: kcov_move_area: ffffc9002c983000 1048576 <= ffffc90001f28000 4 [ 88.167594][ T7284] ================================================================== [ 88.167620][ T7284] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 [ 88.167648][ T7284] Read of size 8 at addr ffff88804c2950c8 by task syz.0.446/7284 [ 88.167662][ T7284] [ 88.167672][ T7284] CPU: 2 UID: 0 PID: 7284 Comm: syz.0.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.167693][ T7284] Tainted: [L]=SOFTLOCKUP [ 88.167700][ T7284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.167710][ T7284] Call Trace: [ 88.167717][ T7284] [ 88.167725][ T7284] dump_stack_lvl+0x100/0x190 [ 88.167749][ T7284] print_report+0x13d/0x4b0 [ 88.167772][ T7284] ? __virt_addr_valid+0x239/0x430 [ 88.167797][ T7284] ? __dynamic_dev_dbg+0x2fc/0x310 [ 88.167818][ T7284] kasan_report+0xdf/0x1c0 [ 88.167844][ T7284] ? __dynamic_dev_dbg+0x2fc/0x310 [ 88.167867][ T7284] __dynamic_dev_dbg+0x2fc/0x310 [ 88.167883][ T7284] ? trace_contention_end+0x126/0x160 [ 88.167918][ T7284] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 88.167940][ T7284] ? display_close+0x43/0x150 [ 88.167965][ T7284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.167997][ T7284] ? locks_remove_file+0xd1/0x600 [ 88.168016][ T7284] ? __pfx_locks_remove_file+0x10/0x10 [ 88.168037][ T7284] display_close+0x103/0x150 [ 88.168060][ T7284] ? __pfx_display_close+0x10/0x10 [ 88.168083][ T7284] __fput+0x400/0xb60 [ 88.168110][ T7284] task_work_run+0x150/0x240 [ 88.168127][ T7284] ? __pfx_task_work_run+0x10/0x10 [ 88.168151][ T7284] exit_to_user_mode_loop+0x1d8/0x700 [ 88.168169][ T7284] ? rcu_is_watching+0x13/0xc0 [ 88.168189][ T7284] __do_fast_syscall_32+0x59f/0x8b0 [ 88.168209][ T7284] do_fast_syscall_32+0x32/0x70 [ 88.168223][ T7284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.168243][ T7284] RIP: 0023:0xf7fb2fec [ 88.168261][ T7284] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 88.168269][ T7284] RSP: 002b:00000000fff2809c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 88.168286][ T7284] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 88.168297][ T7284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.168308][ T7284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.168317][ T7284] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 88.168324][ T7284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.168339][ T7284] [ 88.168349][ T7284] [ 88.168353][ T7284] Allocated by task 144: [ 88.168361][ T7284] kasan_save_stack+0x30/0x50 [ 88.168383][ T7284] kasan_save_track+0x14/0x30 [ 88.168404][ T7284] __kasan_kmalloc+0xaa/0xb0 [ 88.168424][ T7284] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 88.168441][ T7284] usb_set_configuration+0x10d0/0x1dc0 [ 88.168457][ T7284] usb_generic_driver_probe+0xa1/0xe0 [ 88.168474][ T7284] usb_probe_device+0xef/0x400 [ 88.168494][ T7284] really_probe+0x241/0xa60 [ 88.168510][ T7284] __driver_probe_device+0x210/0x460 [ 88.168527][ T7284] driver_probe_device+0x4a/0x140 [ 88.168538][ T7284] __device_attach_driver+0x1df/0x320 [ 88.168554][ T7284] bus_for_each_drv+0x159/0x1e0 [ 88.168576][ T7284] __device_attach+0x1e4/0x4d0 [ 88.168592][ T7284] device_initial_probe+0xaf/0xd0 [ 88.168609][ T7284] bus_probe_device+0x64/0x160 [ 88.168622][ T7284] device_add+0x121d/0x1970 [ 88.168659][ T7284] usb_new_device.part.0+0xcc2/0x1686 [ 88.168679][ T7284] hub_event.cold+0x1e3/0xe90 [ 88.168697][ T7284] process_one_work+0xac7/0x1b10 [ 88.168716][ T7284] worker_thread+0x5ef/0xe50 [ 88.168734][ T7284] kthread+0x373/0x450 [ 88.168751][ T7284] ret_from_fork+0x730/0xd60 [ 88.168765][ T7284] ret_from_fork_asm+0x1a/0x30 [ 88.168775][ T7284] [ 88.168779][ T7284] Freed by task 144: [ 88.168787][ T7284] kasan_save_stack+0x30/0x50 [ 88.168809][ T7284] kasan_save_track+0x14/0x30 [ 88.168830][ T7284] kasan_save_free_info+0x3b/0x70 [ 88.168846][ T7284] __kasan_slab_free+0x5f/0x80 [ 88.168867][ T7284] kfree+0x22b/0x6d0 [ 88.168877][ T7284] device_release+0xd2/0x270 [ 88.168899][ T7284] kobject_put+0x1f7/0x640 [ 88.168916][ T7284] put_device+0x1f/0x30 [ 88.168937][ T7284] usb_disable_device+0x44a/0x810 [ 88.168954][ T7284] usb_disconnect+0x2e2/0x9a0 [ 88.168971][ T7284] hub_event+0x1bb1/0x4420 [ 88.168986][ T7284] process_one_work+0xac7/0x1b10 [ 88.169006][ T7284] worker_thread+0x5ef/0xe50 [ 88.169030][ T7284] kthread+0x373/0x450 [ 88.169046][ T7284] ret_from_fork+0x730/0xd60 [ 88.169060][ T7284] ret_from_fork_asm+0x1a/0x30 [ 88.169074][ T7284] [ 88.169078][ T7284] The buggy address belongs to the object at ffff88804c295000 [ 88.169078][ T7284] which belongs to the cache kmalloc-2k of size 2048 [ 88.169091][ T7284] The buggy address is located 200 bytes inside of [ 88.169091][ T7284] freed 2048-byte region [ffff88804c295000, ffff88804c295800) [ 88.169102][ T7284] [ 88.169106][ T7284] The buggy address belongs to the physical page: [ 88.169113][ T7284] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c294000 pfn:0x4c290 [ 88.169129][ T7284] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.169143][ T7284] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 88.169159][ T7284] page_type: f5(slab) [ 88.169174][ T7284] raw: 04fff00000000240 ffff88801d042f00 ffffea0001b05a10 ffffea0001596610 [ 88.169189][ T7284] raw: ffff88804c294000 0000000000080007 00000000f5000000 0000000000000000 [ 88.169204][ T7284] head: 04fff00000000240 ffff88801d042f00 ffffea0001b05a10 ffffea0001596610 [ 88.169218][ T7284] head: ffff88804c294000 0000000000080007 00000000f5000000 0000000000000000 [ 88.169228][ T7284] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 88.169243][ T7284] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 88.169253][ T7284] page dumped because: kasan: bad access detected [ 88.169260][ T7284] page_owner tracks the page as allocated [ 88.169266][ T7284] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5449, tgid 5449 (dhcpcd), ts 21907322791 [ 88.169292][ T7284] post_alloc_hook+0xfd/0x120 [ 88.169308][ T7284] get_page_from_freelist+0x110d/0x35d0 [ 88.169325][ T7284] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 88.169341][ T7284] new_slab+0xa9/0x6e0 [ 88.169358][ T7284] refill_objects+0xe3/0x410 [ 88.169375][ T7284] __pcs_replace_empty_main+0x35e/0x650 [ 88.169392][ T7284] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 88.169409][ T7284] rtnl_newlink+0x139/0x2620 [ 88.169426][ T7284] rtnetlink_rcv_msg+0x95e/0xe90 [ 88.169444][ T7284] netlink_rcv_skb+0x159/0x420 [ 88.169460][ T7284] netlink_unicast+0x585/0x850 [ 88.169475][ T7284] netlink_sendmsg+0x8b0/0xda0 [ 88.169490][ T7284] ____sys_sendmsg+0xa4d/0xbe0 [ 88.169526][ T7284] ___sys_sendmsg+0x190/0x1e0 [ 88.169545][ T7284] __sys_sendmsg+0x160/0x210 [ 88.169560][ T7284] do_syscall_64+0x121/0x770 [ 88.169574][ T7284] page last free pid 1808 tgid 1808 ts 21897346787 stack trace: [ 88.169585][ T7284] free_pages_prepare+0x586/0xe00 [ 88.169600][ T7284] __free_contig_range_common+0x14f/0x250 [ 88.169616][ T7284] free_pages_bulk+0x12a/0x200 [ 88.169634][ T7284] vm_area_free_pages+0xb2/0x2a0 [ 88.169652][ T7284] vfree+0xf7/0x6d0 [ 88.169670][ T7284] delayed_vfree_work+0x56/0x80 [ 88.169692][ T7284] process_one_work+0xac7/0x1b10 [ 88.169711][ T7284] worker_thread+0x5ef/0xe50 [ 88.169729][ T7284] kthread+0x373/0x450 [ 88.169746][ T7284] ret_from_fork+0x730/0xd60 [ 88.169755][ T7284] ret_from_fork_asm+0x1a/0x30 [ 88.169767][ T7284] [ 88.169771][ T7284] Memory state around the buggy address: [ 88.169779][ T7284] ffff88804c294f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.169790][ T7284] ffff88804c295000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.169802][ T7284] >ffff88804c295080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.169810][ T7284] ^ [ 88.169819][ T7284] ffff88804c295100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.169830][ T7284] ffff88804c295180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.169839][ T7284] ================================================================== [ 88.170009][ T7284] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.490178][ T7284] CPU: 2 UID: 0 PID: 7284 Comm: syz.0.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.494376][ T7284] Tainted: [L]=SOFTLOCKUP [ 88.496178][ T7284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.499946][ T7284] Call Trace: [ 88.501281][ T7284] [ 88.502465][ T7284] dump_stack_lvl+0x100/0x190 [ 88.504343][ T7284] vpanic+0x553/0x970 [ 88.505932][ T7284] ? __pfx_vpanic+0x10/0x10 [ 88.507622][ T7284] ? mark_held_locks+0x40/0x70 [ 88.509320][ T7284] ? __dynamic_dev_dbg+0x2fc/0x310 [ 88.511342][ T7284] panic+0xd1/0xe0 [ 88.512853][ T7284] ? __pfx_panic+0x10/0x10 [ 88.514590][ T7284] ? __dynamic_dev_dbg+0x2fc/0x310 [ 88.516514][ T7284] ? preempt_schedule_common+0x3c/0xb0 [ 88.518667][ T7284] check_panic_on_warn.cold+0x19/0x34 [ 88.520806][ T7284] end_report.part.0+0x3a/0x90 [ 88.522725][ T7284] kasan_report.cold+0xe/0x18 [ 88.524599][ T7284] ? __dynamic_dev_dbg+0x2fc/0x310 [ 88.526643][ T7284] __dynamic_dev_dbg+0x2fc/0x310 [ 88.528603][ T7284] ? trace_contention_end+0x126/0x160 [ 88.530756][ T7284] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 88.532908][ T7284] ? display_close+0x43/0x150 [ 88.534768][ T7284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.537038][ T7284] ? locks_remove_file+0xd1/0x600 [ 88.538990][ T7284] ? __pfx_locks_remove_file+0x10/0x10 [ 88.541151][ T7284] display_close+0x103/0x150 [ 88.543010][ T7284] ? __pfx_display_close+0x10/0x10 [ 88.545034][ T7284] __fput+0x400/0xb60 [ 88.546649][ T7284] task_work_run+0x150/0x240 [ 88.548476][ T7284] ? __pfx_task_work_run+0x10/0x10 [ 88.550517][ T7284] exit_to_user_mode_loop+0x1d8/0x700 [ 88.552650][ T7284] ? rcu_is_watching+0x13/0xc0 [ 88.554569][ T7284] __do_fast_syscall_32+0x59f/0x8b0 [ 88.556642][ T7284] do_fast_syscall_32+0x32/0x70 [ 88.558574][ T7284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.561057][ T7284] RIP: 0023:0xf7fb2fec [ 88.562699][ T7284] Code: Unable to access opcode bytes at 0xf7fb2fc2. [ 88.565314][ T7284] RSP: 002b:00000000fff2809c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 88.568630][ T7284] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 88.571811][ T7284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.574945][ T7284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.578083][ T7284] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 88.581185][ T7284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.584304][ T7284] [ 88.586147][ T7284] Kernel Offset: disabled [ 88.587845][ T7284] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:23:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88801f280000 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88801f280002 RBP=dffffc0000000000 RSP=ffffc900065e7a88 R8 =0000000000000001 R9 =ffffed1003e50000 R10=ffff88801f280003 R11=0000000000000000 R12=0000000000007e2f R13=ffffed1003e50000 R14=ffff88802b03d040 R15=0000000000000000 RIP=ffffffff8bd573a4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809574a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7416288 CR3=0000000025b57000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=0000000000000400 Opmask03=0000000000000000 Opmask04=00000000fffffbff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4902e70b 00007fff4902e70b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4902ec10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4902ec10 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c4e5241574f4e 5f5046475f5f7c53 465f5046475f5f7c 4f495f5046475f5f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139373232333730 393132207374202c 2964637063686428 2039343435206469 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6774202c39343435 20646970202c2943 4f4c4c414d454d4f 4e5f5046475f5f7c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 504d4f435f504647 5f5f7c5952544552 4f4e5f5046475f5f 7c4e5241574f4e5f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5046475f5f7c5346 5f5046475f5f7c4f 495f5046475f5f28 3063303264783020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 426b303a616d635f 6565726620426b30 3035313a7063705f 6c61636f6c20426b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffffffff3935ab8 RDX=dffffc0000000000 RSI=ffffffff8c625a00 RDI=0000000000000001 RBP=ffffc900066678b0 RSP=ffffc90006667730 R8 =0000000000000000 R9 =fffffbfff248b2eb R10=ffffffff9245975f R11=0000000000000000 R12=ffff888026dbcb00 R13=0000000000000000 R14=dffffc0000000000 R15=ffff888026dbcb00 RIP=ffffffff81d62992 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809584a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001140 CR3=000000005d940000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e4871531f2e9a95 fadf14db3c92a16d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d863c590f612fcab 1c4b5117b13559cd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30850ef488657392 59c60f11356f0063 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02fcadddf5745980 ddd304a18de1e846 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4f400006ef60000 0036b58a0036b68b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b438000057d60000 59a000800036b694 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae2000000036b579 0036b5070036b428 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c676008001000000 0100000000000069 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29203168a4aa7405 d60f8da34aa39864 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c08012596b4e35c9 f96dfd4347acb7a7 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b10925 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc900250c7360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000037 R14=0000000000000001 R15=ffffc900250c7678 RIP=ffffffff85b1094f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809594a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fb3000 CR3=000000005c550000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9795ba38 RBX=0000000000000377 RCX=000000000002b990 RDX=ffffffff97927c88 RSI=000000000000039e RDI=ffffffff9921cb78 RBP=0000000000000030 RSP=ffffc90006c4f2f8 R8 =ffffffff97927cb8 R9 =0000000000000028 R10=ffffc90006c4f488 R11=0000000000000001 R12=ffffffff81e660e0 R13=ffffc90006c4f3a0 R14=ffffffff81e66a90 R15=ffffffff992b2ce8 RIP=ffffffff81e67448 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095a4a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3da78a CR3=00000000564ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000