last executing test programs: 54.52016222s ago: executing program 1 (id=34): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, 0x0, 0x0) 54.506564357s ago: executing program 32 (id=34): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, 0x0, 0x0) 50.028650589s ago: executing program 0 (id=83): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) 45.286667169s ago: executing program 0 (id=88): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) 44.899008889s ago: executing program 0 (id=89): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 44.433868732s ago: executing program 0 (id=91): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000140)='N\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='N\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='N\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./debug/failslab/interval\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\x00', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/times\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='100\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/probability\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='100\x00', 0x3) close(r6) 43.361095601s ago: executing program 0 (id=92): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='amd5536udc-pci', 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0000:00:02.0', 0xc) 42.836438635s ago: executing program 3 (id=94): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001640), 0xf, 0x8841) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) 41.06991574s ago: executing program 0 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x1dcd6500}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580)) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@deauth={{{}, {}, @device_b, @device_a, @from_mac}, 0x1, @void}, 0x1a) 41.063048457s ago: executing program 33 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x1dcd6500}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580)) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@deauth={{{}, {}, @device_b, @device_a, @from_mac}, 0x1, @void}, 0x1a) 40.14842854s ago: executing program 3 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x100000, &(0x7f0000100000/0x100000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x100000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x100000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x0, &(0x7f0000100000/0x1000)=nil, 0x0, r2}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x100000}) (async) close(r2) (async) 39.967615186s ago: executing program 3 (id=98): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setns(0xc9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 39.923401628s ago: executing program 3 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 39.801659351s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705820200020007050302000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) (async) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 34.497117064s ago: executing program 3 (id=104): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) pread64(r1, 0x0, 0x0, 0x5) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)=ANY=[], 0x0}, 0x0) 34.434895607s ago: executing program 34 (id=104): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) pread64(r1, 0x0, 0x0, 0x5) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)=ANY=[], 0x0}, 0x0) 22.307227385s ago: executing program 6 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='namespace0.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='namespace0.0\x00', 0xc) close(r1) 22.248741672s ago: executing program 6 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x0) write(r3, &(0x7f0000000700)='+ 0 0 0 1 ', 0xa) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000900)='- 0 0 1\n', 0x8) write(r3, &(0x7f0000000a00)='- 1 0 1\n\x00', 0x8) 21.993511552s ago: executing program 6 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) 21.87970988s ago: executing program 6 (id=236): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000b00)={0x40, 0x3, 0x4, "01010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tahvo 2', 0x7) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/devices/tahvo-usb.2-0002\x00', 0x20000, 0x0) 19.130082603s ago: executing program 4 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xc) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000002a00)={0x8000004}) close(r2) 18.979216827s ago: executing program 2 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000100), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) (async) syz_usb_control_io(r1, &(0x7f0000000140), &(0x7f0000000180)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280), &(0x7f0000000340)={0x84, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000480), &(0x7f0000000540)={0x84, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000680), &(0x7f0000000740)={0x84, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000880), &(0x7f00000008c0)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 18.977926755s ago: executing program 4 (id=261): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 18.897518844s ago: executing program 4 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) 18.895730294s ago: executing program 4 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) close(0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x40, 0x1, 0x3ff, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048bcc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2001005b", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000a00)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002580), 0x0, 0x8004}], 0x2, 0x40800) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 18.587793184s ago: executing program 4 (id=256): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x15, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0x6, 0x32, 0x0, @loopback, @multicast1}}}}}, 0x0) 18.587567444s ago: executing program 6 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello world\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello again\n', 0xc) close(r2) 15.964455162s ago: executing program 2 (id=258): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 15.367352302s ago: executing program 2 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-', 0x13) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1073741824\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='pmem\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r0, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r3, &(0x7f0000000900)='2097152\x00', 0x8) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 15.288102798s ago: executing program 2 (id=263): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2dff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 15.220050711s ago: executing program 6 (id=264): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/dynamic_debug/control\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='amd5536udc-pci', 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0000:00:02.0', 0xc) 15.156965043s ago: executing program 35 (id=264): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/dynamic_debug/control\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='amd5536udc-pci', 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0000:00:02.0', 0xc) 15.109732352s ago: executing program 4 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000116000000003"], 0xfdef) 15.109581491s ago: executing program 36 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000116000000003"], 0xfdef) 14.393903893s ago: executing program 2 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x0) write(r3, &(0x7f0000000700)='+ 0 0 0 1 ', 0xa) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000900)='- 0 0 1\n\x00', 0x8) write(r3, 0x0, 0x0) 13.479893284s ago: executing program 2 (id=274): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 13.427512743s ago: executing program 37 (id=274): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 12.664148779s ago: executing program 5 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) close(r2) 12.507049559s ago: executing program 5 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000040)=@udp=r1}, 0x20) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 12.506836742s ago: executing program 5 (id=277): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000740)=@urb_type_control={0x2, {0x1, 0x1}, 0xffff7ffc, 0x20, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1c1f7, 0x7, 0x0}) 12.249586354s ago: executing program 5 (id=278): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000140)='N', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000001c0)='N\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='N\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./debug/failslab/interval\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\x00', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/times\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='100\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/probability\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='100\x00', 0x3) close(r6) 12.249332448s ago: executing program 5 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x0) write(r3, &(0x7f0000000700)='+ 0 0 0 1 ', 0xa) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000900)='- 0 0 1\n\x00', 0x8) write(r3, 0x0, 0x0) 9.191487073s ago: executing program 9 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e3', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1073741824\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='pmem\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r0, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r3, &(0x7f0000000900)='2097152\x00', 0x8) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 8.969913128s ago: executing program 5 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xc) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000002a00)={0x8000004}) close(r2) 8.969670109s ago: executing program 38 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xc) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000002a00)={0x8000004}) close(r2) 8.969578796s ago: executing program 7 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x30, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 5.549132328s ago: executing program 8 (id=285): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 5.418108325s ago: executing program 8 (id=286): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 3.847617668s ago: executing program 1 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) 3.620080448s ago: executing program 1 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 3.48649428s ago: executing program 1 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 3.462562371s ago: executing program 7 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x30, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3.415757933s ago: executing program 9 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e3', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1073741824\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='pmem\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r0, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r3, &(0x7f0000000900)='2097152\x00', 0x8) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 3.374956677s ago: executing program 7 (id=290): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0\x00', 0x2) 3.374257726s ago: executing program 9 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 3.179545466s ago: executing program 7 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000140)="1359050000007f8d", 0x8}], 0x2}, 0x5) 2.859906079s ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="c21ab451ba9091016a50ab45559b", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 2.659416365s ago: executing program 9 (id=294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64=r0], 0x7) 2.359854539s ago: executing program 8 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 2.019944876s ago: executing program 8 (id=296): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000140)='N', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000001c0)='N\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='N\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./debug/failslab/interval\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1\x00', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/times\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='100\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/probability\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='100\x00', 0x3) close(r6) 2.019651573s ago: executing program 8 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x0) write(r3, &(0x7f0000000700)='+ 0 0 0 1 ', 0xa) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000900)='- 0 0 1\n\x00', 0x8) write(r3, 0x0, 0x0) 209.898391ms ago: executing program 8 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) 157.837771ms ago: executing program 39 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) 107.540831ms ago: executing program 7 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e3', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1073741824\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='pmem\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r0, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r3, &(0x7f0000000900)='2097152\x00', 0x8) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 106.880306ms ago: executing program 1 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 7 (id=302): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): ilure. [ 103.941490][ T5853] name failslab, interval 1, probability 100, space 0, times 76 [ 103.941778][ T56] FAULT_INJECTION: forcing a failure. [ 103.941778][ T56] name failslab, interval 1, probability 100, space 0, times 73 [ 103.941838][ T56] CPU: 2 UID: 0 PID: 56 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 103.941857][ T56] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.941867][ T56] Workqueue: mld mld_ifc_work [ 103.941897][ T56] Call Trace: [ 103.941903][ T56] [ 103.941909][ T56] dump_stack_lvl+0x100/0x190 [ 103.941930][ T56] should_fail_ex.cold+0x5/0xa [ 103.941950][ T56] should_failslab+0xc2/0x120 [ 103.941972][ T56] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.941996][ T56] ? __alloc_skb+0x140/0x710 [ 103.942023][ T56] __alloc_skb+0x140/0x710 [ 103.942044][ T56] ? __alloc_skb+0x5b7/0x710 [ 103.942064][ T56] ? __pfx___alloc_skb+0x10/0x10 [ 103.942087][ T56] ? debug_object_activate+0x343/0x4b0 [ 103.942117][ T56] mld_newpack.isra.0+0x18e/0xa20 [ 103.942141][ T56] ? lock_acquire+0x1b9/0x370 [ 103.942168][ T56] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 103.942192][ T56] ? rcu_is_watching+0x12/0xc0 [ 103.942213][ T56] ? trace_contention_end+0x126/0x160 [ 103.942240][ T56] ? add_grhead+0x299/0x340 [ 103.942260][ T56] add_grhead+0x299/0x340 [ 103.942285][ T56] add_grec+0x1389/0x1930 [ 103.942315][ T56] ? __pfx_add_grec+0x10/0x10 [ 103.942344][ T56] mld_ifc_work+0x3c5/0xc10 [ 103.942369][ T56] ? rcu_is_watching+0x12/0xc0 [ 103.942391][ T56] process_one_work+0xa23/0x1940 [ 103.942431][ T56] ? __pfx_process_one_work+0x10/0x10 [ 103.942462][ T56] ? __pfx_mld_ifc_work+0x10/0x10 [ 103.942493][ T56] worker_thread+0x5ef/0xe50 [ 103.942527][ T56] ? kthread+0x13a/0x450 [ 103.942547][ T56] ? __pfx_worker_thread+0x10/0x10 [ 103.942570][ T56] kthread+0x370/0x450 [ 103.942591][ T56] ? __pfx_kthread+0x10/0x10 [ 103.942615][ T56] ret_from_fork+0x72b/0xd50 [ 103.942635][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 103.942658][ T56] ? __switch_to+0x800/0x10f0 [ 103.942683][ T56] ? __pfx_kthread+0x10/0x10 [ 103.942713][ T56] ret_from_fork_asm+0x1a/0x30 [ 103.942755][ T56] [ 103.943408][ T7048] FAULT_INJECTION: forcing a failure. [ 103.943408][ T7048] name failslab, interval 1, probability 100, space 0, times 68 [ 103.943949][ T7148] FAULT_INJECTION: forcing a failure. [ 103.943949][ T7148] name failslab, interval 1, probability 100, space 0, times 38 [ 103.943967][ T7148] CPU: 2 UID: 0 PID: 7148 Comm: syz.5.278 Not tainted syzkaller #0 PREEMPT(full) [ 103.943983][ T7148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.943991][ T7148] Call Trace: [ 103.943995][ T7148] [ 103.944001][ T7148] dump_stack_lvl+0x100/0x190 [ 103.944017][ T7148] should_fail_ex.cold+0x5/0xa [ 103.944033][ T7148] should_failslab+0xc2/0x120 [ 103.944051][ T7148] kmem_cache_alloc_noprof+0x91/0x6a0 [ 103.944070][ T7148] ? __send_signal_locked+0x155/0x12d0 [ 103.944095][ T7148] __send_signal_locked+0x155/0x12d0 [ 103.944121][ T7148] do_notify_parent+0xf05/0x10b0 [ 103.944143][ T7148] ? __pfx_do_notify_parent+0x10/0x10 [ 103.944164][ T7148] ? do_raw_spin_lock+0x128/0x260 [ 103.944186][ T7148] ? will_become_orphaned_pgrp+0x2a6/0x340 [ 103.944210][ T7148] do_exit+0x1b75/0x2ae0 [ 103.944231][ T7148] ? __pfx_do_exit+0x10/0x10 [ 103.944255][ T7148] do_group_exit+0xd5/0x2a0 [ 103.944275][ T7148] __ia32_sys_exit_group+0x3e/0x50 [ 103.944295][ T7148] ia32_sys_call+0x19ea/0x19f0 [ 103.944314][ T7148] __do_fast_syscall_32+0xe7/0x970 [ 103.944335][ T7148] do_fast_syscall_32+0x32/0x70 [ 103.944353][ T7148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.944370][ T7148] RIP: 0023:0xf705efec [ 103.944381][ T7148] Code: Unable to access opcode bytes at 0xf705efc2. [ 103.944388][ T7148] RSP: 002b:00000000ffcb853c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 103.944400][ T7148] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 103.944409][ T7148] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71c8459 [ 103.944417][ T7148] RBP: 00000000f7426ff4 R08: 0000000000000000 R09: 0000000000000000 [ 103.944425][ T7148] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 103.944433][ T7148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.944451][ T7148] [ 103.944932][ T6268] FAULT_INJECTION: forcing a failure. [ 103.944932][ T6268] name failslab, interval 1, probability 100, space 0, times 30 [ 103.944950][ T6268] CPU: 2 UID: 0 PID: 6268 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.944972][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.944981][ T6268] Call Trace: [ 103.944985][ T6268] [ 103.944991][ T6268] dump_stack_lvl+0x100/0x190 [ 103.945025][ T6268] should_fail_ex.cold+0x5/0xa [ 103.945041][ T6268] should_failslab+0xc2/0x120 [ 103.945059][ T6268] kmem_cache_alloc_noprof+0x91/0x6a0 [ 103.945077][ T6268] ? do_getname+0x35/0x390 [ 103.945098][ T6268] do_getname+0x35/0x390 [ 103.945119][ T6268] user_path_at+0x26/0x60 [ 103.945147][ T6268] __ia32_sys_umount+0x109/0x190 [ 103.945167][ T6268] ? __pfx___ia32_sys_umount+0x10/0x10 [ 103.945190][ T6268] __do_fast_syscall_32+0xe7/0x970 [ 103.945203][ C3] FAULT_INJECTION: forcing a failure. [ 103.945203][ C3] name failslab, interval 1, probability 100, space 0, times 30 [ 103.945209][ T6268] ? lockdep_hardirqs_on+0x78/0x100 [ 103.945218][ C1] FAULT_INJECTION: forcing a failure. [ 103.945218][ C1] name failslab, interval 1, probability 100, space 0, times 29 [ 103.945229][ T6268] do_fast_syscall_32+0x32/0x70 [ 103.945248][ T6268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.945267][ T6268] RIP: 0023:0xf705efec [ 103.945278][ T6268] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 103.945292][ T6268] RSP: 002b:00000000ffcb74c8 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 103.945307][ T6268] RAX: ffffffffffffffda RBX: 00000000ffcb8604 RCX: 0000000000000009 [ 103.945317][ T6268] RDX: 00000000f7426ff4 RSI: 00000000f72614fe RDI: 00000000ffcb8604 [ 103.945328][ T6268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.945338][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.945346][ T6268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.945368][ T6268] [ 103.945377][ C1] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 103.945392][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.945400][ C1] Workqueue: events nsim_fib_event_work [ 103.945413][ C1] Call Trace: [ 103.945410][ T6268] FAULT_INJECTION: forcing a failure. [ 103.945410][ T6268] name failslab, interval 1, probability 100, space 0, times 28 [ 103.945417][ C1] [ 103.945422][ C1] dump_stack_lvl+0x100/0x190 [ 103.945440][ C1] should_fail_ex.cold+0x5/0xa [ 103.945453][ C1] should_failslab+0xc2/0x120 [ 103.945469][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.945484][ C1] ? kmalloc_reserve+0x21b/0x350 [ 103.945497][ C1] kmalloc_reserve+0x21b/0x350 [ 103.945510][ C1] __alloc_skb+0x185/0x710 [ 103.945524][ C1] ? __alloc_skb+0x5b7/0x710 [ 103.945538][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 103.945552][ C1] ? lock_acquire+0x1b9/0x370 [ 103.945571][ C1] __netdev_alloc_skb+0x7a/0x960 [ 103.945587][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 103.945605][ C1] ? __lock_acquire+0x49f/0x1a40 [ 103.945623][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 103.945639][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 103.945657][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 103.945678][ C1] __iterate_interfaces+0x2e6/0x650 [ 103.945693][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.945710][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.945726][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 103.945743][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 103.945755][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 103.945767][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 103.945787][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 103.945801][ C1] handle_softirqs+0x1ea/0x9b0 [ 103.945816][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 103.945828][ C1] ? _raw_spin_unlock+0x28/0x50 [ 103.945840][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 103.945856][ C1] __irq_exit_rcu+0x162/0x210 [ 103.945868][ C1] irq_exit_rcu+0x9/0x30 [ 103.945879][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 103.945892][ C1] [ 103.945895][ C1] [ 103.945900][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.945912][ C1] RIP: 0010:__printk_cpu_sync_wait+0xc/0x40 [ 103.945931][ C1] Code: 91 00 e9 74 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 06 41 22 00 f3 90 04 00 00 00 48 c7 c7 40 3c af 8e e8 03 d5 91 00 8b 1d cd d0 c7 [ 103.945945][ C1] RSP: 0018:ffffc900063679a8 EFLAGS: 00000293 [ 103.945954][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81e76b7f [ 103.945961][ C1] RDX: ffff888026f98000 RSI: ffffffff81e76b5a RDI: ffff888026f98000 [ 103.945968][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 00000000ffffffff [ 103.945975][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000200 [ 103.945982][ C1] R13: ffffffff8d4e9900 R14: 0000000000000000 R15: 0000000000000000 [ 103.945992][ C1] ? __printk_cpu_sync_wait+0x2f/0x40 [ 103.946009][ C1] ? __printk_cpu_sync_wait+0xa/0x40 [ 103.946028][ C1] ? __printk_cpu_sync_wait+0xa/0x40 [ 103.946045][ C1] dump_stack_lvl+0xdb/0x190 [ 103.946057][ C1] should_fail_ex.cold+0x5/0xa [ 103.946069][ C1] should_failslab+0xc2/0x120 [ 103.946084][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.946096][ C1] ? nsim_fib_event_work+0xfdd/0x6310 [ 103.946109][ C1] nsim_fib_event_work+0xfdd/0x6310 [ 103.946124][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 103.946142][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.946156][ C1] ? rcu_is_watching+0x12/0xc0 [ 103.946170][ C1] process_one_work+0xa23/0x1940 [ 103.946191][ C1] ? __pfx_process_one_work+0x10/0x10 [ 103.946210][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.946223][ C1] worker_thread+0x5ef/0xe50 [ 103.946241][ C1] ? __pfx_worker_thread+0x10/0x10 [ 103.946257][ C1] ? kthread+0x13a/0x450 [ 103.946271][ C1] ? __pfx_worker_thread+0x10/0x10 [ 103.946286][ C1] kthread+0x370/0x450 [ 103.946300][ C1] ? __pfx_kthread+0x10/0x10 [ 103.946315][ C1] ret_from_fork+0x72b/0xd50 [ 103.946329][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 103.946343][ C1] ? __switch_to+0x800/0x10f0 [ 103.946360][ C1] ? __pfx_kthread+0x10/0x10 [ 103.946375][ C1] ret_from_fork_asm+0x1a/0x30 [ 103.946396][ C1] [ 103.946403][ T6268] CPU: 2 UID: 0 PID: 6268 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.946423][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.946426][ C1] FAULT_INJECTION: forcing a failure. [ 103.946426][ C1] name failslab, interval 1, probability 100, space 0, times 26 [ 103.946432][ T6268] Call Trace: [ 103.946437][ T6268] [ 103.946446][ T6268] dump_stack_lvl+0x100/0x190 [ 103.946464][ T6268] should_fail_ex.cold+0x5/0xa [ 103.946488][ T6268] should_failslab+0xc2/0x120 [ 103.946511][ T6268] kmem_cache_alloc_noprof+0x91/0x6a0 [ 103.946532][ T6268] ? do_getname+0x35/0x390 [ 103.946557][ T6268] do_getname+0x35/0x390 [ 103.946581][ T6268] do_sys_openat2+0xc7/0x1e0 [ 103.946610][ T6268] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.946640][ T6268] __ia32_compat_sys_openat+0x12d/0x210 [ 103.946664][ T6268] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 103.946690][ T6268] ? __pfx___ia32_sys_umount+0x10/0x10 [ 103.946715][ T6268] __do_fast_syscall_32+0xe7/0x970 [ 103.946736][ T6268] ? lockdep_hardirqs_on+0x78/0x100 [ 103.946757][ T6268] do_fast_syscall_32+0x32/0x70 [ 103.946779][ T6268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.946801][ T6268] RIP: 0023:0xf705efec [ 103.946813][ T6268] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 103.946828][ T6268] RSP: 002b:00000000ffcb74a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 103.946843][ T6268] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffcb8604 [ 103.946853][ T6268] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f7426ff4 [ 103.946865][ T6268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.946874][ T6268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.946883][ T6268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.946905][ T6268] [ 103.946915][ C1] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 103.946937][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.946946][ C1] Workqueue: events nsim_fib_event_work [ 103.946957][ C1] Call Trace: [ 103.946961][ C1] [ 103.946965][ C1] dump_stack_lvl+0x100/0x190 [ 103.946978][ C1] should_fail_ex.cold+0x5/0xa [ 103.946990][ C1] should_failslab+0xc2/0x120 [ 103.947005][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.947020][ C1] ? kmalloc_reserve+0x21b/0x350 [ 103.947033][ C1] kmalloc_reserve+0x21b/0x350 [ 103.947046][ C1] __alloc_skb+0x185/0x710 [ 103.947059][ C1] ? __alloc_skb+0x5b7/0x710 [ 103.947072][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 103.947088][ C1] ? lock_acquire+0x1b9/0x370 [ 103.947106][ C1] __netdev_alloc_skb+0x7a/0x960 [ 103.947123][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 103.947139][ C1] ? __lock_acquire+0x49f/0x1a40 [ 103.947157][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 103.947172][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 103.947191][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 103.947211][ C1] __iterate_interfaces+0x2e6/0x650 [ 103.947224][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.947241][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.947257][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 103.947274][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 103.947286][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 103.947299][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 103.947316][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 103.947331][ C1] handle_softirqs+0x1ea/0x9b0 [ 103.947336][ C0] FAULT_INJECTION: forcing a failure. [ 103.947336][ C0] name failslab, interval 1, probability 100, space 0, times 25 [ 103.947345][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 103.947358][ C1] ? _raw_spin_unlock+0x28/0x50 [ 103.947369][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 103.947384][ C1] __irq_exit_rcu+0x162/0x210 [ 103.947396][ C1] irq_exit_rcu+0x9/0x30 [ 103.947408][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 103.947421][ C1] [ 103.947425][ C1] [ 103.947429][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.947446][ C1] RIP: 0010:__printk_cpu_sync_wait+0xc/0x40 [ 103.947464][ C1] Code: 91 00 e9 74 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 e8 06 41 22 00 f3 90 04 00 00 00 48 c7 c7 40 3c af 8e e8 03 d5 91 00 8b 1d cd d0 c7 [ 103.947475][ C1] RSP: 0018:ffffc900063679a8 EFLAGS: 00000293 [ 103.947483][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81e76b7f [ 103.947490][ C1] RDX: ffff888026f98000 RSI: ffffffff81e76b5a RDI: ffff888026f98000 [ 103.947498][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 00000000ffffffff [ 103.947505][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000200 [ 103.947511][ C1] R13: ffffffff8d4e9900 R14: 0000000000000000 R15: 0000000000000000 [ 103.947522][ C1] ? __printk_cpu_sync_wait+0x2f/0x40 [ 103.947538][ C1] ? __printk_cpu_sync_wait+0xa/0x40 [ 103.947556][ C1] ? __printk_cpu_sync_wait+0xa/0x40 [ 103.947573][ C1] dump_stack_lvl+0xdb/0x190 [ 103.947588][ C1] should_fail_ex.cold+0x5/0xa [ 103.947607][ C1] should_failslab+0xc2/0x120 [ 103.947652][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.947673][ C1] ? nsim_fib_event_work+0xfdd/0x6310 [ 103.947695][ C1] nsim_fib_event_work+0xfdd/0x6310 [ 103.947723][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 103.947742][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.947756][ C1] ? rcu_is_watching+0x12/0xc0 [ 103.947771][ C1] process_one_work+0xa23/0x1940 [ 103.947792][ C1] ? __pfx_process_one_work+0x10/0x10 [ 103.947813][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.947833][ C1] worker_thread+0x5ef/0xe50 [ 103.947865][ C1] ? __pfx_worker_thread+0x10/0x10 [ 103.947890][ C1] ? kthread+0x13a/0x450 [ 103.947910][ C1] ? __pfx_worker_thread+0x10/0x10 [ 103.947935][ C1] kthread+0x370/0x450 [ 103.947956][ C1] ? __pfx_kthread+0x10/0x10 [ 103.947980][ C1] ret_from_fork+0x72b/0xd50 [ 103.948001][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 103.948025][ C1] ? __switch_to+0x800/0x10f0 [ 103.948052][ C1] ? __pfx_kthread+0x10/0x10 [ 103.948078][ C1] ret_from_fork_asm+0x1a/0x30 [ 103.948113][ C1] [ 103.948154][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 103.948174][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.948185][ T5853] Workqueue: events nsim_fib_event_work [ 103.948204][ T5853] Call Trace: [ 103.948209][ T5853] [ 103.948216][ T5853] dump_stack_lvl+0x100/0x190 [ 103.948234][ T5853] should_fail_ex.cold+0x5/0xa [ 103.948249][ T5853] should_failslab+0xc2/0x120 [ 103.948264][ T5853] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.948276][ T5853] ? nsim_fib_event_work+0xfdd/0x6310 [ 103.948290][ T5853] nsim_fib_event_work+0xfdd/0x6310 [ 103.948306][ T5853] ? debug_object_deactivate+0x2e4/0x3b0 [ 103.948323][ T5853] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.948337][ T5853] ? rcu_is_watching+0x12/0xc0 [ 103.948352][ T5853] process_one_work+0xa23/0x1940 [ 103.948373][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 103.948392][ T5853] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.948405][ T5853] worker_thread+0x5ef/0xe50 [ 103.948423][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 103.948445][ T5853] ? kthread+0x13a/0x450 [ 103.948458][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 103.948472][ T5853] kthread+0x370/0x450 [ 103.948486][ T5853] ? __pfx_kthread+0x10/0x10 [ 103.948501][ T5853] ret_from_fork+0x72b/0xd50 [ 103.948515][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 103.948529][ T5853] ? __switch_to+0x800/0x10f0 [ 103.948545][ T5853] ? __pfx_kthread+0x10/0x10 [ 103.948561][ T5853] ret_from_fork_asm+0x1a/0x30 [ 103.948582][ T5853] [ 103.948599][ T5853] FAULT_INJECTION: forcing a failure. [ 103.948599][ T5853] name failslab, interval 1, probability 100, space 0, times 23 [ 103.948613][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 103.948625][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.948632][ T5853] Workqueue: events nsim_fib_event_work [ 103.948642][ T5853] Call Trace: [ 103.948646][ T5853] [ 103.948650][ T5853] dump_stack_lvl+0x100/0x190 [ 103.948662][ T5853] should_fail_ex.cold+0x5/0xa [ 103.948674][ T5853] should_failslab+0xc2/0x120 [ 103.948689][ T5853] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.948701][ T5853] ? nsim_fib_event_work+0xfdd/0x6310 [ 103.948714][ T5853] nsim_fib_event_work+0xfdd/0x6310 [ 103.948729][ T5853] ? debug_object_deactivate+0x2e4/0x3b0 [ 103.948746][ T5853] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.948760][ T5853] ? rcu_is_watching+0x12/0xc0 [ 103.948774][ T5853] process_one_work+0xa23/0x1940 [ 103.948795][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 103.948814][ T5853] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.948826][ T5853] worker_thread+0x5ef/0xe50 [ 103.948845][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 103.948861][ T5853] ? kthread+0x13a/0x450 [ 103.948874][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 103.948888][ T5853] kthread+0x370/0x450 [ 103.948902][ T5853] ? __pfx_kthread+0x10/0x10 [ 103.948917][ T5853] ret_from_fork+0x72b/0xd50 [ 103.948930][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 103.948946][ T5853] ? __switch_to+0x800/0x10f0 [ 103.948963][ T5853] ? __pfx_kthread+0x10/0x10 [ 103.948978][ T5853] ret_from_fork_asm+0x1a/0x30 [ 103.948999][ T5853] [ 103.949005][ C3] CPU: 3 UID: 0 PID: 7044 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.949008][ T5853] FAULT_INJECTION: forcing a failure. [ 103.949008][ T5853] name failslab, interval 1, probability 100, space 0, times 22 [ 103.949021][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.949028][ C3] Call Trace: [ 103.949032][ C3] [ 103.949036][ C3] dump_stack_lvl+0x100/0x190 [ 103.949051][ C3] should_fail_ex.cold+0x5/0xa [ 103.949063][ C3] should_failslab+0xc2/0x120 [ 103.949079][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.949094][ C3] ? __alloc_skb+0x140/0x710 [ 103.949110][ C3] __alloc_skb+0x140/0x710 [ 103.949124][ C3] ? __alloc_skb+0x5b7/0x710 [ 103.949137][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 103.949152][ C3] ? lock_acquire+0x1b9/0x370 [ 103.949171][ C3] __netdev_alloc_skb+0x7a/0x960 [ 103.949187][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 103.949204][ C3] ? __lock_acquire+0x49f/0x1a40 [ 103.949223][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 103.949238][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 103.949256][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 103.949276][ C3] __iterate_interfaces+0x2e6/0x650 [ 103.949290][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.949307][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.949323][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 103.949340][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 103.949352][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 103.949365][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 103.949383][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 103.949398][ C3] handle_softirqs+0x1ea/0x9b0 [ 103.949417][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 103.949430][ C3] ? _raw_spin_unlock+0x28/0x50 [ 103.949441][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 103.949457][ C3] __irq_exit_rcu+0x162/0x210 [ 103.949469][ C3] irq_exit_rcu+0x9/0x30 [ 103.949481][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 103.949494][ C3] [ 103.949498][ C3] [ 103.949502][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.949515][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 103.949532][ C3] Code: 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 c5 23 5a 12 <48> 8b 34 24 65 48 8b 15 a1 23 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 103.949544][ C3] RSP: 0018:ffffc90004a976a8 EFLAGS: 00000293 [ 103.949553][ C3] RAX: 0000000080000001 RBX: 000000000000000c RCX: ffffffff828555d3 [ 103.949561][ C3] RDX: 0000000000000000 RSI: 0000000000000fff RDI: ffff888020e3ca80 [ 103.949568][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000fff [ 103.949575][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000005 [ 103.949582][ C3] R13: 0000000000000001 R14: ffff8880461eb258 R15: 800000006738b007 [ 103.949592][ C3] ? __nr_to_section+0xa3/0xe0 [ 103.949610][ C3] __nr_to_section+0x1d/0xe0 [ 103.949625][ C3] page_table_check_clear+0x37/0x8f0 [ 103.949642][ C3] __page_table_check_pte_clear+0xf1/0x100 [ 103.949657][ C3] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 103.949672][ C3] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 103.949684][ C3] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 103.949706][ C3] __zap_vma_range+0x2ccc/0x4a30 [ 103.949731][ C3] ? __pfx___zap_vma_range+0x10/0x10 [ 103.949749][ C3] ? find_held_lock+0x2b/0x80 [ 103.949774][ C3] unmap_vmas+0x299/0x5f0 [ 103.949797][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 103.949820][ C3] ? mas_next_slot+0x10a3/0x1960 [ 103.949858][ C3] exit_mmap+0x1ef/0xa00 [ 103.949883][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 103.949899][ C3] ? rcu_is_watching+0x12/0xc0 [ 103.949914][ C3] ? uprobe_clear_state+0x49/0x260 [ 103.949925][ C3] ? find_held_lock+0x2b/0x80 [ 103.949938][ C3] ? uprobe_clear_state+0x5f/0x260 [ 103.949951][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 103.949971][ C3] ? arch_uprobe_clear_state+0x107/0x150 [ 103.949989][ C3] __mmput+0x12a/0x410 [ 103.950002][ C3] mmput+0x67/0x80 [ 103.950013][ C3] do_exit+0x8b1/0x2ae0 [ 103.950030][ C3] ? do_raw_spin_lock+0x128/0x260 [ 103.950042][ C3] ? __pfx_do_exit+0x10/0x10 [ 103.950056][ C3] ? do_group_exit+0x1bd/0x2a0 [ 103.950072][ C3] ? rcu_is_watching+0x12/0xc0 [ 103.950086][ C3] do_group_exit+0xd5/0x2a0 [ 103.950103][ C3] __ia32_sys_exit_group+0x3e/0x50 [ 103.950119][ C3] ia32_sys_call+0x19ea/0x19f0 [ 103.950135][ C3] __do_fast_syscall_32+0xe7/0x970 [ 103.950149][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 103.950163][ C3] do_fast_syscall_32+0x32/0x70 [ 103.950177][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.950191][ C3] RIP: 0023:0xf70cefec [ 103.950200][ C3] Code: Unable to access opcode bytes at 0xf70cefc2. [ 103.950205][ C3] RSP: 002b:00000000ffb660ac EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 103.950216][ C3] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ffb660f8 [ 103.950223][ C3] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00000000f720f936 [ 103.950229][ C3] RBP: 00000000f7496ff4 R08: 0000000000000000 R09: 0000000000000000 [ 103.950236][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.950243][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.950256][ C3] [ 103.950273][ C3] FAULT_INJECTION: forcing a failure. [ 103.950273][ C3] name failslab, interval 1, probability 100, space 0, times 21 [ 103.950287][ C3] CPU: 3 UID: 0 PID: 7044 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.950300][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.950307][ C3] Call Trace: [ 103.950311][ C3] [ 103.950314][ C3] dump_stack_lvl+0x100/0x190 [ 103.950327][ C3] should_fail_ex.cold+0x5/0xa [ 103.950339][ C3] should_failslab+0xc2/0x120 [ 103.950354][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.950369][ C3] ? __alloc_skb+0x140/0x710 [ 103.950385][ C3] __alloc_skb+0x140/0x710 [ 103.950398][ C3] ? __alloc_skb+0x5b7/0x710 [ 103.950416][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 103.950431][ C3] ? lock_acquire+0x1b9/0x370 [ 103.950449][ C3] __netdev_alloc_skb+0x7a/0x960 [ 103.950465][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 103.950481][ C3] ? __lock_acquire+0x49f/0x1a40 [ 103.950500][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 103.950515][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 103.950534][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 103.950554][ C3] __iterate_interfaces+0x2e6/0x650 [ 103.950568][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.950585][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.950601][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 103.950617][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 103.950630][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 103.950642][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 103.950660][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 103.950674][ C3] handle_softirqs+0x1ea/0x9b0 [ 103.950688][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 103.950700][ C3] ? _raw_spin_unlock+0x28/0x50 [ 103.950711][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 103.950726][ C3] __irq_exit_rcu+0x162/0x210 [ 103.950739][ C3] irq_exit_rcu+0x9/0x30 [ 103.950750][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 103.950763][ C3] [ 103.950766][ C3] [ 103.950770][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.950783][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 103.950799][ C3] Code: 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 c5 23 5a 12 <48> 8b 34 24 65 48 8b 15 a1 23 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 103.950810][ C3] RSP: 0018:ffffc90004a976a8 EFLAGS: 00000293 [ 103.950818][ C3] RAX: 0000000080000001 RBX: 000000000000000c RCX: ffffffff828555d3 [ 103.950825][ C3] RDX: 0000000000000000 RSI: 0000000000000fff RDI: ffff888020e3ca80 [ 103.950832][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000fff [ 103.950839][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000005 [ 103.950845][ C3] R13: 0000000000000001 R14: ffff8880461eb258 R15: 800000006738b007 [ 103.950855][ C3] ? __nr_to_section+0xa3/0xe0 [ 103.950872][ C3] __nr_to_section+0x1d/0xe0 [ 103.950886][ C3] page_table_check_clear+0x37/0x8f0 [ 103.950903][ C3] __page_table_check_pte_clear+0xf1/0x100 [ 103.950918][ C3] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 103.950933][ C3] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 103.950944][ C3] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 103.950964][ C3] __zap_vma_range+0x2ccc/0x4a30 [ 103.950989][ C3] ? __pfx___zap_vma_range+0x10/0x10 [ 103.951006][ C3] ? find_held_lock+0x2b/0x80 [ 103.951023][ C3] unmap_vmas+0x299/0x5f0 [ 103.951040][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 103.951055][ C3] ? mas_next_slot+0x10a3/0x1960 [ 103.951077][ C3] exit_mmap+0x1ef/0xa00 [ 103.951094][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 103.951109][ C3] ? rcu_is_watching+0x12/0xc0 [ 103.951125][ C3] ? uprobe_clear_state+0x49/0x260 [ 103.951135][ C3] ? find_held_lock+0x2b/0x80 [ 103.951148][ C3] ? uprobe_clear_state+0x5f/0x260 [ 103.951161][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 103.951180][ C3] ? arch_uprobe_clear_state+0x107/0x150 [ 103.951196][ C3] __mmput+0x12a/0x410 [ 103.951209][ C3] mmput+0x67/0x80 [ 103.951220][ C3] do_exit+0x8b1/0x2ae0 [ 103.951236][ C3] ? do_raw_spin_lock+0x128/0x260 [ 103.951248][ C3] ? __pfx_do_exit+0x10/0x10 [ 103.951262][ C3] ? do_group_exit+0x1bd/0x2a0 [ 103.951277][ C3] ? rcu_is_watching+0x12/0xc0 [ 103.951291][ C3] do_group_exit+0xd5/0x2a0 [ 103.951307][ C3] __ia32_sys_exit_group+0x3e/0x50 [ 103.951323][ C3] ia32_sys_call+0x19ea/0x19f0 [ 103.951338][ C3] __do_fast_syscall_32+0xe7/0x970 [ 103.951352][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 103.951366][ C3] do_fast_syscall_32+0x32/0x70 [ 103.951380][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.951394][ C3] RIP: 0023:0xf70cefec [ 103.951406][ C3] Code: Unable to access opcode bytes at 0xf70cefc2. [ 103.951411][ C3] RSP: 002b:00000000ffb660ac EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 103.951420][ C3] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ffb660f8 [ 103.951427][ C3] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00000000f720f936 [ 103.951434][ C3] RBP: 00000000f7496ff4 R08: 0000000000000000 R09: 0000000000000000 [ 103.951440][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.951447][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.951460][ C3] [ 103.951469][ C0] CPU: 0 UID: 0 PID: 7048 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.951494][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.951506][ C0] Call Trace: [ 103.951513][ C0] [ 103.951521][ C0] dump_stack_lvl+0x100/0x190 [ 103.951546][ C0] should_fail_ex.cold+0x5/0xa [ 103.951568][ C0] should_failslab+0xc2/0x120 [ 103.951608][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.951656][ C0] ? __alloc_skb+0x140/0x710 [ 103.951683][ C0] __alloc_skb+0x140/0x710 [ 103.951706][ C0] ? __alloc_skb+0x5b7/0x710 [ 103.951730][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 103.951755][ C0] ? lock_acquire+0x1b9/0x370 [ 103.951789][ C0] __netdev_alloc_skb+0x7a/0x960 [ 103.951818][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 103.951847][ C0] ? __lock_acquire+0x49f/0x1a40 [ 103.951879][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 103.951906][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 103.951939][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 103.951980][ C0] __iterate_interfaces+0x2e6/0x650 [ 103.952004][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.952035][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 103.952062][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 103.952091][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 103.952114][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 103.952135][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 103.952168][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 103.952193][ C0] handle_softirqs+0x1ea/0x9b0 [ 103.952219][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 103.952240][ C0] ? _raw_spin_unlock+0x28/0x50 [ 103.952259][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 103.952287][ C0] __irq_exit_rcu+0x162/0x210 [ 103.952308][ C0] irq_exit_rcu+0x9/0x30 [ 103.952332][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 103.952359][ C0] [ 103.952366][ C0] [ 103.952376][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.952403][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 103.952438][ C0] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 103.952457][ C0] RSP: 0018:ffffc900064feab0 EFLAGS: 00000293 [ 103.952473][ C0] RAX: ffffffff8f9af798 RBX: ffffffff8f9af740 RCX: ffffffff81e7f251 [ 103.952485][ C0] RDX: ffff8880297f4a80 RSI: ffffffff81e7f25f RDI: ffff8880297f4a80 [ 103.952498][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 103.952516][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004a59 [ 103.952528][ C0] R13: ffffffff8f9af798 R14: ffffc900064feb30 R15: dffffc0000000000 [ 103.952548][ C0] ? console_flush_one_record+0xab1/0xe50 [ 103.952572][ C0] ? console_flush_one_record+0xabf/0xe50 [ 103.952605][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 103.952627][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 103.952659][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 103.952689][ C0] console_unlock+0x103/0x260 [ 103.952712][ C0] ? __pfx_console_unlock+0x10/0x10 [ 103.952735][ C0] ? lock_acquire+0x141/0x370 [ 103.952767][ C0] ? vprintk_emit+0x66a/0x6b0 [ 103.952793][ C0] vprintk_emit+0x407/0x6b0 [ 103.952818][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 103.952847][ C0] _printk+0xcf/0x110 [ 103.952867][ C0] ? __pfx__printk+0x10/0x10 [ 103.952892][ C0] ? __pfx____ratelimit+0x10/0x10 [ 103.952920][ C0] should_fail_ex+0x4e4/0x640 [ 103.952952][ C0] should_failslab+0xc2/0x120 [ 103.952984][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.953010][ C0] ? __alloc_skb+0x140/0x710 [ 103.953039][ C0] __alloc_skb+0x140/0x710 [ 103.953062][ C0] ? __alloc_skb+0x5b7/0x710 [ 103.953085][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 103.953110][ C0] ? if_nlmsg_size+0x4b/0xd80 [ 103.953144][ C0] rtmsg_ifinfo_build_skb+0x81/0x260 [ 103.953168][ C0] rtnetlink_event+0x137/0x1f0 [ 103.953188][ C0] notifier_call_chain+0x99/0x3f0 [ 103.953219][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 103.953253][ C0] netif_set_mac_address+0x370/0x4a0 [ 103.953281][ C0] ? __pfx_netif_set_mac_address+0x10/0x10 [ 103.953312][ C0] ? __pfx_down_write+0x10/0x10 [ 103.953343][ C0] do_setlink.isra.0+0x75f/0x3e60 [ 103.953375][ C0] ? rcu_is_watching+0x12/0xc0 [ 103.953400][ C0] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 103.953426][ C0] ? __lock_acquire+0x49f/0x1a40 [ 103.953458][ C0] ? __lock_acquire+0x49f/0x1a40 [ 103.953491][ C0] ? do_raw_spin_lock+0x128/0x260 [ 103.953513][ C0] ? find_held_lock+0x2b/0x80 [ 103.953536][ C0] ? debug_mutex_remove_waiter+0xa0/0x320 [ 103.953558][ C0] ? debug_mutex_remove_waiter+0xa0/0x320 [ 103.953586][ C0] ? mark_held_locks+0x40/0x70 [ 103.953614][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.953633][ C0] ? __mutex_lock+0x82c/0x1bd0 [ 103.953655][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 103.953678][ C0] ? __mutex_lock+0x82c/0x1bd0 [ 103.953700][ C0] ? __mutex_lock+0x26d/0x1bd0 [ 103.953723][ C0] ? rtnl_newlink+0x8bb/0x2380 [ 103.953769][ C0] ? netlink_ns_capable+0xfa/0x130 [ 103.953803][ C0] rtnl_newlink+0x11c2/0x2380 [ 103.953838][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 103.953865][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.953890][ C0] ? __kernel_text_address+0xd/0x30 [ 103.953918][ C0] ? unwind_get_return_address+0x59/0xa0 [ 103.953946][ C0] ? arch_stack_walk+0xa6/0xf0 [ 103.953989][ C0] ? __lock_acquire+0x49f/0x1a40 [ 103.954018][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 103.954058][ C0] ? find_held_lock+0x2b/0x80 [ 103.954081][ C0] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 103.954108][ C0] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 103.954137][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.954164][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 103.954194][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.954228][ C0] ? __lock_acquire+0x49f/0x1a40 [ 103.954261][ C0] netlink_rcv_skb+0x159/0x420 [ 103.954282][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.954312][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.954343][ C0] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.954368][ C0] netlink_unicast+0x585/0x850 [ 103.954393][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 103.954421][ C0] netlink_sendmsg+0x8b0/0xda0 [ 103.954447][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.954471][ C0] ? apparmor_socket_sendmsg+0x15b/0x270 [ 103.954497][ C0] __sys_sendto+0x48b/0x4e0 [ 103.954521][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.954543][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 103.954594][ C0] __ia32_compat_sys_socketcall+0x59a/0x770 [ 103.954628][ C0] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 103.954675][ C0] do_int80_emulation+0x14b/0x720 [ 103.954702][ C0] asm_int80_emulation+0x1a/0x20 [ 103.954722][ C0] RIP: 0023:0xf71c736b [ 103.954738][ C0] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 103.954756][ C0] RSP: 002b:00000000ff8056ac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 103.954774][ C0] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff805754 [ 103.954786][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.954798][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.954809][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.954821][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.954846][ C0] [ 103.957251][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 103.957274][ T6369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.957287][ T6369] Workqueue: events nsim_fib_event_work [ 103.957308][ T6369] Call Trace: [ 103.957315][ T6369] [ 103.957322][ T6369] dump_stack_lvl+0x100/0x190 [ 103.957344][ T6369] should_fail_ex.cold+0x5/0xa [ 103.957364][ T6369] should_failslab+0xc2/0x120 [ 103.957389][ T6369] __kmalloc_cache_noprof+0x91/0x6c0 [ 103.957410][ T6369] ? nsim_fib_event_work+0x156d/0x6310 [ 103.957431][ T6369] nsim_fib_event_work+0x156d/0x6310 [ 103.957459][ T6369] ? debug_object_deactivate+0x2e4/0x3b0 [ 103.957486][ T6369] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.957511][ T6369] ? rcu_is_watching+0x12/0xc0 [ 103.957550][ T6369] process_one_work+0xa23/0x1940 [ 103.957589][ T6369] ? __pfx_process_one_work+0x10/0x10 [ 103.957622][ T6369] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 103.957642][ T6369] worker_thread+0x5ef/0xe50 [ 103.957672][ T6369] ? __pfx_worker_thread+0x10/0x10 [ 103.957698][ T6369] ? kthread+0x13a/0x450 [ 103.957720][ T6369] ? __pfx_worker_thread+0x10/0x10 [ 103.957743][ T6369] kthread+0x370/0x450 [ 103.957766][ T6369] ? __pfx_kthread+0x10/0x10 [ 103.957790][ T6369] ret_from_fork+0x72b/0xd50 [ 103.957814][ T6369] ? __pfx_ret_from_fork+0x10/0x10 [ 103.957837][ T6369] ? __switch_to+0x800/0x10f0 [ 103.957865][ T6369] ? __pfx_kthread+0x10/0x10 [ 103.957890][ T6369] ret_from_fork_asm+0x1a/0x30 [ 103.957927][ T6369] [ 103.958567][ T7048] CPU: 3 UID: 0 PID: 7048 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.958582][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.958588][ T7048] Call Trace: [ 103.958592][ T7048] [ 103.958597][ T7048] dump_stack_lvl+0x100/0x190 [ 103.958611][ T7048] should_fail_ex.cold+0x5/0xa [ 103.958623][ T7048] should_failslab+0xc2/0x120 [ 103.958638][ T7048] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 103.958654][ T7048] ? __alloc_skb+0x140/0x710 [ 103.958671][ T7048] __alloc_skb+0x140/0x710 [ 103.958683][ T7048] ? __alloc_skb+0x5b7/0x710 [ 103.958697][ T7048] ? __pfx___alloc_skb+0x10/0x10 [ 103.958710][ T7048] ? if_nlmsg_size+0x4b/0xd80 [ 103.958730][ T7048] rtmsg_ifinfo_build_skb+0x81/0x260 [ 103.958743][ T7048] rtnetlink_event+0x137/0x1f0 [ 103.958754][ T7048] notifier_call_chain+0x99/0x3f0 [ 103.958771][ T7048] call_netdevice_notifiers_info+0xbe/0x110 [ 103.958791][ T7048] netif_set_mac_address+0x370/0x4a0 [ 103.958807][ T7048] ? __pfx_netif_set_mac_address+0x10/0x10 [ 103.958841][ T7048] ? __pfx_down_write+0x10/0x10 [ 103.958859][ T7048] do_setlink.isra.0+0x75f/0x3e60 [ 103.958877][ T7048] ? rcu_is_watching+0x12/0xc0 [ 103.958891][ T7048] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 103.958905][ T7048] ? __lock_acquire+0x49f/0x1a40 [ 103.958924][ T7048] ? __lock_acquire+0x49f/0x1a40 [ 103.958943][ T7048] ? do_raw_spin_lock+0x128/0x260 [ 103.958955][ T7048] ? find_held_lock+0x2b/0x80 [ 103.958968][ T7048] ? debug_mutex_remove_waiter+0xa0/0x320 [ 103.958982][ T7048] ? debug_mutex_remove_waiter+0xa0/0x320 [ 103.958998][ T7048] ? mark_held_locks+0x40/0x70 [ 103.959014][ T7048] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.959026][ T7048] ? __mutex_lock+0x82c/0x1bd0 [ 103.959038][ T7048] ? lockdep_hardirqs_on+0x78/0x100 [ 103.959051][ T7048] ? __mutex_lock+0x82c/0x1bd0 [ 103.959064][ T7048] ? __mutex_lock+0x26d/0x1bd0 [ 103.959077][ T7048] ? rtnl_newlink+0x8bb/0x2380 [ 103.959102][ T7048] ? netlink_ns_capable+0xfa/0x130 [ 103.959122][ T7048] rtnl_newlink+0x11c2/0x2380 [ 103.959142][ T7048] ? is_bpf_text_address+0x94/0x1a0 [ 103.959158][ T7048] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.959173][ T7048] ? __kernel_text_address+0xd/0x30 [ 103.959189][ T7048] ? unwind_get_return_address+0x59/0xa0 [ 103.959206][ T7048] ? arch_stack_walk+0xa6/0xf0 [ 103.959227][ T7048] ? __lock_acquire+0x49f/0x1a40 [ 103.959243][ T7048] ? stack_depot_save_flags+0x27/0x9d0 [ 103.959265][ T7048] ? find_held_lock+0x2b/0x80 [ 103.959278][ T7048] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 103.959293][ T7048] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 103.959309][ T7048] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.959325][ T7048] rtnetlink_rcv_msg+0x95e/0xe90 [ 103.959342][ T7048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.959360][ T7048] ? __lock_acquire+0x49f/0x1a40 [ 103.959379][ T7048] netlink_rcv_skb+0x159/0x420 [ 103.959391][ T7048] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.959412][ T7048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.959429][ T7048] ? netlink_deliver_tap+0x1ae/0xcc0 [ 103.959442][ T7048] netlink_unicast+0x585/0x850 [ 103.959456][ T7048] ? __pfx_netlink_unicast+0x10/0x10 [ 103.959483][ T7048] netlink_sendmsg+0x8b0/0xda0 [ 103.959499][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.959513][ T7048] ? apparmor_socket_sendmsg+0x15b/0x270 [ 103.959527][ T7048] __sys_sendto+0x48b/0x4e0 [ 103.959541][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.959553][ T7048] ? __pfx___sys_sendto+0x10/0x10 [ 103.959580][ T7048] __ia32_compat_sys_socketcall+0x59a/0x770 [ 103.959600][ T7048] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 103.959645][ T7048] do_int80_emulation+0x14b/0x720 [ 103.959663][ T7048] asm_int80_emulation+0x1a/0x20 [ 103.959675][ T7048] RIP: 0023:0xf71c736b [ 103.959685][ T7048] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 103.959696][ T7048] RSP: 002b:00000000ff8056ac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 103.959707][ T7048] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff805754 [ 103.959713][ T7048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.959719][ T7048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.959726][ T7048] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.959732][ T7048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.959746][ T7048] [ 105.063143][ T5748] Bluetooth: hci3: command tx timeout [ 105.066300][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 105.066323][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.066336][ T5853] Workqueue: events nsim_fib_event_work [ 105.066359][ T5853] Call Trace: [ 105.066366][ T5853] [ 105.066374][ T5853] dump_stack_lvl+0x100/0x190 [ 105.066397][ T5853] should_fail_ex.cold+0x5/0xa [ 105.066418][ T5853] should_failslab+0xc2/0x120 [ 105.066445][ T5853] __kmalloc_cache_noprof+0x91/0x6c0 [ 105.066466][ T5853] ? nsim_fib_event_work+0xfdd/0x6310 [ 105.066488][ T5853] nsim_fib_event_work+0xfdd/0x6310 [ 105.066517][ T5853] ? debug_object_deactivate+0x2e4/0x3b0 [ 105.066543][ T5853] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 105.066567][ T5853] ? rcu_is_watching+0x12/0xc0 [ 105.066595][ T5853] process_one_work+0xa23/0x1940 [ 105.066629][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 105.066659][ T5853] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 105.066679][ T5853] worker_thread+0x5ef/0xe50 [ 105.066711][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 105.066737][ T5853] ? kthread+0x13a/0x450 [ 105.066760][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 105.066783][ T5853] kthread+0x370/0x450 [ 105.066805][ T5853] ? __pfx_kthread+0x10/0x10 [ 105.066829][ T5853] ret_from_fork+0x72b/0xd50 [ 105.066853][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 105.066874][ T5853] ? __switch_to+0x800/0x10f0 [ 105.066899][ T5853] ? __pfx_kthread+0x10/0x10 [ 105.066930][ T5853] ret_from_fork_asm+0x1a/0x30 [ 105.066955][ T5853] [ 105.463572][ T5757] Bluetooth: hci1: command tx timeout [ 105.532384][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.961447][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 107.041284][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.069120][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.071448][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.079520][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.082289][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.254380][ T5820] hsr_slave_0: left promiscuous mode [ 107.258864][ T5820] hsr_slave_1: left promiscuous mode [ 107.265356][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.268419][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.281203][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.286809][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.301742][ T5820] hsr_slave_0: left promiscuous mode [ 107.309425][ T5820] hsr_slave_1: left promiscuous mode [ 107.333091][ T5820] veth1_macvtap: left promiscuous mode [ 107.334862][ T5820] veth0_macvtap: left promiscuous mode [ 107.336608][ T5820] veth1_vlan: left promiscuous mode [ 107.338414][ T5820] veth0_vlan: left promiscuous mode [ 107.342375][ T5820] veth1_macvtap: left promiscuous mode [ 107.344104][ T5820] veth0_macvtap: left promiscuous mode [ 107.345816][ T5820] veth1_vlan: left promiscuous mode [ 107.347353][ T5820] veth0_vlan: left promiscuous mode [ 107.390916][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.398782][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.406824][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.412053][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.416461][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.419441][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.438390][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.446046][ T5756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.452907][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.455733][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.463808][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.469646][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.472707][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.481275][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.485752][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.541749][ T5743] Bluetooth: hci1: command tx timeout [ 107.610613][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 107.618652][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 107.778502][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 107.790232][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 107.847599][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17 [ 108.003313][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.149616][ T5454] 8021q: adding VLAN 0 to HW filter on device eth18 [ 108.356404][ T7048] veth0_vlan: entered promiscuous mode [ 108.417203][ T5454] 8021q: adding VLAN 0 to HW filter on device eth19 [ 108.425512][ T7048] veth1_vlan: entered promiscuous mode [ 108.490579][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.493104][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.495353][ T7176] bridge_slave_0: entered allmulticast mode [ 108.498047][ T7176] bridge_slave_0: entered promiscuous mode [ 108.501725][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.504528][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.507226][ T7173] bridge_slave_0: entered allmulticast mode [ 108.510682][ T7173] bridge_slave_0: entered promiscuous mode [ 108.518982][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.521138][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.526550][ T7173] bridge_slave_1: entered allmulticast mode [ 108.529133][ T7173] bridge_slave_1: entered promiscuous mode [ 108.532353][ T7176] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.534563][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.536800][ T7176] bridge_slave_1: entered allmulticast mode [ 108.539415][ T7176] bridge_slave_1: entered promiscuous mode [ 108.596984][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.602936][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.643374][ T7176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.665236][ T7173] team0: Port device team_slave_0 added [ 108.701765][ T7176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.733031][ T7173] team0: Port device team_slave_1 added [ 108.756801][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.760419][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.764527][ T7171] bridge_slave_0: entered allmulticast mode [ 108.768362][ T7171] bridge_slave_0: entered promiscuous mode [ 108.773348][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.775726][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.777901][ T7171] bridge_slave_1: entered allmulticast mode [ 108.780468][ T7171] bridge_slave_1: entered promiscuous mode [ 108.783720][ T5454] 8021q: adding VLAN 0 to HW filter on device eth20 [ 108.798445][ T7176] team0: Port device team_slave_0 added [ 108.804314][ T7176] team0: Port device team_slave_1 added [ 108.822129][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.825006][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.835209][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.883281][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.885652][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.893574][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.901880][ T7048] veth0_macvtap: entered promiscuous mode [ 108.905793][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.908015][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.916077][ T7176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.922416][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.942036][ T7176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.944328][ T7176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.953004][ T7176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.958607][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.995138][ T7173] hsr_slave_0: entered promiscuous mode [ 108.997706][ T7173] hsr_slave_1: entered promiscuous mode [ 109.005819][ T7048] veth1_macvtap: entered promiscuous mode [ 109.015033][ T7171] team0: Port device team_slave_0 added [ 109.047625][ T7171] team0: Port device team_slave_1 added [ 109.083863][ T7176] hsr_slave_0: entered promiscuous mode [ 109.086250][ T7176] hsr_slave_1: entered promiscuous mode [ 109.088693][ T7176] debugfs: 'hsr0' already exists in 'hsr' [ 109.090536][ T7176] Cannot create hsr debugfs directory [ 109.101931][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.104114][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.111529][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.163489][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.166428][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.178527][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.228602][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.241355][ T7171] hsr_slave_0: entered promiscuous mode [ 109.243800][ T7171] hsr_slave_1: entered promiscuous mode [ 109.245821][ T7171] debugfs: 'hsr0' already exists in 'hsr' [ 109.247522][ T7171] Cannot create hsr debugfs directory [ 109.283911][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.329561][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.332888][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.346938][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.349579][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.432822][ T5820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.471989][ T5743] Bluetooth: hci0: command tx timeout [ 109.523815][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.528991][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.552676][ T5743] Bluetooth: hci3: command tx timeout [ 109.553691][ T5757] Bluetooth: hci2: command tx timeout [ 109.558358][ T5820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.590282][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.592645][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.625295][ T5454] 8021q: adding VLAN 0 to HW filter on device eth21 [ 109.631800][ T5757] Bluetooth: hci1: command tx timeout [ 109.665595][ T5820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.789082][ T5820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.920739][ T5820] bridge_slave_0: left allmulticast mode [ 109.923141][ T5820] bridge_slave_0: left promiscuous mode [ 109.925569][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.938462][ T5820] bridge_slave_1: left allmulticast mode [ 109.940852][ T5820] bridge_slave_1: left promiscuous mode [ 109.944047][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.948793][ T5820] bridge_slave_0: left allmulticast mode [ 109.951013][ T5820] bridge_slave_0: left promiscuous mode [ 109.955704][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.022594][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.027856][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.035948][ T5820] bond0 (unregistering): Released all slaves [ 110.131445][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.136775][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.140598][ T5820] bond0 (unregistering): Released all slaves [ 110.344407][ T5454] 8021q: adding VLAN 0 to HW filter on device eth21 [ 110.424241][ T5820] hsr_slave_0: left promiscuous mode [ 110.427166][ T5820] hsr_slave_1: left promiscuous mode [ 110.429853][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.433523][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.443323][ T5820] hsr_slave_0: left promiscuous mode [ 110.445490][ T5820] hsr_slave_1: left promiscuous mode [ 110.447465][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.449731][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.452900][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.455128][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.463455][ T5820] veth1_macvtap: left promiscuous mode [ 110.465255][ T5820] veth0_macvtap: left promiscuous mode [ 110.467049][ T5820] veth1_vlan: left promiscuous mode [ 110.468704][ T5820] veth0_vlan: left promiscuous mode [ 110.590431][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 110.604072][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 110.720804][ T42] audit: type=1800 audit(1785413936.030:2): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.284" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 110.792459][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 110.807674][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 110.863876][ T5454] 8021q: adding VLAN 0 to HW filter on device eth22 [ 111.085242][ T5454] 8021q: adding VLAN 0 to HW filter on device eth23 [ 111.265549][ T29] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 111.297159][ T5454] 8021q: adding VLAN 0 to HW filter on device eth24 [ 111.412203][ T29] usb 13-1: Using ep0 maxpacket: 32 [ 111.419658][ T29] usb 13-1: config 0 has no interfaces? [ 111.425495][ T29] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 111.428956][ T29] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.432079][ T29] usb 13-1: Product: syz [ 111.433606][ T29] usb 13-1: Manufacturer: syz [ 111.435405][ T29] usb 13-1: SerialNumber: syz [ 111.442725][ T29] usb 13-1: config 0 descriptor?? [ 111.483845][ T7176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.494793][ T7176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.498079][ T7176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.502863][ T7176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.506011][ T7176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.510806][ T7176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.515419][ T7176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.520236][ T7176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.551701][ T5757] Bluetooth: hci0: command tx timeout [ 111.600826][ T7171] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 111.609298][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.613452][ T7171] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 111.619943][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.622000][ T5757] Bluetooth: hci2: command tx timeout [ 111.622954][ T5743] Bluetooth: hci3: command tx timeout [ 111.627992][ T7171] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 111.633577][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.637843][ T7171] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 111.643516][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.708506][ T7173] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 111.714971][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.717742][ T7173] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 111.721192][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.724423][ T7173] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 111.729953][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.743841][ T7173] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 111.750382][ T7173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.810270][ T7176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.837884][ T7176] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.850982][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.854023][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.859921][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.862543][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.879776][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.906353][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.912663][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.914910][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.919861][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.934975][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.937933][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.955540][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.967152][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.969344][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.977544][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.979770][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.246362][ T7176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.275852][ T7176] veth0_vlan: entered promiscuous mode [ 112.285091][ T7176] veth1_vlan: entered promiscuous mode [ 112.305505][ T7176] veth0_macvtap: entered promiscuous mode [ 112.316224][ T7176] veth1_macvtap: entered promiscuous mode [ 112.326940][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.334122][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.340213][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.348066][ T7176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.355530][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.360897][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.364479][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.376205][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.425136][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.439321][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.458276][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.466246][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.535880][ T7444] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.548304][ T7173] veth0_vlan: entered promiscuous mode [ 112.560422][ T7173] veth1_vlan: entered promiscuous mode [ 112.598875][ T7173] veth0_macvtap: entered promiscuous mode [ 112.604249][ T7171] veth0_vlan: entered promiscuous mode [ 112.607697][ T7173] veth1_macvtap: entered promiscuous mode [ 112.613333][ T7171] veth1_vlan: entered promiscuous mode [ 112.623385][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.636888][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.643850][ T7171] veth0_macvtap: entered promiscuous mode [ 112.655133][ T7171] veth1_macvtap: entered promiscuous mode [ 112.658123][ T5793] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.661693][ T5793] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.667543][ T5793] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.670584][ T5793] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.693039][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.719350][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.738881][ T5793] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.744022][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.746414][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.752524][ T5793] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.755234][ T5793] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.770473][ T5793] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.795726][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.802329][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.826858][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.830455][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.884683][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.889961][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.993002][ T7458] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000 [ 113.042954][ T7471] NFSD: Failed to start, no listeners configured. [ 113.055930][ T7458] udc dummy_udc.0: failed to start g1: -19 [ 113.058471][ T7458] UDC core: g1: couldn't find an available UDC or it's busy [ 113.160087][ T7482] syzkaller0: entered promiscuous mode [ 113.166105][ T7482] syzkaller0: entered allmulticast mode [ 113.479062][ T7491] syzkaller0: entered promiscuous mode [ 113.480899][ T7491] syzkaller0: entered allmulticast mode [ 113.621820][ T5743] Bluetooth: hci0: command tx timeout [ 113.701851][ T5743] Bluetooth: hci2: command tx timeout [ 113.701978][ T5757] Bluetooth: hci3: command tx timeout [ 113.931243][ T7321] usb 13-1: USB disconnect, device number 2 [ 114.001840][ T7336] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 114.126088][ T7500] FAULT_INJECTION: forcing a failure. [ 114.126088][ T7500] name failslab, interval 1, probability 100, space 0, times 99 [ 114.131464][ T7500] CPU: 1 UID: 0 PID: 7500 Comm: syz.8.296 Not tainted syzkaller #0 PREEMPT(full) [ 114.131493][ T7500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.131505][ T7500] Call Trace: [ 114.131513][ T7500] [ 114.131521][ T7500] dump_stack_lvl+0x100/0x190 [ 114.131552][ T7500] should_fail_ex.cold+0x5/0xa [ 114.131599][ T7500] should_failslab+0xc2/0x120 [ 114.131630][ T7500] kmem_cache_alloc_noprof+0x91/0x6a0 [ 114.131655][ T7500] ? do_getname+0x35/0x390 [ 114.131685][ T7500] do_getname+0x35/0x390 [ 114.131712][ T7500] do_sys_openat2+0xc7/0x1e0 [ 114.131737][ T7500] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.131770][ T7500] __ia32_compat_sys_openat+0x12d/0x210 [ 114.131797][ T7500] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 114.131835][ T7500] __do_fast_syscall_32+0xe7/0x970 [ 114.131867][ T7500] do_fast_syscall_32+0x32/0x70 [ 114.131881][ T5821] FAULT_INJECTION: forcing a failure. [ 114.131881][ T5821] name failslab, interval 1, probability 100, space 0, times 99 [ 114.131891][ T7500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.131916][ T7500] RIP: 0023:0xf7fc6fec [ 114.131937][ T7500] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 114.131946][ T7500] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 114.131964][ T7500] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 114.131976][ T7500] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.131988][ T7500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.131999][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.132012][ T7500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.132037][ T7500] [ 114.132162][ T29] FAULT_INJECTION: forcing a failure. [ 114.132162][ T29] name failslab, interval 1, probability 100, space 0, times 99 [ 114.133661][ T7500] FAULT_INJECTION: forcing a failure. [ 114.133661][ T7500] name failslab, interval 1, probability 100, space 0, times 98 [ 114.133680][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.8.296 Not tainted syzkaller #0 PREEMPT(full) [ 114.133693][ T7500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.133700][ T7500] Call Trace: [ 114.133704][ T7500] [ 114.133709][ T7500] dump_stack_lvl+0x100/0x190 [ 114.133725][ T7500] should_fail_ex.cold+0x5/0xa [ 114.133738][ T7500] should_failslab+0xc2/0x120 [ 114.133754][ T7500] kmem_cache_alloc_noprof+0x91/0x6a0 [ 114.133769][ T7500] ? __pfx_acct_collect+0x10/0x10 [ 114.133789][ T7500] ? taskstats_exit+0x6d3/0xca0 [ 114.133822][ T7500] taskstats_exit+0x6d3/0xca0 [ 114.133846][ T7500] ? __pfx_acct_update_integrals+0x10/0x10 [ 114.133872][ T7500] ? __pfx_taskstats_exit+0x10/0x10 [ 114.133899][ T7500] ? rcu_read_lock_any_held+0x6a/0xa0 [ 114.133927][ T7500] do_exit+0x65c/0x2ae0 [ 114.133957][ T7500] ? __pfx_do_exit+0x10/0x10 [ 114.133981][ T7500] ? do_raw_spin_lock+0x128/0x260 [ 114.134001][ T7500] ? find_held_lock+0x2b/0x80 [ 114.134023][ T7500] ? get_signal+0x7e0/0x21e0 [ 114.134046][ T7500] do_group_exit+0xd5/0x2a0 [ 114.134072][ T7500] get_signal+0x1ec7/0x21e0 [ 114.134099][ T7500] ? __pfx_get_signal+0x10/0x10 [ 114.134120][ T7500] ? do_futex+0x190/0x440 [ 114.134142][ T7500] arch_do_signal_or_restart+0x91/0x7a0 [ 114.134174][ T7500] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 114.134208][ T7500] exit_to_user_mode_loop+0x139/0x6f0 [ 114.134225][ T7500] ? rcu_is_watching+0x12/0xc0 [ 114.134245][ T7500] __do_fast_syscall_32+0x701/0x970 [ 114.134268][ T7500] do_fast_syscall_32+0x32/0x70 [ 114.134286][ T7500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.134305][ T7500] RIP: 0023:0xf7fc6fec [ 114.134322][ T7500] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 114.134329][ T7500] RSP: 002b:00000000f54865bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 114.134343][ T7500] RAX: fffffffffffffe00 RBX: 00000000f7484f88 RCX: 0000000000000080 [ 114.134352][ T7500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7484f8c [ 114.134361][ T7500] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 114.134370][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.134379][ T7500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.134398][ T7500] [ 114.135737][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.135759][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.135771][ T5821] Workqueue: events nsim_fib_event_work [ 114.135791][ T5821] Call Trace: [ 114.135798][ T5821] [ 114.135805][ T5821] dump_stack_lvl+0x100/0x190 [ 114.135825][ T5821] should_fail_ex.cold+0x5/0xa [ 114.135845][ T5821] should_failslab+0xc2/0x120 [ 114.135867][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.135886][ T5821] ? nsim_fib_event_work+0x156d/0x6310 [ 114.135907][ T5821] nsim_fib_event_work+0x156d/0x6310 [ 114.135931][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.135957][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.135978][ T5821] ? rcu_is_watching+0x12/0xc0 [ 114.136002][ T5821] process_one_work+0xa23/0x1940 [ 114.136035][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 114.136063][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.136083][ T5821] worker_thread+0x5ef/0xe50 [ 114.136111][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.136135][ T5821] ? kthread+0x13a/0x450 [ 114.136156][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.136176][ T5821] kthread+0x370/0x450 [ 114.136195][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.136217][ T5821] ret_from_fork+0x72b/0xd50 [ 114.136246][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 114.136267][ T5821] ? __switch_to+0x800/0x10f0 [ 114.136292][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.136314][ T5821] ret_from_fork_asm+0x1a/0x30 [ 114.136348][ T5821] [ 114.136375][ T5821] FAULT_INJECTION: forcing a failure. [ 114.136375][ T5821] name failslab, interval 1, probability 100, space 0, times 96 [ 114.139796][ T7338] FAULT_INJECTION: forcing a failure. [ 114.139796][ T7338] name failslab, interval 1, probability 100, space 0, times 96 [ 114.141316][ T5453] FAULT_INJECTION: forcing a failure. [ 114.141316][ T5453] name failslab, interval 1, probability 100, space 0, times 96 [ 114.142592][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 114.142615][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.142627][ T7338] Workqueue: events nsim_fib_event_work [ 114.142648][ T7338] Call Trace: [ 114.142655][ T7338] [ 114.142662][ T7338] dump_stack_lvl+0x100/0x190 [ 114.142682][ T7338] should_fail_ex.cold+0x5/0xa [ 114.142703][ T7338] should_failslab+0xc2/0x120 [ 114.142729][ T7338] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.142750][ T7338] ? nsim_fib_event_work+0x156d/0x6310 [ 114.142771][ T7338] nsim_fib_event_work+0x156d/0x6310 [ 114.142798][ T7338] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.142826][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.142850][ T7338] ? rcu_is_watching+0x12/0xc0 [ 114.142875][ T7338] process_one_work+0xa23/0x1940 [ 114.142908][ T7338] ? __pfx_process_one_work+0x10/0x10 [ 114.142930][ T7499] FAULT_INJECTION: forcing a failure. [ 114.142930][ T7499] name failslab, interval 1, probability 100, space 0, times 58 [ 114.142940][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.142959][ T7338] worker_thread+0x5ef/0xe50 [ 114.143012][ T7338] ? kthread+0x13a/0x450 [ 114.143032][ T7338] ? __pfx_worker_thread+0x10/0x10 [ 114.143055][ T7338] kthread+0x370/0x450 [ 114.143076][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.143100][ T7338] ret_from_fork+0x72b/0xd50 [ 114.143123][ T7338] ? __pfx_ret_from_fork+0x10/0x10 [ 114.143145][ T7338] ? __switch_to+0x800/0x10f0 [ 114.143171][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.143195][ T7338] ret_from_fork_asm+0x1a/0x30 [ 114.143232][ T7338] [ 114.143280][ T7338] FAULT_INJECTION: forcing a failure. [ 114.143280][ T7338] name failslab, interval 1, probability 100, space 0, times 57 [ 114.143309][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 114.143328][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.143340][ T7338] Workqueue: events nsim_fib_event_work [ 114.143356][ T7338] Call Trace: [ 114.143362][ T7338] [ 114.143368][ T7338] dump_stack_lvl+0x100/0x190 [ 114.143388][ T7338] should_fail_ex.cold+0x5/0xa [ 114.143409][ T7338] should_failslab+0xc2/0x120 [ 114.143435][ T7338] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.143455][ T7338] ? nsim_fib_event_work+0x156d/0x6310 [ 114.143477][ T7338] nsim_fib_event_work+0x156d/0x6310 [ 114.143506][ T7338] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.143533][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.143557][ T7338] ? rcu_is_watching+0x12/0xc0 [ 114.143606][ T7338] process_one_work+0xa23/0x1940 [ 114.143644][ T7338] ? __pfx_process_one_work+0x10/0x10 [ 114.143676][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.143698][ T7338] worker_thread+0x5ef/0xe50 [ 114.143734][ T7338] ? kthread+0x13a/0x450 [ 114.143756][ T7338] ? __pfx_worker_thread+0x10/0x10 [ 114.143780][ T7338] kthread+0x370/0x450 [ 114.143803][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.143828][ T7338] ret_from_fork+0x72b/0xd50 [ 114.143850][ T7338] ? __pfx_ret_from_fork+0x10/0x10 [ 114.143874][ T7338] ? __switch_to+0x800/0x10f0 [ 114.143902][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.143927][ T7338] ret_from_fork_asm+0x1a/0x30 [ 114.143965][ T7338] [ 114.143989][ T7338] FAULT_INJECTION: forcing a failure. [ 114.143989][ T7338] name failslab, interval 1, probability 100, space 0, times 56 [ 114.144009][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 114.144028][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.144040][ T7338] Workqueue: events nsim_fib_event_work [ 114.144056][ T7338] Call Trace: [ 114.144062][ T7338] [ 114.144069][ T7338] dump_stack_lvl+0x100/0x190 [ 114.144089][ T7338] should_fail_ex.cold+0x5/0xa [ 114.144110][ T7338] should_failslab+0xc2/0x120 [ 114.144135][ T7338] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.144155][ T7338] ? nsim_fib_event_work+0x156d/0x6310 [ 114.144178][ T7338] nsim_fib_event_work+0x156d/0x6310 [ 114.144206][ T7338] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.144234][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.144256][ T7338] ? rcu_is_watching+0x12/0xc0 [ 114.144279][ T7338] process_one_work+0xa23/0x1940 [ 114.144319][ T7338] ? __pfx_process_one_work+0x10/0x10 [ 114.144353][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.144373][ T7338] worker_thread+0x5ef/0xe50 [ 114.144406][ T7338] ? kthread+0x13a/0x450 [ 114.144428][ T7338] ? __pfx_worker_thread+0x10/0x10 [ 114.144451][ T7338] kthread+0x370/0x450 [ 114.144474][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.144497][ T7338] ret_from_fork+0x72b/0xd50 [ 114.144520][ T7338] ? __pfx_ret_from_fork+0x10/0x10 [ 114.144544][ T7338] ? __switch_to+0x800/0x10f0 [ 114.144570][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.144596][ T7338] ret_from_fork_asm+0x1a/0x30 [ 114.144647][ T7338] [ 114.144660][ T5453] CPU: 3 UID: 101 PID: 5453 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 114.144680][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.144690][ T5453] Call Trace: [ 114.144697][ T5453] [ 114.144704][ T5453] dump_stack_lvl+0x100/0x190 [ 114.144717][ T7338] FAULT_INJECTION: forcing a failure. [ 114.144717][ T7338] name failslab, interval 1, probability 100, space 0, times 55 [ 114.144724][ T5453] should_fail_ex.cold+0x5/0xa [ 114.144743][ T5453] should_failslab+0xc2/0x120 [ 114.144765][ T5453] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 114.144786][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.144806][ T5453] ? __alloc_skb+0x140/0x710 [ 114.144828][ T5453] __alloc_skb+0x140/0x710 [ 114.144846][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.144865][ T5453] ? __pfx___alloc_skb+0x10/0x10 [ 114.144885][ T5453] ? fput+0x79/0x100 [ 114.144904][ T5453] ? poll_freewait+0x1bc/0x250 [ 114.144931][ T5453] alloc_skb_with_frags+0xdd/0x760 [ 114.144953][ T5453] ? do_sys_poll+0x3b0/0xe90 [ 114.144981][ T5453] sock_alloc_send_pskb+0x801/0x980 [ 114.145003][ T5453] ? __pfx_do_sys_poll+0x10/0x10 [ 114.145031][ T5453] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 114.145049][ T5453] ? __lock_acquire+0x49f/0x1a40 [ 114.145082][ T5453] unix_dgram_sendmsg+0x3c7/0x1810 [ 114.145106][ T5453] ? aa_file_perm+0x7e4/0x14d0 [ 114.145130][ T5453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.145155][ T5453] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 114.145180][ T5453] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 114.145199][ T5453] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.145229][ T5453] ? __pfx_pollwake+0x10/0x10 [ 114.145254][ T5453] ? __pfx_aa_file_perm+0x10/0x10 [ 114.145276][ T5453] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 114.145296][ T5453] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 114.145319][ T5453] sock_write_iter+0x53a/0x5b0 [ 114.145335][ T5453] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 114.145356][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.145378][ T5453] ? bpf_lsm_file_permission+0x9/0x10 [ 114.145395][ T5453] ? security_file_permission+0x76/0x210 [ 114.145418][ T5453] ? rw_verify_area+0xce/0x6d0 [ 114.145444][ T5453] vfs_write+0x6ac/0x1050 [ 114.145461][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.145478][ T5453] ? __pfx_vfs_write+0x10/0x10 [ 114.145496][ T5453] ? __seccomp_filter+0x89d/0x1140 [ 114.145517][ T5453] ? __pfx___seccomp_filter+0x10/0x10 [ 114.145539][ T5453] ksys_write+0x1f8/0x250 [ 114.145555][ T5453] ? __pfx_ksys_write+0x10/0x10 [ 114.145577][ T5453] do_syscall_64+0x115/0x840 [ 114.145596][ T5453] ? clear_bhb_loop+0x40/0x90 [ 114.145616][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.145633][ T5453] RIP: 0033:0x7fd4e9dda407 [ 114.145648][ T5453] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.145663][ T5453] RSP: 002b:00007ffe5abb7270 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 114.145679][ T5453] RAX: ffffffffffffffda RBX: 00007fd4e9d50780 RCX: 00007fd4e9dda407 [ 114.145689][ T5453] RDX: 0000000000000039 RSI: 00007ffe5abb72d0 RDI: 0000000000000005 [ 114.145698][ T5453] RBP: 0000560f8dc4b71c R08: 0000000000000000 R09: 0000000000000000 [ 114.145708][ T5453] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe5abb7700 [ 114.145718][ T5453] R13: 0000560fb2b24230 R14: 0000560fb2b242d1 R15: 00007ffe5abb9d30 [ 114.145740][ T5453] [ 114.145772][ T5453] FAULT_INJECTION: forcing a failure. [ 114.145772][ T5453] name failslab, interval 1, probability 100, space 0, times 54 [ 114.145791][ T5453] CPU: 3 UID: 101 PID: 5453 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 114.145809][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.145819][ T5453] Call Trace: [ 114.145824][ T5453] [ 114.145830][ T5453] dump_stack_lvl+0x100/0x190 [ 114.145848][ T5453] should_fail_ex.cold+0x5/0xa [ 114.145867][ T5453] should_failslab+0xc2/0x120 [ 114.145888][ T5453] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 114.145910][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.145928][ T5453] ? __alloc_skb+0x140/0x710 [ 114.145952][ T5453] __alloc_skb+0x140/0x710 [ 114.145971][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.145990][ T5453] ? __pfx___alloc_skb+0x10/0x10 [ 114.146016][ T5453] alloc_skb_with_frags+0xdd/0x760 [ 114.146039][ T5453] ? dump_stack_lvl+0x17c/0x190 [ 114.146060][ T5453] sock_alloc_send_pskb+0x801/0x980 [ 114.146082][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.146105][ T5453] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 114.146124][ T5453] ? __alloc_skb+0x4e9/0x710 [ 114.146142][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.146162][ T5453] ? __pfx___alloc_skb+0x10/0x10 [ 114.146182][ T5453] ? fput+0x79/0x100 [ 114.146200][ T5453] ? poll_freewait+0x1bc/0x250 [ 114.146231][ T5453] unix_dgram_sendmsg+0x3c7/0x1810 [ 114.146254][ T5453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.146279][ T5453] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 114.146303][ T5453] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 114.146323][ T5453] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.146351][ T5453] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 114.146371][ T5453] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 114.146394][ T5453] sock_write_iter+0x53a/0x5b0 [ 114.146410][ T5453] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 114.146431][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.146460][ T5453] do_iter_readv_writev+0x6f7/0x930 [ 114.146485][ T5453] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 114.146512][ T5453] ? bpf_lsm_file_permission+0x9/0x10 [ 114.146527][ T5453] ? security_file_permission+0x76/0x210 [ 114.146549][ T5453] ? rw_verify_area+0xce/0x6d0 [ 114.146573][ T5453] vfs_writev+0x360/0xdd0 [ 114.146602][ T5453] ? __pfx_vfs_writev+0x10/0x10 [ 114.146624][ T5453] ? rw_verify_area+0xce/0x6d0 [ 114.146650][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.146682][ T5453] ? do_writev+0x28a/0x340 [ 114.146704][ T5453] do_writev+0x28a/0x340 [ 114.146727][ T5453] ? __pfx_do_writev+0x10/0x10 [ 114.146756][ T5453] do_syscall_64+0x115/0x840 [ 114.146776][ T5453] ? clear_bhb_loop+0x40/0x90 [ 114.146795][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.146811][ T5453] RIP: 0033:0x7fd4e9dda407 [ 114.146825][ T5453] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.146839][ T5453] RSP: 002b:00007ffe5abb7610 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 114.146854][ T5453] RAX: ffffffffffffffda RBX: 00007fd4e9d50780 RCX: 00007fd4e9dda407 [ 114.146865][ T5453] RDX: 0000000000000005 RSI: 00007ffe5abb7670 RDI: 000000000000000a [ 114.146875][ T5453] RBP: 0000560fb2b242d1 R08: 0000000000000000 R09: 0000000000000000 [ 114.146884][ T5453] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe5abb7800 [ 114.146894][ T5453] R13: 000000000000240e R14: 0000560fb2b242d1 R15: 00007ffe5abb9d30 [ 114.146916][ T5453] [ 114.146926][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.8.296 Not tainted syzkaller #0 PREEMPT(full) [ 114.146940][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.146947][ T7499] Call Trace: [ 114.146952][ T7499] [ 114.146948][ T5453] FAULT_INJECTION: forcing a failure. [ 114.146948][ T5453] name failslab, interval 1, probability 100, space 0, times 53 [ 114.146956][ T7499] dump_stack_lvl+0x100/0x190 [ 114.146970][ T7499] should_fail_ex.cold+0x5/0xa [ 114.146982][ T7499] should_failslab+0xc2/0x120 [ 114.146997][ T7499] kmem_cache_alloc_noprof+0x91/0x6a0 [ 114.147011][ T7499] ? __send_signal_locked+0x155/0x12d0 [ 114.147031][ T7499] __send_signal_locked+0x155/0x12d0 [ 114.147051][ T7499] do_notify_parent+0xf05/0x10b0 [ 114.147069][ T7499] ? __pfx_do_notify_parent+0x10/0x10 [ 114.147085][ T7499] ? do_raw_spin_lock+0x128/0x260 [ 114.147102][ T7499] ? will_become_orphaned_pgrp+0x2a6/0x340 [ 114.147121][ T7499] do_exit+0x1b75/0x2ae0 [ 114.147138][ T7499] ? __pfx_do_exit+0x10/0x10 [ 114.147156][ T7499] do_group_exit+0xd5/0x2a0 [ 114.147171][ T7499] __ia32_sys_exit_group+0x3e/0x50 [ 114.147187][ T7499] ia32_sys_call+0x19ea/0x19f0 [ 114.147202][ T7499] __do_fast_syscall_32+0xe7/0x970 [ 114.147218][ T7499] do_fast_syscall_32+0x32/0x70 [ 114.147233][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.147247][ T7499] RIP: 0023:0xf7fc6fec [ 114.147256][ T7499] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 114.147261][ T7499] RSP: 002b:00000000ff805cac EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 114.147272][ T7499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 114.147279][ T7499] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71f8459 [ 114.147285][ T7499] RBP: 00000000f7456ff4 R08: 0000000000000000 R09: 0000000000000000 [ 114.147292][ T7499] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 114.147299][ T7499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.147311][ T7499] [ 114.147753][ T7048] FAULT_INJECTION: forcing a failure. [ 114.147753][ T7048] name failslab, interval 1, probability 100, space 0, times 51 [ 114.147769][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 114.147781][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.147788][ T7048] Call Trace: [ 114.147791][ T7048] [ 114.147796][ T7048] dump_stack_lvl+0x100/0x190 [ 114.147814][ T7048] should_fail_ex.cold+0x5/0xa [ 114.147826][ T7048] should_failslab+0xc2/0x120 [ 114.147841][ T7048] kmem_cache_alloc_noprof+0x91/0x6a0 [ 114.147855][ T7048] ? do_getname+0x35/0x390 [ 114.147871][ T7048] do_getname+0x35/0x390 [ 114.147886][ T7048] user_path_at+0x26/0x60 [ 114.147904][ T7048] __ia32_sys_umount+0x109/0x190 [ 114.147916][ T7048] ? __pfx___ia32_sys_umount+0x10/0x10 [ 114.147931][ T7048] __do_fast_syscall_32+0xe7/0x970 [ 114.147945][ T7048] ? lockdep_hardirqs_on+0x78/0x100 [ 114.147960][ T7048] do_fast_syscall_32+0x32/0x70 [ 114.147974][ T7048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.147987][ T7048] RIP: 0023:0xf7fc6fec [ 114.147996][ T7048] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.148007][ T7048] RSP: 002b:00000000ff804c38 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 114.148017][ T7048] RAX: ffffffffffffffda RBX: 00000000ff805d74 RCX: 0000000000000009 [ 114.148023][ T7048] RDX: 00000000f7456ff4 RSI: 00000000f72914fe RDI: 00000000ff805d74 [ 114.148030][ T7048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.148036][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.148042][ T7048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.148055][ T7048] [ 114.148062][ T7048] FAULT_INJECTION: forcing a failure. [ 114.148062][ T7048] name failslab, interval 1, probability 100, space 0, times 50 [ 114.148074][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 114.148085][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.148091][ T7048] Call Trace: [ 114.148095][ T7048] [ 114.148099][ T7048] dump_stack_lvl+0x100/0x190 [ 114.148110][ T7048] should_fail_ex.cold+0x5/0xa [ 114.148122][ T7048] should_failslab+0xc2/0x120 [ 114.148136][ T7048] kmem_cache_alloc_noprof+0x91/0x6a0 [ 114.148150][ T7048] ? do_getname+0x35/0x390 [ 114.148166][ T7048] do_getname+0x35/0x390 [ 114.148180][ T7048] do_sys_openat2+0xc7/0x1e0 [ 114.148195][ T7048] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.148214][ T7048] __ia32_compat_sys_openat+0x12d/0x210 [ 114.148230][ T7048] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 114.148246][ T7048] ? __pfx___ia32_sys_umount+0x10/0x10 [ 114.148261][ T7048] __do_fast_syscall_32+0xe7/0x970 [ 114.148274][ T7048] ? lockdep_hardirqs_on+0x78/0x100 [ 114.148288][ T7048] do_fast_syscall_32+0x32/0x70 [ 114.148301][ T7048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.148315][ T7048] RIP: 0023:0xf7fc6fec [ 114.148311][ T7336] FAULT_INJECTION: forcing a failure. [ 114.148311][ T7336] name failslab, interval 1, probability 100, space 0, times 50 [ 114.148323][ T7048] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.148333][ T7048] RSP: 002b:00000000ff804c10 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 114.148343][ T7048] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ff805d74 [ 114.148349][ T7048] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f7456ff4 [ 114.148356][ T7048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.148362][ T7048] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.148368][ T7048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.148381][ T7048] [ 114.150309][ T5453] CPU: 3 UID: 101 PID: 5453 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 114.150329][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.150338][ T5453] Call Trace: [ 114.150344][ T5453] [ 114.150350][ T5453] dump_stack_lvl+0x100/0x190 [ 114.150370][ T5453] should_fail_ex.cold+0x5/0xa [ 114.150388][ T5453] should_failslab+0xc2/0x120 [ 114.150409][ T5453] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 114.150429][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.150449][ T5453] ? __alloc_skb+0x140/0x710 [ 114.150471][ T5453] __alloc_skb+0x140/0x710 [ 114.150489][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.150508][ T5453] ? __pfx___alloc_skb+0x10/0x10 [ 114.150528][ T5453] ? fput+0x79/0x100 [ 114.150546][ T5453] ? poll_freewait+0x1bc/0x250 [ 114.150572][ T5453] alloc_skb_with_frags+0xdd/0x760 [ 114.150594][ T5453] ? unix_dgram_sendmsg+0x79b/0x1810 [ 114.150621][ T5453] sock_alloc_send_pskb+0x801/0x980 [ 114.150642][ T5453] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.150671][ T5453] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 114.150689][ T5453] ? __lock_acquire+0x49f/0x1a40 [ 114.150716][ T5453] ? unix_seqpacket_sendmsg+0x132/0x1d0 [ 114.150741][ T5453] unix_dgram_sendmsg+0x3c7/0x1810 [ 114.150762][ T5453] ? aa_file_perm+0x7e4/0x14d0 [ 114.150784][ T5453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.150808][ T5453] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 114.150833][ T5453] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 114.150853][ T5453] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.150882][ T5453] ? __pfx_aa_file_perm+0x10/0x10 [ 114.150903][ T5453] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 114.150923][ T5453] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 114.150945][ T5453] sock_write_iter+0x53a/0x5b0 [ 114.150961][ T5453] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 114.150982][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.151004][ T5453] ? bpf_lsm_file_permission+0x9/0x10 [ 114.151019][ T5453] ? security_file_permission+0x76/0x210 [ 114.151042][ T5453] ? rw_verify_area+0xce/0x6d0 [ 114.151066][ T5453] vfs_write+0x6ac/0x1050 [ 114.151082][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.151101][ T5453] ? __pfx_vfs_write+0x10/0x10 [ 114.151119][ T5453] ? __seccomp_filter+0x89d/0x1140 [ 114.151141][ T5453] ? __pfx___seccomp_filter+0x10/0x10 [ 114.151162][ T5453] ksys_write+0x1f8/0x250 [ 114.151177][ T5453] ? __pfx_ksys_write+0x10/0x10 [ 114.151198][ T5453] do_syscall_64+0x115/0x840 [ 114.151217][ T5453] ? clear_bhb_loop+0x40/0x90 [ 114.151242][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.151259][ T5453] RIP: 0033:0x7fd4e9dda407 [ 114.151272][ T5453] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.151286][ T5453] RSP: 002b:00007ffe5abb6d40 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 114.151301][ T5453] RAX: ffffffffffffffda RBX: 00007fd4e9d50780 RCX: 00007fd4e9dda407 [ 114.151312][ T5453] RDX: 0000000000000045 RSI: 00007ffe5abb6da0 RDI: 0000000000000005 [ 114.151321][ T5453] RBP: 0000560f8dc4b301 R08: 0000000000000000 R09: 0000000000000000 [ 114.151331][ T5453] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe5abb71d0 [ 114.151341][ T5453] R13: 0000000000000069 R14: 00007ffe5abb7700 R15: 00007ffe5abb72b0 [ 114.151363][ T5453] [ 114.151405][ T5453] FAULT_INJECTION: forcing a failure. [ 114.151405][ T5453] name failslab, interval 1, probability 100, space 0, times 48 [ 114.152034][ T13] FAULT_INJECTION: forcing a failure. [ 114.152034][ T13] name failslab, interval 1, probability 100, space 0, times 47 [ 114.152060][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 114.152078][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.152088][ T13] Workqueue: bat_events batadv_mcast_mla_update [ 114.152117][ T13] Call Trace: [ 114.152123][ T13] [ 114.152130][ T13] dump_stack_lvl+0x100/0x190 [ 114.152149][ T13] should_fail_ex.cold+0x5/0xa [ 114.152166][ T13] should_failslab+0xc2/0x120 [ 114.152190][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.152207][ T13] ? batadv_mcast_mla_update+0x1ed5/0x3200 [ 114.152234][ T13] batadv_mcast_mla_update+0x1ed5/0x3200 [ 114.152263][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 114.152291][ T13] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.152324][ T13] ? rcu_is_watching+0x12/0xc0 [ 114.152348][ T13] process_one_work+0xa23/0x1940 [ 114.152382][ T13] ? __pfx_process_one_work+0x10/0x10 [ 114.152412][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 114.152439][ T13] worker_thread+0x5ef/0xe50 [ 114.152468][ T13] ? kthread+0x13a/0x450 [ 114.152489][ T13] ? __pfx_worker_thread+0x10/0x10 [ 114.152511][ T13] kthread+0x370/0x450 [ 114.152533][ T13] ? __pfx_kthread+0x10/0x10 [ 114.152555][ T13] ret_from_fork+0x72b/0xd50 [ 114.152575][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 114.152593][ T13] ? __switch_to+0x800/0x10f0 [ 114.152610][ T13] ? __pfx_kthread+0x10/0x10 [ 114.152625][ T13] ret_from_fork_asm+0x1a/0x30 [ 114.152655][ T13] [ 114.152665][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 114.152679][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.152687][ T29] Workqueue: events nsim_fib_event_work [ 114.152700][ T29] Call Trace: [ 114.152704][ T29] [ 114.152708][ T29] dump_stack_lvl+0x100/0x190 [ 114.152721][ T29] should_fail_ex.cold+0x5/0xa [ 114.152734][ T29] should_failslab+0xc2/0x120 [ 114.152749][ T29] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.152761][ T29] ? nsim_fib_event_work+0x156d/0x6310 [ 114.152774][ T29] nsim_fib_event_work+0x156d/0x6310 [ 114.152790][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.152809][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.152823][ T29] ? rcu_is_watching+0x12/0xc0 [ 114.152838][ T29] process_one_work+0xa23/0x1940 [ 114.152859][ T29] ? __pfx_process_one_work+0x10/0x10 [ 114.152879][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.152891][ T29] worker_thread+0x5ef/0xe50 [ 114.152912][ T29] ? kthread+0x13a/0x450 [ 114.152925][ T29] ? __pfx_worker_thread+0x10/0x10 [ 114.152940][ T29] kthread+0x370/0x450 [ 114.152953][ T29] ? __pfx_kthread+0x10/0x10 [ 114.152969][ T29] ret_from_fork+0x72b/0xd50 [ 114.152982][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 114.152996][ T29] ? __switch_to+0x800/0x10f0 [ 114.153013][ T29] ? __pfx_kthread+0x10/0x10 [ 114.153028][ T29] ret_from_fork_asm+0x1a/0x30 [ 114.153049][ T29] [ 114.153067][ T29] FAULT_INJECTION: forcing a failure. [ 114.153067][ T29] name failslab, interval 1, probability 100, space 0, times 45 [ 114.153895][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.153915][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.153926][ T5821] Workqueue: events nsim_fib_event_work [ 114.153944][ T5821] Call Trace: [ 114.153950][ T5821] [ 114.153957][ T5821] dump_stack_lvl+0x100/0x190 [ 114.153975][ T5821] should_fail_ex.cold+0x5/0xa [ 114.153994][ T5821] should_failslab+0xc2/0x120 [ 114.154017][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.154036][ T5821] ? nsim_fib_event_work+0x156d/0x6310 [ 114.154056][ T5821] nsim_fib_event_work+0x156d/0x6310 [ 114.154081][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.154105][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.154127][ T5821] ? rcu_is_watching+0x12/0xc0 [ 114.154150][ T5821] process_one_work+0xa23/0x1940 [ 114.154182][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 114.154211][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.154236][ T5821] worker_thread+0x5ef/0xe50 [ 114.154264][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.154304][ T5821] ? kthread+0x13a/0x450 [ 114.154324][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.154345][ T5821] kthread+0x370/0x450 [ 114.154365][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.154388][ T5821] ret_from_fork+0x72b/0xd50 [ 114.154409][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 114.154430][ T5821] ? __switch_to+0x800/0x10f0 [ 114.154454][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.154476][ T5821] ret_from_fork_asm+0x1a/0x30 [ 114.154509][ T5821] [ 114.154603][ T5821] FAULT_INJECTION: forcing a failure. [ 114.154603][ T5821] name failslab, interval 1, probability 100, space 0, times 44 [ 114.155683][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 114.155705][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.155717][ T7338] Workqueue: events nsim_fib_event_work [ 114.155735][ T7338] Call Trace: [ 114.155741][ T7338] [ 114.155748][ T7338] dump_stack_lvl+0x100/0x190 [ 114.155769][ T7338] should_fail_ex.cold+0x5/0xa [ 114.155787][ T7338] should_failslab+0xc2/0x120 [ 114.155811][ T7338] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.155831][ T7338] ? nsim_fib_event_work+0x156d/0x6310 [ 114.155854][ T7338] nsim_fib_event_work+0x156d/0x6310 [ 114.155883][ T7338] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.155909][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.155933][ T7338] ? rcu_is_watching+0x12/0xc0 [ 114.155957][ T7338] process_one_work+0xa23/0x1940 [ 114.155990][ T7338] ? __pfx_process_one_work+0x10/0x10 [ 114.156022][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.156042][ T7338] worker_thread+0x5ef/0xe50 [ 114.156075][ T7338] ? kthread+0x13a/0x450 [ 114.156096][ T7338] ? __pfx_worker_thread+0x10/0x10 [ 114.156119][ T7338] kthread+0x370/0x450 [ 114.156139][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.156162][ T7338] ret_from_fork+0x72b/0xd50 [ 114.156185][ T7338] ? __pfx_ret_from_fork+0x10/0x10 [ 114.156206][ T7338] ? __switch_to+0x800/0x10f0 [ 114.156232][ T7338] ? __pfx_kthread+0x10/0x10 [ 114.156256][ T7338] ret_from_fork_asm+0x1a/0x30 [ 114.156291][ T7338] [ 114.156324][ T7338] FAULT_INJECTION: forcing a failure. [ 114.156324][ T7338] name failslab, interval 1, probability 100, space 0, times 43 [ 114.157578][ T5453] CPU: 2 UID: 101 PID: 5453 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 114.157599][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.157608][ T5453] Call Trace: [ 114.157614][ T5453] [ 114.157620][ T5453] dump_stack_lvl+0x100/0x190 [ 114.157640][ T5453] should_fail_ex.cold+0x5/0xa [ 114.157659][ T5453] should_failslab+0xc2/0x120 [ 114.157680][ T5453] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 114.157704][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.157724][ T5453] ? __alloc_skb+0x140/0x710 [ 114.157754][ T5453] __alloc_skb+0x140/0x710 [ 114.157770][ T5453] ? __alloc_skb+0x5b7/0x710 [ 114.157783][ T5453] ? __pfx___alloc_skb+0x10/0x10 [ 114.157797][ T5453] ? fput+0x79/0x100 [ 114.157809][ T5453] ? poll_freewait+0x1bc/0x250 [ 114.157827][ T5453] alloc_skb_with_frags+0xdd/0x760 [ 114.157843][ T5453] ? unix_dgram_sendmsg+0x79b/0x1810 [ 114.157862][ T5453] sock_alloc_send_pskb+0x801/0x980 [ 114.157876][ T5453] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.157896][ T5453] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 114.157909][ T5453] ? __lock_acquire+0x49f/0x1a40 [ 114.157927][ T5453] ? unix_seqpacket_sendmsg+0x132/0x1d0 [ 114.157945][ T5453] unix_dgram_sendmsg+0x3c7/0x1810 [ 114.157959][ T5453] ? aa_file_perm+0x7e4/0x14d0 [ 114.157975][ T5453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.157992][ T5453] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 114.158009][ T5453] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 114.158023][ T5453] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 114.158042][ T5453] ? __pfx_aa_file_perm+0x10/0x10 [ 114.158057][ T5453] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 114.158071][ T5453] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 114.158086][ T5453] sock_write_iter+0x53a/0x5b0 [ 114.158097][ T5453] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 114.158112][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.158126][ T5453] ? bpf_lsm_file_permission+0x9/0x10 [ 114.158136][ T5453] ? security_file_permission+0x76/0x210 [ 114.158152][ T5453] ? rw_verify_area+0xce/0x6d0 [ 114.158168][ T5453] vfs_write+0x6ac/0x1050 [ 114.158179][ T5453] ? __pfx_sock_write_iter+0x10/0x10 [ 114.158191][ T5453] ? __pfx_vfs_write+0x10/0x10 [ 114.158202][ T5453] ? __seccomp_filter+0x89d/0x1140 [ 114.158216][ T5453] ? __pfx___seccomp_filter+0x10/0x10 [ 114.158231][ T5453] ksys_write+0x1f8/0x250 [ 114.158243][ T5453] ? __pfx_ksys_write+0x10/0x10 [ 114.158257][ T5453] do_syscall_64+0x115/0x840 [ 114.158274][ T5453] ? clear_bhb_loop+0x40/0x90 [ 114.158295][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.158312][ T5453] RIP: 0033:0x7fd4e9dda407 [ 114.158326][ T5453] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 114.158344][ T5453] RSP: 002b:00007ffe5abb9710 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 114.158360][ T5453] RAX: ffffffffffffffda RBX: 00007fd4e9d50780 RCX: 00007fd4e9dda407 [ 114.158370][ T5453] RDX: 0000000000000027 RSI: 00007ffe5abb9770 RDI: 0000000000000005 [ 114.158380][ T5453] RBP: 0000560f8dc4b9c2 R08: 0000000000000000 R09: 0000000000000000 [ 114.158390][ T5453] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe5abb9ba0 [ 114.158399][ T5453] R13: 0000560fb2b30d40 R14: 0000000000000000 R15: 00007ffe5abb9d30 [ 114.158421][ T5453] [ 114.158432][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.158452][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.158463][ T5821] Workqueue: events nsim_fib_event_work [ 114.158480][ T5821] Call Trace: [ 114.158486][ T5821] [ 114.158490][ T5453] FAULT_INJECTION: forcing a failure. [ 114.158490][ T5453] name failslab, interval 1, probability 100, space 0, times 41 [ 114.158492][ T5821] dump_stack_lvl+0x100/0x190 [ 114.158511][ T5821] should_fail_ex.cold+0x5/0xa [ 114.158529][ T5821] should_failslab+0xc2/0x120 [ 114.158551][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.158569][ T5821] ? nsim_fib_event_work+0x156d/0x6310 [ 114.158589][ T5821] nsim_fib_event_work+0x156d/0x6310 [ 114.158615][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.158639][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.158661][ T5821] ? rcu_is_watching+0x12/0xc0 [ 114.158684][ T5821] process_one_work+0xa23/0x1940 [ 114.158715][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 114.158745][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.158763][ T5821] worker_thread+0x5ef/0xe50 [ 114.158792][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.158817][ T5821] ? kthread+0x13a/0x450 [ 114.158836][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.158857][ T5821] kthread+0x370/0x450 [ 114.158877][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.158899][ T5821] ret_from_fork+0x72b/0xd50 [ 114.158919][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 114.158938][ T5821] ? __switch_to+0x800/0x10f0 [ 114.158962][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.158984][ T5821] ret_from_fork_asm+0x1a/0x30 [ 114.159017][ T5821] [ 114.159042][ T5821] FAULT_INJECTION: forcing a failure. [ 114.159042][ T5821] name failslab, interval 1, probability 100, space 0, times 40 [ 114.159061][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.159078][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.159088][ T5821] Workqueue: events nsim_fib_event_work [ 114.159102][ T5821] Call Trace: [ 114.159108][ T5821] [ 114.159113][ T5821] dump_stack_lvl+0x100/0x190 [ 114.159132][ T5821] should_fail_ex.cold+0x5/0xa [ 114.159150][ T5821] should_failslab+0xc2/0x120 [ 114.159172][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.159190][ T5821] ? nsim_fib_event_work+0x156d/0x6310 [ 114.159210][ T5821] nsim_fib_event_work+0x156d/0x6310 [ 114.159241][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.159265][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.159287][ T5821] ? rcu_is_watching+0x12/0xc0 [ 114.159309][ T5821] process_one_work+0xa23/0x1940 [ 114.159340][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 114.159370][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.159388][ T5821] worker_thread+0x5ef/0xe50 [ 114.159417][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.159439][ T5821] ? kthread+0x13a/0x450 [ 114.159458][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.159479][ T5821] kthread+0x370/0x450 [ 114.159499][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.159520][ T5821] ret_from_fork+0x72b/0xd50 [ 114.159541][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 114.159562][ T5821] ? __switch_to+0x800/0x10f0 [ 114.159611][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.159630][ T5821] ret_from_fork_asm+0x1a/0x30 [ 114.159658][ T5821] [ 114.159677][ T5821] FAULT_INJECTION: forcing a failure. [ 114.159677][ T5821] name failslab, interval 1, probability 100, space 0, times 39 [ 114.159693][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.159707][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.159716][ T5821] Workqueue: events nsim_fib_event_work [ 114.159730][ T5821] Call Trace: [ 114.159734][ T5821] [ 114.159739][ T5821] dump_stack_lvl+0x100/0x190 [ 114.159754][ T5821] should_fail_ex.cold+0x5/0xa [ 114.159769][ T5821] should_failslab+0xc2/0x120 [ 114.159788][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.159804][ T5821] ? nsim_fib_event_work+0x156d/0x6310 [ 114.159821][ T5821] nsim_fib_event_work+0x156d/0x6310 [ 114.159842][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.159862][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.159881][ T5821] ? rcu_is_watching+0x12/0xc0 [ 114.159900][ T5821] process_one_work+0xa23/0x1940 [ 114.159927][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 114.159952][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.159968][ T5821] worker_thread+0x5ef/0xe50 [ 114.159992][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.160013][ T5821] ? kthread+0x13a/0x450 [ 114.160029][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.160047][ T5821] kthread+0x370/0x450 [ 114.160065][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.160083][ T5821] ret_from_fork+0x72b/0xd50 [ 114.160100][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 114.160118][ T5821] ? __switch_to+0x800/0x10f0 [ 114.160139][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.160158][ T5821] ret_from_fork_asm+0x1a/0x30 [ 114.160185][ T5821] [ 114.160194][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 114.160203][ T5821] FAULT_INJECTION: forcing a failure. [ 114.160203][ T5821] name failslab, interval 1, probability 100, space 0, times 32 [ 114.160217][ T7336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.160228][ T7336] Workqueue: usb_hub_wq hub_event [ 114.160254][ T7336] Call Trace: [ 114.160260][ T7336] [ 114.160268][ T7336] dump_stack_lvl+0x100/0x190 [ 114.160289][ T7336] should_fail_ex.cold+0x5/0xa [ 114.160316][ T7336] should_failslab+0xc2/0x120 [ 114.160341][ T7336] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.160361][ T7336] ? usb_control_msg+0xbc/0x4b0 [ 114.160387][ T7336] usb_control_msg+0xbc/0x4b0 [ 114.160409][ T7336] ? __pfx_usb_control_msg+0x10/0x10 [ 114.160432][ T7336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.160463][ T7336] hub_port_init+0x1229/0x37f0 [ 114.160498][ T7336] hub_event+0x2e7d/0x4a60 [ 114.160546][ T7336] ? __pfx_hub_event+0x10/0x10 [ 114.160570][ T7336] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.160603][ T7336] ? rcu_is_watching+0x12/0xc0 [ 114.160629][ T7336] process_one_work+0xa23/0x1940 [ 114.160666][ T7336] ? __pfx_process_one_work+0x10/0x10 [ 114.160700][ T7336] ? __pfx_hub_event+0x10/0x10 [ 114.160727][ T7336] worker_thread+0x5ef/0xe50 [ 114.160760][ T7336] ? kthread+0x13a/0x450 [ 114.160782][ T7336] ? __pfx_worker_thread+0x10/0x10 [ 114.160804][ T7336] kthread+0x370/0x450 [ 114.160825][ T7336] ? __pfx_kthread+0x10/0x10 [ 114.160848][ T7336] ret_from_fork+0x72b/0xd50 [ 114.160871][ T7336] ? __pfx_ret_from_fork+0x10/0x10 [ 114.160895][ T7336] ? __switch_to+0x800/0x10f0 [ 114.160923][ T7336] ? __pfx_kthread+0x10/0x10 [ 114.160947][ T7336] ret_from_fork_asm+0x1a/0x30 [ 114.160983][ T7336] [ 114.161024][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 114.161044][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.161056][ T29] Workqueue: events nsim_fib_event_work [ 114.161074][ T29] Call Trace: [ 114.161080][ T29] [ 114.161086][ T29] dump_stack_lvl+0x100/0x190 [ 114.161108][ T29] should_fail_ex.cold+0x5/0xa [ 114.161129][ T29] should_failslab+0xc2/0x120 [ 114.161155][ T29] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.161174][ T29] ? nsim_fib_event_work+0x156d/0x6310 [ 114.161198][ T29] nsim_fib_event_work+0x156d/0x6310 [ 114.161227][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.161256][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.161282][ T29] ? rcu_is_watching+0x12/0xc0 [ 114.161316][ T29] process_one_work+0xa23/0x1940 [ 114.161350][ T29] ? __pfx_process_one_work+0x10/0x10 [ 114.161384][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.161405][ T29] worker_thread+0x5ef/0xe50 [ 114.161441][ T29] ? kthread+0x13a/0x450 [ 114.161463][ T29] ? __pfx_worker_thread+0x10/0x10 [ 114.161504][ T29] kthread+0x370/0x450 [ 114.161527][ T29] ? __pfx_kthread+0x10/0x10 [ 114.161553][ T29] ret_from_fork+0x72b/0xd50 [ 114.161593][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 114.161617][ T29] ? __switch_to+0x800/0x10f0 [ 114.161643][ T29] ? __pfx_kthread+0x10/0x10 [ 114.161668][ T29] ret_from_fork_asm+0x1a/0x30 [ 114.161704][ T29] [ 114.161788][ T29] FAULT_INJECTION: forcing a failure. [ 114.161788][ T29] name failslab, interval 1, probability 100, space 0, times 2 [ 114.161810][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 114.161847][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.161858][ T29] Workqueue: events nsim_fib_event_work [ 114.161874][ T29] Call Trace: [ 114.161879][ T29] [ 114.161885][ T29] dump_stack_lvl+0x100/0x190 [ 114.161906][ T29] should_fail_ex.cold+0x5/0xa [ 114.161927][ T29] should_failslab+0xc2/0x120 [ 114.161950][ T29] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.161971][ T29] ? nsim_fib_event_work+0x156d/0x6310 [ 114.161993][ T29] nsim_fib_event_work+0x156d/0x6310 [ 114.162019][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.162048][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.162072][ T29] ? rcu_is_watching+0x12/0xc0 [ 114.162098][ T29] process_one_work+0xa23/0x1940 [ 114.162135][ T29] ? __pfx_process_one_work+0x10/0x10 [ 114.162166][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.162185][ T29] worker_thread+0x5ef/0xe50 [ 114.162219][ T29] ? kthread+0x13a/0x450 [ 114.162241][ T29] ? __pfx_worker_thread+0x10/0x10 [ 114.162265][ T29] kthread+0x370/0x450 [ 114.162288][ T29] ? __pfx_kthread+0x10/0x10 [ 114.162320][ T29] ret_from_fork+0x72b/0xd50 [ 114.162343][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 114.162366][ T29] ? __switch_to+0x800/0x10f0 [ 114.162392][ T29] ? __pfx_kthread+0x10/0x10 [ 114.162415][ T29] ret_from_fork_asm+0x1a/0x30 [ 114.162451][ T29] [ 114.162459][ T5453] CPU: 2 UID: 101 PID: 5453 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 114.162474][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.162480][ T5453] Call Trace: [ 114.162498][ T5453] [ 114.162494][ T29] FAULT_INJECTION: forcing a failure. [ 114.162494][ T29] name failslab, interval 1, probability 100, space 0, times 1 [ 114.162503][ T5453] dump_stack_lvl+0x100/0x190 [ 114.162517][ T5453] should_fail_ex.cold+0x5/0xa [ 114.162529][ T5453] should_failslab+0xc2/0x120 [ 114.162544][ T5453] __kmalloc_noprof+0xfc/0x820 [ 114.162557][ T5453] ? rcu_is_watching+0x12/0xc0 [ 114.162570][ T5453] ? tomoyo_realpath_from_path+0xb6/0x690 [ 114.162589][ T5453] tomoyo_realpath_from_path+0xb6/0x690 [ 114.162608][ T5453] tomoyo_path_number_perm+0x23c/0x580 [ 114.162622][ T5453] ? tomoyo_path_number_perm+0x22e/0x580 [ 114.162637][ T5453] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.162663][ T5453] ? __seccomp_filter+0x89d/0x1140 [ 114.162676][ T5453] ? hook_file_ioctl_common+0x140/0x440 [ 114.162691][ T5453] ? __pfx___seccomp_filter+0x10/0x10 [ 114.162708][ T5453] security_file_ioctl+0xd3/0x230 [ 114.162723][ T5453] __x64_sys_ioctl+0xb7/0x210 [ 114.162744][ T5453] do_syscall_64+0x115/0x840 [ 114.162757][ T5453] ? clear_bhb_loop+0x40/0x90 [ 114.162771][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.162782][ T5453] RIP: 0033:0x7fd4e9e50378 [ 114.162791][ T5453] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 114.162803][ T5453] RSP: 002b:00007ffe5abb9978 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.162814][ T5453] RAX: ffffffffffffffda RBX: 0000560fb2cfd670 RCX: 00007fd4e9e50378 [ 114.162821][ T5453] RDX: 00007ffe5abb9980 RSI: 0000000000008921 RDI: 000000000000000f [ 114.162827][ T5453] RBP: 00007ffe5abb9980 R08: 0000000000000000 R09: 0000000000000000 [ 114.162834][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000560fb2b24230 [ 114.162844][ T5453] R13: 0000560fb2cfd670 R14: 0000560fb2b24230 R15: 00007ffe5abb9bd0 [ 114.162864][ T5453] [ 114.162888][ T5453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.163999][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.164017][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.164026][ T5821] Workqueue: events nsim_fib_event_work [ 114.164041][ T5821] Call Trace: [ 114.164046][ T5821] [ 114.164051][ T5821] dump_stack_lvl+0x100/0x190 [ 114.164067][ T5821] should_fail_ex.cold+0x5/0xa [ 114.164083][ T5821] should_failslab+0xc2/0x120 [ 114.164102][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.164117][ T5821] ? nsim_fib_event_work+0x156d/0x6310 [ 114.164134][ T5821] nsim_fib_event_work+0x156d/0x6310 [ 114.164169][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 114.164192][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.164210][ T5821] ? rcu_is_watching+0x12/0xc0 [ 114.164234][ T5821] process_one_work+0xa23/0x1940 [ 114.164262][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 114.164287][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 114.164303][ T5821] worker_thread+0x5ef/0xe50 [ 114.164327][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.164347][ T5821] ? kthread+0x13a/0x450 [ 114.164364][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 114.164382][ T5821] kthread+0x370/0x450 [ 114.164399][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.164418][ T5821] ret_from_fork+0x72b/0xd50 [ 114.164436][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 114.164454][ T5821] ? __switch_to+0x800/0x10f0 [ 114.164474][ T5821] ? __pfx_kthread+0x10/0x10 [ 114.164493][ T5821] ret_from_fork_asm+0x1a/0x30 [ 114.164520][ T5821] [ 115.701766][ T5757] Bluetooth: hci0: command tx timeout [ 115.703113][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 115.703130][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.703139][ T7338] Workqueue: events nsim_fib_event_work [ 115.703157][ T7338] Call Trace: [ 115.703161][ T7338] [ 115.703167][ T7338] dump_stack_lvl+0x100/0x190 [ 115.703182][ T7338] should_fail_ex.cold+0x5/0xa [ 115.703194][ T7338] should_failslab+0xc2/0x120 [ 115.703210][ T7338] __kmalloc_cache_noprof+0x91/0x6c0 [ 115.703223][ T7338] ? nsim_fib_event_work+0x156d/0x6310 [ 115.703237][ T7338] nsim_fib_event_work+0x156d/0x6310 [ 115.703252][ T7338] ? debug_object_deactivate+0x2e4/0x3b0 [ 115.703270][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 115.703284][ T7338] ? rcu_is_watching+0x12/0xc0 [ 115.703300][ T7338] process_one_work+0xa23/0x1940 [ 115.703322][ T7338] ? __pfx_process_one_work+0x10/0x10 [ 115.703341][ T7338] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 115.703354][ T7338] worker_thread+0x5ef/0xe50 [ 115.703376][ T7338] ? kthread+0x13a/0x450 [ 115.703391][ T7338] ? __pfx_worker_thread+0x10/0x10 [ 115.703405][ T7338] kthread+0x370/0x450 [ 115.703419][ T7338] ? __pfx_kthread+0x10/0x10 [ 115.703434][ T7338] ret_from_fork+0x72b/0xd50 [ 115.703450][ T7338] ? __pfx_ret_from_fork+0x10/0x10 [ 115.703464][ T7338] ? __switch_to+0x800/0x10f0 [ 115.703481][ T7338] ? __pfx_kthread+0x10/0x10 [ 115.703496][ T7338] ret_from_fork_asm+0x1a/0x30 [ 115.703518][ T7338] [ 115.703619][ T7336] usb 14-1: device not accepting address 2, error -12 [ 115.781900][ T5757] Bluetooth: hci3: command tx timeout [ 115.789872][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 115.789889][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.789898][ T29] Workqueue: events nsim_fib_event_work [ 115.789914][ T29] Call Trace: [ 115.789918][ T29] [ 115.789923][ T29] dump_stack_lvl+0x100/0x190 [ 115.789939][ T29] should_fail_ex.cold+0x5/0xa [ 115.789952][ T29] should_failslab+0xc2/0x120 [ 115.789968][ T29] __kmalloc_cache_noprof+0x91/0x6c0 [ 115.789981][ T29] ? nsim_fib_event_work+0x156d/0x6310 [ 115.789994][ T29] nsim_fib_event_work+0x156d/0x6310 [ 115.790011][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 115.790029][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 115.790043][ T29] ? rcu_is_watching+0x12/0xc0 [ 115.790059][ T29] process_one_work+0xa23/0x1940 [ 115.790081][ T29] ? __pfx_process_one_work+0x10/0x10 [ 115.790101][ T29] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 115.790113][ T29] worker_thread+0x5ef/0xe50 [ 115.790134][ T29] ? kthread+0x13a/0x450 [ 115.790148][ T29] ? __pfx_worker_thread+0x10/0x10 [ 115.790163][ T29] kthread+0x370/0x450 [ 115.790177][ T29] ? __pfx_kthread+0x10/0x10 [ 115.790192][ T29] ret_from_fork+0x72b/0xd50 [ 115.790207][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 115.790220][ T29] ? __switch_to+0x800/0x10f0 [ 115.790238][ T29] ? __pfx_kthread+0x10/0x10 [ 115.790253][ T29] ret_from_fork_asm+0x1a/0x30 [ 115.790275][ T29] [ 115.791925][ T5743] Bluetooth: hci2: command tx timeout [ 115.936878][ T7336] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 116.091867][ T7336] usb 14-1: Using ep0 maxpacket: 32 [ 116.095675][ T7336] usb 14-1: config 0 has no interfaces? [ 116.101647][ T7336] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 116.105612][ T7336] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.108982][ T7336] usb 14-1: Product: syz [ 116.110828][ T7336] usb 14-1: Manufacturer: syz [ 116.113224][ T7336] usb 14-1: SerialNumber: syz [ 116.119334][ T7336] usb 14-1: config 0 descriptor?? [ 116.137123][ T5793] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.205317][ T5793] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.250838][ T5757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.259771][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.263827][ T5757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.268372][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.272463][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.332466][ T5793] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.373083][ T7517] ================================================================== [ 116.375681][ T7517] BUG: KASAN: slab-use-after-free in filp_flush+0x25/0x190 [ 116.377986][ T7517] Read of size 8 at addr ffff88802211aa18 by task syz.1.301/7517 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.381649][ T7517] [ 116.383428][ T7517] CPU: 3 UID: 0 PID: 7517 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) [ 116.383445][ T7517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.383453][ T7517] Call Trace: [ 116.383458][ T7517] [ 116.383464][ T7517] dump_stack_lvl+0x100/0x190 [ 116.383481][ T7517] print_report+0x13d/0x4b0 [ 116.383499][ T7517] ? __virt_addr_valid+0x239/0x430 [ 116.383514][ T7517] ? filp_flush+0x25/0x190 [ 116.383525][ T7517] kasan_report+0xdf/0x1c0 [ 116.383542][ T7517] ? filp_flush+0x25/0x190 [ 116.383553][ T7517] kasan_check_range+0x10f/0x1e0 [ 116.383594][ T7517] filp_flush+0x25/0x190 [ 116.383607][ T7517] filp_close+0x1c/0x30 [ 116.383617][ T7517] gaudio_cleanup+0x59/0x100 [ 116.383642][ T7517] f_audio_bind+0x56c/0x660 [ 116.383654][ T7517] ? __pfx_f_audio_bind+0x10/0x10 [ 116.383666][ T7517] ? gser_bind+0x208/0x410 [ 116.383679][ T7517] ? __pfx_f_audio_bind+0x10/0x10 [ 116.383691][ T7517] usb_add_function+0x219/0x890 [ 116.383710][ T7517] configfs_composite_bind+0xd83/0x1960 [ 116.383730][ T7517] gadget_bind_driver+0x28c/0xbf0 [ 116.383742][ T7517] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 116.383759][ T7517] ? __pfx_gadget_bind_driver+0x10/0x10 [ 116.383772][ T7517] really_probe+0x241/0xa60 [ 116.383788][ T7517] __driver_probe_device+0x20e/0x450 [ 116.383803][ T7517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.383819][ T7517] driver_probe_device+0x4a/0x140 [ 116.383834][ T7517] __driver_attach+0x21f/0x5b0 [ 116.383852][ T7517] ? __pfx___driver_attach+0x10/0x10 [ 116.383867][ T7517] bus_for_each_dev+0x13e/0x1d0 [ 116.383879][ T7517] ? __pfx_bus_for_each_dev+0x10/0x10 [ 116.383890][ T7517] ? bus_add_driver+0x2b5/0x5b0 [ 116.383905][ T7517] bus_add_driver+0x305/0x5b0 [ 116.383918][ T7517] driver_register+0x1e2/0x360 [ 116.383935][ T7517] usb_gadget_register_driver_owner+0x132/0x210 [ 116.383948][ T7517] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 116.383965][ T7517] configfs_write_iter+0x302/0x4e0 [ 116.383977][ T7517] vfs_write+0x6ac/0x1050 [ 116.383987][ T7517] ? __pfx_configfs_write_iter+0x10/0x10 [ 116.383998][ T7517] ? __pfx_vfs_write+0x10/0x10 [ 116.384007][ T7517] ? find_held_lock+0x2b/0x80 [ 116.384025][ T7517] ksys_write+0x12a/0x250 [ 116.384035][ T7517] ? __pfx_ksys_write+0x10/0x10 [ 116.384047][ T7517] __do_fast_syscall_32+0xe7/0x970 [ 116.384063][ T7517] do_fast_syscall_32+0x32/0x70 [ 116.384077][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.384091][ T7517] RIP: 0023:0xf701efec [ 116.384107][ T7517] Code: Unable to access opcode bytes at 0xf701efc2. [ 116.384113][ T7517] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 116.384124][ T7517] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 116.384131][ T7517] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 116.384138][ T7517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.384145][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.384151][ T7517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.384163][ T7517] [ 116.384167][ T7517] [ 116.476633][ T7517] Allocated by task 7458: [ 116.477909][ T7517] kasan_save_stack+0x30/0x50 [ 116.479329][ T7517] kasan_save_track+0x14/0x30 [ 116.480800][ T7517] __kasan_slab_alloc+0x89/0x90 [ 116.482312][ T7517] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 116.483990][ T7517] alloc_empty_file+0x5b/0x1c0 [ 116.485427][ T7517] path_openat+0xe7/0x4280 [ 116.486796][ T7517] do_file_open+0x20e/0x430 [ 116.488205][ T7517] file_open_name+0x1c3/0x3e0 [ 116.489643][ T7517] filp_open+0x2e/0x50 [ 116.490924][ T7517] gaudio_setup+0x127/0x1a00 [ 116.492352][ T7517] f_audio_bind+0x146/0x660 [ 116.493704][ T7517] usb_add_function+0x219/0x890 [ 116.495184][ T7517] configfs_composite_bind+0xd83/0x1960 [ 116.496805][ T7517] gadget_bind_driver+0x28c/0xbf0 [ 116.498288][ T7517] really_probe+0x241/0xa60 [ 116.499638][ T7517] __driver_probe_device+0x20e/0x450 [ 116.501256][ T7517] driver_probe_device+0x4a/0x140 [ 116.502780][ T7517] __driver_attach+0x21f/0x5b0 [ 116.504229][ T7517] bus_for_each_dev+0x13e/0x1d0 [ 116.505682][ T7517] bus_add_driver+0x305/0x5b0 [ 116.507107][ T7517] driver_register+0x1e2/0x360 [ 116.508539][ T7517] usb_gadget_register_driver_owner+0x132/0x210 [ 116.510409][ T7517] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 116.512083][ T7517] configfs_write_iter+0x302/0x4e0 [ 116.513646][ T7517] vfs_write+0x6ac/0x1050 [ 116.514966][ T7517] ksys_write+0x12a/0x250 [ 116.516251][ T7517] __do_fast_syscall_32+0xe7/0x970 [ 116.517818][ T7517] do_fast_syscall_32+0x32/0x70 [ 116.519278][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.521212][ T7517] [ 116.521969][ T7517] Freed by task 7478: [ 116.523159][ T7517] kasan_save_stack+0x30/0x50 [ 116.524564][ T7517] kasan_save_track+0x14/0x30 [ 116.525998][ T7517] kasan_save_free_info+0x3b/0x70 [ 116.527499][ T7517] __kasan_slab_free+0x5f/0x80 [ 116.528952][ T7517] slab_free_after_rcu_debug+0xdf/0x170 [ 116.530636][ T7517] rcu_core+0x5a2/0x10d0 [ 116.531894][ T7517] handle_softirqs+0x1ea/0x9b0 [ 116.533352][ T7517] __irq_exit_rcu+0x162/0x210 [ 116.534751][ T7517] irq_exit_rcu+0x9/0x30 [ 116.536028][ T7517] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 116.537702][ T7517] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 116.539443][ T7517] [ 116.540225][ T7517] Last potentially related work creation: [ 116.541923][ T7517] kasan_save_stack+0x30/0x50 [ 116.543312][ T7517] kasan_record_aux_stack+0xa7/0xc0 [ 116.544848][ T7517] kmem_cache_free+0x427/0x6b0 [ 116.546304][ T7517] __fput+0x68d/0xb50 [ 116.547553][ T7517] task_work_run+0x150/0x240 [ 116.549007][ T7517] exit_to_user_mode_loop+0x1d8/0x6f0 [ 116.550716][ T7517] __do_fast_syscall_32+0x701/0x970 [ 116.552347][ T7517] do_fast_syscall_32+0x32/0x70 [ 116.553840][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.555772][ T7517] [ 116.556540][ T7517] Second to last potentially related work creation: [ 116.558542][ T7517] kasan_save_stack+0x30/0x50 [ 116.560018][ T7517] kasan_record_aux_stack+0xa7/0xc0 [ 116.561621][ T7517] task_work_add+0x28b/0x3b0 [ 116.563053][ T7517] __fput_deferred+0x168/0x4a0 [ 116.564514][ T7517] fput_close+0x118/0x250 [ 116.565859][ T7517] filp_close+0x26/0x30 [ 116.567123][ T7517] gaudio_cleanup+0x59/0x100 [ 116.568558][ T7517] f_audio_bind+0x56c/0x660 [ 116.570010][ T7517] usb_add_function+0x219/0x890 [ 116.571471][ T7517] configfs_composite_bind+0xd83/0x1960 [ 116.573145][ T7517] gadget_bind_driver+0x28c/0xbf0 [ 116.574637][ T7517] really_probe+0x241/0xa60 [ 116.576020][ T7517] __driver_probe_device+0x20e/0x450 [ 116.577677][ T7517] driver_probe_device+0x4a/0x140 [ 116.579212][ T7517] __driver_attach+0x21f/0x5b0 [ 116.580726][ T7517] bus_for_each_dev+0x13e/0x1d0 [ 116.582235][ T7517] bus_add_driver+0x305/0x5b0 [ 116.583703][ T7517] driver_register+0x1e2/0x360 [ 116.585204][ T7517] usb_gadget_register_driver_owner+0x132/0x210 [ 116.587172][ T7517] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 116.588856][ T7517] configfs_write_iter+0x302/0x4e0 [ 116.590413][ T7517] vfs_write+0x6ac/0x1050 [ 116.591794][ T7517] ksys_write+0x12a/0x250 [ 116.593176][ T7517] __do_fast_syscall_32+0xe7/0x970 [ 116.594798][ T7517] do_fast_syscall_32+0x32/0x70 [ 116.596341][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.598284][ T7517] [ 116.599033][ T7517] The buggy address belongs to the object at ffff88802211a8c0 [ 116.599033][ T7517] which belongs to the cache filp of size 352 [ 116.603209][ T7517] The buggy address is located 344 bytes inside of [ 116.603209][ T7517] freed 352-byte region [ffff88802211a8c0, ffff88802211aa20) [ 116.607471][ T7517] [ 116.608259][ T7517] The buggy address belongs to the physical page: [ 116.610255][ T7517] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2211a [ 116.612962][ T7517] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 116.615607][ T7517] memcg:ffff888013cc7001 [ 116.616949][ T7517] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 116.619300][ T7517] page_type: f5(slab) [ 116.620604][ T7517] raw: 00fff00000000040 ffff88801d6fd540 dead000000000100 dead000000000122 [ 116.623298][ T7517] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff888013cc7001 [ 116.625978][ T7517] head: 00fff00000000040 ffff88801d6fd540 dead000000000100 dead000000000122 [ 116.628667][ T7517] head: 0000000000000000 0000000800120012 00000000f5000000 ffff888013cc7001 [ 116.631403][ T7517] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 116.634122][ T7517] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 116.636831][ T7517] page dumped because: kasan: bad access detected [ 116.638845][ T7517] page_owner tracks the page as allocated [ 116.640675][ T7517] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 72, tgid 72 (kworker/u33:0), ts 4383336948, free_ts 0 [ 116.646850][ T7517] post_alloc_hook+0xfd/0x120 [ 116.648327][ T7517] get_page_from_freelist+0xf48/0x3530 [ 116.650055][ T7517] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 116.651906][ T7517] new_slab+0xa2/0x640 [ 116.653182][ T7517] refill_objects+0xe3/0x410 [ 116.654578][ T7517] __pcs_replace_empty_main+0x376/0x680 [ 116.656245][ T7517] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 116.657864][ T7517] alloc_empty_file+0x5b/0x1c0 [ 116.659305][ T7517] path_openat+0xe7/0x4280 [ 116.660731][ T7517] do_file_open+0x20e/0x430 [ 116.662117][ T7517] do_open_execat+0xd1/0x360 [ 116.663497][ T7517] alloc_bprm+0x2d/0x9d0 [ 116.664861][ T7517] kernel_execve+0x8f/0x3a0 [ 116.666297][ T7517] call_usermodehelper_exec_async+0x239/0x4b0 [ 116.668119][ T7517] ret_from_fork+0x72b/0xd50 [ 116.669518][ T7517] ret_from_fork_asm+0x1a/0x30 [ 116.671006][ T7517] page_owner free stack trace missing [ 116.672606][ T7517] [ 116.673348][ T7517] Memory state around the buggy address: [ 116.675042][ T7517] ffff88802211a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.677423][ T7517] ffff88802211a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.679794][ T7517] >ffff88802211aa00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 116.682215][ T7517] ^ [ 116.683688][ T7517] ffff88802211aa80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.686204][ T7517] ffff88802211ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.688628][ T7517] ================================================================== [ 116.692514][ T7517] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.695125][ T7517] CPU: 2 UID: 0 PID: 7517 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) [ 116.698739][ T7517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.701786][ T7517] Call Trace: [ 116.702793][ T7517] [ 116.703748][ T7517] dump_stack_lvl+0x100/0x190 [ 116.705192][ T7517] vpanic+0x552/0x970 [ 116.706386][ T7517] ? __pfx_vpanic+0x10/0x10 [ 116.707730][ T7517] ? mark_held_locks+0x40/0x70 [ 116.709234][ T7517] ? filp_flush+0x25/0x190 [ 116.710669][ T7517] panic+0xd1/0xe0 [ 116.711877][ T7517] ? __pfx_panic+0x10/0x10 [ 116.713628][ T7517] ? filp_flush+0x25/0x190 [ 116.715396][ T7517] ? preempt_schedule_common+0x42/0xc0 [ 116.717545][ T7517] check_panic_on_warn.cold+0x19/0x34 [ 116.719704][ T7517] end_report.part.0+0x3a/0x90 [ 116.721663][ T7517] kasan_report.cold+0xe/0x18 [ 116.723230][ T7517] ? filp_flush+0x25/0x190 [ 116.724861][ T7517] kasan_check_range+0x10f/0x1e0 [ 116.726853][ T7517] filp_flush+0x25/0x190 [ 116.728574][ T7517] filp_close+0x1c/0x30 [ 116.730007][ T7517] gaudio_cleanup+0x59/0x100 [ 116.731434][ T7517] f_audio_bind+0x56c/0x660 [ 116.732974][ T7517] ? __pfx_f_audio_bind+0x10/0x10 [ 116.734937][ T7517] ? gser_bind+0x208/0x410 [ 116.736712][ T7517] ? __pfx_f_audio_bind+0x10/0x10 [ 116.738702][ T7517] usb_add_function+0x219/0x890 [ 116.740745][ T7517] configfs_composite_bind+0xd83/0x1960 [ 116.743043][ T7517] gadget_bind_driver+0x28c/0xbf0 [ 116.745112][ T7517] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 116.747355][ T7517] ? __pfx_gadget_bind_driver+0x10/0x10 [ 116.749607][ T7517] really_probe+0x241/0xa60 [ 116.751504][ T7517] __driver_probe_device+0x20e/0x450 [ 116.753628][ T7517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.755990][ T7517] driver_probe_device+0x4a/0x140 [ 116.758002][ T7517] __driver_attach+0x21f/0x5b0 [ 116.759979][ T7517] ? __pfx___driver_attach+0x10/0x10 [ 116.762202][ T7517] bus_for_each_dev+0x13e/0x1d0 [ 116.763961][ T7517] ? __pfx_bus_for_each_dev+0x10/0x10 [ 116.765608][ T7517] ? bus_add_driver+0x2b5/0x5b0 [ 116.767118][ T7517] bus_add_driver+0x305/0x5b0 [ 116.768807][ T7517] driver_register+0x1e2/0x360 [ 116.770698][ T7517] usb_gadget_register_driver_owner+0x132/0x210 [ 116.773201][ T7517] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 116.775486][ T7517] configfs_write_iter+0x302/0x4e0 [ 116.777589][ T7517] vfs_write+0x6ac/0x1050 [ 116.779374][ T7517] ? __pfx_configfs_write_iter+0x10/0x10 [ 116.781641][ T7517] ? __pfx_vfs_write+0x10/0x10 [ 116.783603][ T7517] ? find_held_lock+0x2b/0x80 [ 116.785547][ T7517] ksys_write+0x12a/0x250 [ 116.787321][ T7517] ? __pfx_ksys_write+0x10/0x10 [ 116.789351][ T7517] __do_fast_syscall_32+0xe7/0x970 [ 116.791461][ T7517] do_fast_syscall_32+0x32/0x70 [ 116.793466][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.796042][ T7517] RIP: 0023:0xf701efec [ 116.797715][ T7517] Code: Unable to access opcode bytes at 0xf701efc2. [ 116.800444][ T7517] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 116.803838][ T7517] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 116.806922][ T7517] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 116.809931][ T7517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.813037][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.816190][ T7517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.819335][ T7517] [ 116.821311][ T7517] Kernel Offset: disabled [ 116.822838][ T7517] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:19:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000012afdf RBX=ffffffff8e891480 RCX=ffffffff8bb872d5 RDX=0000000000000000 RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8589f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c32ccd8 CR3=000000004c637000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec1ffd0 Opmask01=0000000001ee0000 Opmask02=0000000001ffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fa56c31850 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fa56c30ac0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ff5ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737352 7373737373737353 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373733b27 32232c2027322720 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030323a30696368 2f306963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000006d 766b2f6373696d2f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fa56c28308 000055fa56c28308 0000000000000041 000034647261632f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fa56af4e30 000055fa56af2000 0000000000000041 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000ffffffff RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e29eb88 RDI=ffffffff8c400a80 RBP=ffff888023e18000 RSP=ffffc90003a1f6e0 R8 =0000000000000005 R9 =0000000000000300 R10=0000000000000300 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=ffff888029859d38 R15=dffffc0000000000 RIP=ffffffff8bb87a7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9353ca8440 CR3=000000004ccb3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888023b80150 RBX=000000000000000c RCX=ffffffff81e5ace8 RDX=1ffff1100477002a RSI=0000000000000000 RDI=ffff888023b80168 RBP=ffffc900040cf2d8 RSP=ffffc900040cf1b0 R8 =0000000000000001 R9 =fffff52000819e24 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888052467000 R14=ffff888023b7fa80 R15=ffff888052468000 RIP=ffffffff8525af20 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f06ec0 CR3=000000004c970000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc90025d37210 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031353754 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9b6f31f0 R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ee3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fa56ade8d8 CR3=0000000072e38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000