last executing test programs: 4.009881764s ago: executing program 0 (id=836): syz_usb_connect(0x0, 0x47, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyUSB0\x00', 0x2, 0x0) 3.468926497s ago: executing program 0 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r2, 0x405, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x58, r2, 0xb496be12fe179219, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c0) 3.407876068s ago: executing program 0 (id=848): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f000001fec0)={0x0, 0x10, &(0x7f000001ff00)=[@in={0x2, 0x0, @local}]}, &(0x7f000001ff40)=0x10) 3.406848673s ago: executing program 0 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) sendto$inet6(r3, 0x0, 0x0, 0x2404c081, &(0x7f0000000640)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) 3.358684416s ago: executing program 0 (id=854): syz_usb_connect(0x0, 0x47, &(0x7f0000000300)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyUSB0\x00', 0x2, 0x0) 1.141892946s ago: executing program 1 (id=907): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xa}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000cc0)={0xf, {"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", 0x1000}}, 0x1006) 1.140650141s ago: executing program 1 (id=910): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0xa0001, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@striped={0x0, 0xc00, 0x0, 0x78, 'striped\x00', {0x3, 0x20, '128', [{0x20, {@ram={'/dev/ram', 0x0}, 0x20, '8'}}, {0x20, {@ram_num={'1:', 0x0}, 0x20, '1024'}}, {0x20, {@ram={'/dev/ram', 0x0}, 0x20, '128'}}]}}]}) 1.090101364s ago: executing program 1 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x100, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='lz4hc', 0x5) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 1.089801368s ago: executing program 3 (id=913): r0 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 1.058324837s ago: executing program 1 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x400c0) 1.01034141s ago: executing program 3 (id=916): r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x10) 1.010072712s ago: executing program 1 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x1c}}, 0x8050) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10000) 1.009940488s ago: executing program 3 (id=918): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) mount(0x0, &(0x7f0000000140)='./debug\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000480), 0xe05, r2}, 0x38) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(0x0, 0x86, 0x4, 0x0, 0x0, 0x1000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000009f40)={0x2020}, 0x2020) 948.815011ms ago: executing program 3 (id=920): syz_open_dev$MSR(&(0x7f0000000080), 0x8, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00"/27, 0x1b) recvmmsg$unix(r0, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) 649.502463ms ago: executing program 2 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=@newtfilter={0x74, 0x2c, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xaded92106244839, 0x800, 0x0, 0x4, {0x5, 0x1, 0x6, 0xb2, 0x401, 0x6}, {0x6, 0x0, 0x6, 0x6, 0x72e2, 0x6}, 0x2, 0xbe01, 0x5}}]}]}}]}, 0x74}}, 0x0) 579.960617ms ago: executing program 2 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, 0x0, 0x400c0) 579.539023ms ago: executing program 2 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xffffffff}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x18000, 0x2, 0x1, 0x8d, 0xb, 0xfffffffc}, [@TCA_NETEM_CORR={0x10, 0x1, {0xfffff70e, 0x2, 0x9}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x20004010) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000008c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 440.039751ms ago: executing program 2 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1e4) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000840)='2', 0x1) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9) munmap$binder(r1, 0x3) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x3, 0x7, 0x6, 0x1}, 0x3, 0x1}, [{0xab8, 0x3, 0x3, 0x1ff, 0x2, 0x4}, {0x3, 0xff, 0x2, 0x401, 0x8, 0xe9d}, {0x3, 0x5, 0x6, 0x8000e5, 0xffffff0d, 0x6}, {0x0, 0x7, 0x10000, 0x9, 0x3, 0x1c000}, {0x9, 0x86, 0x3000000, 0x4, 0xd, 0xff}, {0x62b1, 0x1, 0x7f, 0xc, 0x101, 0xfffffffb}, {0x1, 0x3, 0xfffffffb, 0x4, 0x2, 0x2}, {0x0, 0x2, 0xd, 0x6, 0x2, 0x3}, {0x9, 0xfffffff8, 0x7, 0x4233, 0x3, 0x8}, {0x7, 0x7fff, 0x0, 0x80000001, 0x387, 0x7}, {0x0, 0x8, 0x7, 0x8, 0x4, 0xfffffff7}, {0x5, 0x4, 0x9, 0x9, 0x1000, 0xffff}, {0x7, 0xd8, 0x6, 0x0, 0x4, 0xacd4}, {0x7, 0x0, 0x2, 0x1, 0x200, 0x2c378a9f}, {0xffff, 0x7, 0x4, 0x6, 0xc0000000, 0x1}, {0x7fffffff, 0xad, 0x0, 0x4, 0x2}, {0x6, 0xfe, 0x8, 0x9, 0xfffffe0a, 0x401}, {0x3, 0x4, 0x8, 0x40, 0x8}, {0x8, 0x8f, 0x8001, 0xc2e, 0xf52f, 0xffff3b50}, {0xffffff00, 0xffffffff, 0x8, 0x9, 0xff, 0xb1}, {0x8, 0x18000000, 0x2a, 0xc6f, 0x7, 0x6}, {0x0, 0x7, 0x7b, 0x4, 0x5, 0x8d}, {0x200, 0x1, 0x7, 0x1, 0x6, 0xfffffffa}, {0x0, 0x44, 0x7, 0x0, 0x9, 0x2}, {0xfffffff8, 0x7, 0x4, 0x3, 0x5, 0x7d}, {0x3ff, 0xffff091e, 0x8925, 0x33e8, 0x3, 0x4}, {0x7, 0xd1, 0x8, 0x200001, 0xe, 0xcc}, {0x200, 0x1, 0x84e, 0x4, 0x3e6, 0x9}, {0x6, 0xeb09, 0x2a082b7e, 0x1, 0x9, 0x7}, {0x10000, 0xb8, 0x3, 0x9, 0x9, 0xe9d}, {0x3, 0x3, 0x6, 0x0, 0x3, 0x8333}, {0x8000, 0x2539, 0x5, 0x6, 0x4, 0x3}, {0x5, 0x2, 0x2, 0x1, 0x4, 0x2}, {0x5, 0x4, 0xffffffd0, 0x4, 0x12000000, 0x4}, {0x1812, 0x8, 0x9c, 0x2, 0xf, 0x101}, {0xffffff71, 0x9c7e, 0x0, 0x7, 0xa17a, 0xde}, {0x9, 0x3, 0xa3b, 0x7fff, 0x5, 0xffffff08}, {0x0, 0x7, 0x0, 0x7, 0x3ff}, {0xb47, 0x7, 0x9, 0x86f7, 0x9, 0x4}, {0x3, 0x7, 0x2, 0xe3, 0x7, 0x4}, {0xffffffff, 0x6, 0x1, 0x35d, 0x29200000, 0x6}, {0x0, 0xf11, 0x5, 0x6, 0x4, 0x3}, {0x4, 0x100, 0x0, 0x79f, 0xfffff1c8, 0x70}, {0x0, 0x400, 0x7, 0x9, 0x4, 0x10000}, {0x5, 0x1, 0x5, 0x9, 0x8000, 0xad934800}, {0x4b, 0xf2, 0x7, 0xe563, 0x4, 0x7}, {0x5, 0x6, 0x7fff, 0x9, 0x365, 0x2}, {0x5, 0x5, 0x2, 0x3, 0x43, 0x1}, {0x2, 0x6, 0x80, 0x3, 0x7fff, 0x7}, {0x3, 0xffffffff, 0xfffffff7, 0x9, 0x40, 0xf}, {0x5, 0x800, 0xb03c, 0xf, 0x8, 0x8}, {0x6, 0x2, 0x1, 0x8, 0x6, 0xa4}, {0x1, 0x4, 0x6, 0x4, 0x8001, 0x1}, {0x6, 0x40, 0xe4, 0x5e, 0x6, 0x754}, {0x9, 0x5, 0x8, 0x4, 0x0, 0xfffffffb}, {0xdb3, 0x9, 0x2, 0x5, 0xb, 0xff}, {0x9, 0xffffffff, 0xd7, 0x2, 0xfd5, 0xfbd}, {0x200, 0x8, 0x10000, 0x24, 0x101, 0x3}, {0x2000000, 0x7e99, 0x0, 0x7ff, 0x0, 0x6}, {0x100, 0x0, 0xa0, 0x8, 0x0, 0x7}, {0x3, 0x2, 0x5, 0x7, 0x10, 0x9}, {0x7, 0x9, 0x265d, 0x7, 0x3, 0x4}, {0x6, 0x1000, 0x6, 0x1, 0x5, 0x6}, {0x80, 0x7, 0x4, 0x9, 0xc2, 0x2}, {0x9, 0x1, 0x4, 0x80000000, 0xfffff238, 0xffff7c49}, {0xc, 0x10001, 0x6, 0x2, 0xfffff5a6, 0x8}, {0x8001, 0x81, 0x7, 0x6, 0x4, 0x4}, {0x2, 0x2, 0x39a3, 0x7, 0x5, 0x9}, {0xfffffff9, 0x5, 0x0, 0x1a, 0x200, 0x4}, {0x1, 0x9, 0xb0, 0x7, 0x400, 0x2}, {0x4, 0x7, 0x40, 0x905, 0x5, 0x4}, {0x61, 0x0, 0x4, 0x9, 0x2, 0x6}, {0xd0, 0x1, 0x2, 0x4, 0x9, 0x3}, {0x6, 0x80000000, 0xfff, 0x0, 0x43cd, 0x138a2e31}, {0x26, 0x3, 0x5, 0xd01, 0x9, 0xe7}, {0x7, 0x2, 0xed0e, 0x6, 0x2000, 0x800}, {0x400, 0xff, 0x1a6d, 0x64, 0x2, 0x7}, {0x239, 0x71, 0x5, 0x8, 0x9, 0x3}, {0x101, 0xfffffff8, 0xf4, 0x5, 0xe, 0x1000}, {0xfffffff8, 0x1000, 0x4, 0xff, 0x2, 0xfffffffa}, {0x80000000, 0x10000, 0x1, 0xe51e, 0x8, 0xfffffffd}, {0x0, 0x1, 0x1, 0x29, 0x5, 0x200}, {0x3, 0x400, 0x0, 0xe, 0x9, 0x7f}, {0x3, 0x0, 0x0, 0x9, 0x9, 0x4}, {0x10, 0x0, 0x7, 0x2, 0x8, 0x4}, {0x3, 0x40, 0x7fff, 0x46, 0x5, 0x7ea}, {0x5, 0x86d6, 0x3, 0xf, 0x401, 0x3ff}, {0x7, 0x0, 0x8, 0x1000, 0x3, 0x9}, {0x8, 0x9, 0x155a, 0x4, 0x3, 0x5}, {0x2, 0x7, 0x9, 0xffffffff, 0x6bd, 0x800}, {0x3d13, 0x5, 0x118, 0xfff, 0xff, 0x1}, {0x28, 0x4, 0x0, 0x7, 0x7, 0xad}, {0x8, 0x0, 0x5, 0x0, 0x8, 0x800}, {0x1, 0x400, 0x7, 0x4, 0x1, 0x8}, {0xfffffd18, 0x9, 0x401, 0x4, 0x4, 0x14}, {0x800, 0xa8f, 0x2, 0xfff, 0x2, 0x3}, {0x3, 0xff, 0x2, 0x7, 0xfffffffa, 0x9}, {0x401, 0x0, 0x5, 0x4, 0x7ff, 0x1}, {0x4, 0xffff8001, 0x3, 0x9, 0x3, 0xb}, {0x1, 0x1, 0x3bbb, 0x0, 0x9, 0x83}, {0x8, 0x2, 0x6, 0x8001, 0x42, 0x5}, {0x5, 0x7, 0x1000, 0x8, 0x3, 0x7}, {0x40000000, 0x1, 0x2, 0x4, 0x7, 0x4}, {0x7fffffff, 0x3, 0x7f, 0x3, 0x0, 0xe}, {0x3, 0x515, 0x1, 0x23b2, 0x2, 0x9}, {0x17, 0xfffffffb, 0x10000, 0x1ff, 0x10, 0x8000}, {0x8e, 0x8, 0xcc, 0x0, 0x7, 0x4}, {0x2, 0x6, 0xbbe, 0x9, 0xffff7fff, 0x8000}, {0x100, 0xfffffff0, 0x0, 0x7f, 0x3444bb35}, {0x9, 0x1ff, 0x3, 0x4544, 0x1, 0x1}, {0x385, 0x5, 0x9, 0xefffffff, 0x1000, 0x6}, {0xccef, 0x6, 0x8, 0x101, 0x4}, {0x180000, 0x8ae1, 0x7, 0x6, 0xff, 0xfff}, {0x400, 0x1, 0x400, 0xc, 0x1, 0x8}, {0x30, 0x6, 0xfffffffa, 0x400, 0x401, 0xbd65}, {0x1, 0x0, 0xd031, 0x4, 0x6, 0x1000}, {0x8b, 0x10000, 0x0, 0x2, 0x8, 0x9}, {0x5, 0xfffffff9, 0xd, 0x10, 0x37e8, 0x4}, {0xffff5bb1, 0x36ec, 0x7d, 0x8, 0x2, 0x7fff}, {0x7, 0x1, 0x5, 0x4, 0x3, 0xf6535ff5}, {0x80, 0x2, 0x7, 0x6, 0x5, 0x81}, {0x2, 0x3, 0x8, 0x4, 0x1, 0x1000}, {0x10000, 0x3ff, 0x4, 0x101, 0xfff, 0xc5}, {0x10001, 0x7, 0x10000, 0x8, 0x8d4, 0x2618}, {0x6, 0x2, 0x0, 0x7f, 0x8, 0x1}, {0xd3a1, 0x9, 0x7, 0x80000000, 0x8, 0x80000000}, {0x9, 0x200, 0xdfca, 0x5, 0x94d, 0xa}, {0x35f, 0xaa, 0x9, 0x40, 0x66c, 0x9}], [{0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x6}, {0x3, 0x1}, {0x3}, {0x78c0603c8fa1a1b4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x7a479a5d4662f5b3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x6}, {0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 439.495766ms ago: executing program 2 (id=929): mount(0x0, 0x0, 0x0, 0x0, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000540)=0x7) 337.8843ms ago: executing program 2 (id=930): mkdir(&(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1', 0x1) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000c40)='1', 0x1) 268.058768ms ago: executing program 0 (id=931): r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10) 120.200924ms ago: executing program 1 (id=932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000280), 0x0) 58.905182ms ago: executing program 3 (id=933): r0 = syz_open_dev$dvb_frontend(0x0, 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x12, '\x00', @st={0x4, [{0x3, @uvalue=0x9}, {0x1, @uvalue=0x4}, {0x0, @uvalue=0x7fffffff}, {0x3, @uvalue=0xbaf5}]}}, {0x36, '\x00', @buffer={"15dc33ce9a54973d8fcc7513cfef7ec6000000002300", 0x20}, 0x74}, {0x2f, '\x00', @data=0x3, 0x2}, {0x4, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffffffa}, {0x2, @svalue=0x6}, {0x3, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x1}]}, 0x6}, {0x42, '\x00', @data=0xf, 0x6}, {0x11, '\x00', @data=0x9, 0x7}, {0x3c, '\x00', @buffer={"d34fa264b0b65af381df51d6407942d5adf700e785a2c999105153b3b3eb7232", 0x20}, 0x40001b}, {0x1c, '\x00', @data=0x7fffffff, 0x5}, {0x14, '\x00', @data=0x7, 0x5}]}) 0s ago: executing program 3 (id=934): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000fc0)=[{0xc, 0x108, 0x81}], 0xc}}, {{0x0, 0x0, &(0x7f0000003100)}}, {{0x0, 0x0, &(0x7f0000003880)}}, {{&(0x7f0000003b00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-asm,sha512-arm64)\x00'}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)="c65ab67578c4b2c2f1e527a516d5957db072f6c96269a5a2bd303971a9d0bc02a0a3a5d99c9562035a70e7566f13bb6825294bfa68fe0401a14ac893fadae81ef379a0ea8fff74cd242919dca51058c1c749578278bf15a5e011338bdc4ee12585a84742025768231ae33bc300416f3d16cd7fd53d871c50e1f33daa14835434f66708babc43ccbbe09a86bac3", 0x8d}], 0x1, &(0x7f0000003c80)=[{0xc, 0x115, 0x3}, {0x68, 0x114, 0x2b5, "c4122bbd678e220cd035eb142b126864aa011cc8daa9306dbf0b638cb0fb72e31e482f0466f93a5854ac4309bac81a3f761f8854850b2ffe1a8e6c979237988d0eae61541f36e596da823ac8240bc19d703f6b5818b126be7a82e809"}], 0x74}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003e80)="ceba26cec862e0fb11dd7c7b6499d64116c22e2e21a1910274fe53ee024a54f533d7ad4f8835e9987ccd035c1ee5aabb64b80b43a8b19b8b9fab01e632416c0a127b16ea038c6a9320be5496fa991ab173b79d210783a56c883eaa983c7b", 0x5e}, {0x0}], 0x2, &(0x7f0000004040)=[{0x80, 0x10a, 0x1, "1670a6ef2c5cfd59155fb53a16e10f255ce116d72a791cb0390f393ac83ca850069e33d820d1e131c989672d5535a3feb18b975ceeba5f8520a90b335d8d8e7dae99d6187ef32fa0924eeb079cfee5b9fc3ed39671a453e6af8c36fdb87083799124c38903e50a34b059c1d36e409d2eee8b55"}, {0x30, 0x84, 0xa, "d03d9c61fa4866aa954a7bf870b4ec3f5f149e3dfccf4ae4a1eeb65f02b8657843"}], 0xb0}}, {{&(0x7f0000004200)=@can, 0x80, &(0x7f00000042c0)}}], 0x7, 0x4005) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) kernel console output (not intermixed with test programs): a0 [ 64.239176][ T7372] security_lsmprop_to_secctx+0x146/0x1a0 [ 64.239194][ T7372] audit_log_subj_ctx+0x34f/0x460 [ 64.239209][ T7372] ? map_id_range_up+0x2ce/0x3b0 [ 64.239225][ T7372] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 64.239240][ T7372] ? audit_log_format+0xe8/0x130 [ 64.239253][ T7372] ? apparmor_current_getlsmprop_subj+0x102/0x3c0 [ 64.239279][ T7372] audit_log_task_context+0x88/0xb0 [ 64.239292][ T7372] ? __pfx_audit_log_task_context+0x10/0x10 [ 64.239310][ T7372] audit_log_task+0x1b5/0x3b0 [ 64.239326][ T7372] ? __pfx_audit_log_task+0x10/0x10 [ 64.239346][ T7372] audit_seccomp+0x79/0x190 [ 64.239371][ T7372] __seccomp_filter+0x88c/0x1130 [ 64.239394][ T7372] ? __pfx___seccomp_filter+0x10/0x10 [ 64.239417][ T7372] ? find_held_lock+0x2b/0x80 [ 64.239435][ T7372] ? __might_fault+0xc5/0x140 [ 64.239451][ T7372] ? __might_fault+0xc5/0x140 [ 64.239468][ T7372] __seccomp_permit_syscall+0x207/0x2d0 [ 64.239491][ T7372] __do_fast_syscall_32+0x431/0x8c0 [ 64.239527][ T7372] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.239546][ T7372] do_fast_syscall_32+0x32/0x70 [ 64.239565][ T7372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.239581][ T7372] RIP: 0023:0xf7f67fbc [ 64.239593][ T7372] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 64.239605][ T7372] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 64.239618][ T7372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080001b00 [ 64.239626][ T7372] RDX: 0000000080001b40 RSI: 0000000000800000 RDI: 0000000000000000 [ 64.239634][ T7372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.239641][ T7372] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.239648][ T7372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.239663][ T7372] [ 64.353268][ T5638] usb 5-1: USB disconnect, device number 3 [ 64.356573][ T7382] tipc: Enabled bearer , priority 0 [ 64.357409][ T7382] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 64.372132][ T7380] tipc: Disabling bearer [ 64.376308][ T5638] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 64.377254][ T5638] keyspan 5-1:1.0: device disconnected [ 64.470200][ T5832] bond0: (slave syz_tun): interface is now down [ 64.486615][ T5832] bond0: (slave syz_tun): interface is now down [ 64.506184][ T5832] bond0: (slave syz_tun): interface is now down [ 64.530032][ T5867] bond0: (slave syz_tun): interface is now down [ 64.535046][ T5867] bond0: now running without any active interface! [ 64.617827][ T7398] bond0: entered promiscuous mode [ 64.620032][ T7398] gretap0: entered promiscuous mode [ 64.621087][ T7398] dummy0: entered promiscuous mode [ 64.623216][ T7398] debugfs: 'hsr0' already exists in 'hsr' [ 64.623229][ T7398] Cannot create hsr debugfs directory [ 64.983648][ T7414] FAULT_INJECTION: forcing a failure. [ 64.983648][ T7414] name failslab, interval 1, probability 5, space 0, times 86 [ 64.983677][ T7414] CPU: 2 UID: 0 PID: 7414 Comm: syz.0.636 Not tainted syzkaller #0 PREEMPT(full) [ 64.983698][ T7414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.983709][ T7414] Call Trace: [ 64.983716][ T7414] [ 64.983723][ T7414] dump_stack_lvl+0x100/0x190 [ 64.983756][ T7414] should_fail_ex.cold+0x5/0xa [ 64.983784][ T7414] should_failslab+0xc2/0x120 [ 64.983807][ T7414] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.983828][ T7414] ? __send_signal_locked+0x1d1/0x1420 [ 64.983864][ T7414] __send_signal_locked+0x1d1/0x1420 [ 64.983896][ T7414] do_notify_parent+0xf15/0x10c0 [ 64.983925][ T7414] ? __pfx_do_notify_parent+0x10/0x10 [ 64.983951][ T7414] ? do_raw_spin_lock+0x128/0x260 [ 64.983977][ T7414] ? __wake_up+0x3f/0x60 [ 64.984007][ T7414] ? release_task+0xc27/0x1ca0 [ 64.984035][ T7414] release_task+0x14ea/0x1ca0 [ 64.984065][ T7414] ? __pfx_release_task+0x10/0x10 [ 64.984087][ T7414] ? do_raw_spin_lock+0x128/0x260 [ 64.984111][ T7414] ? find_held_lock+0x2b/0x80 [ 64.984136][ T7414] ? __wake_up+0x3f/0x60 [ 64.984162][ T7414] ? __wake_up+0x3f/0x60 [ 64.984191][ T7414] ? rcu_is_watching+0x13/0xc0 [ 64.984221][ T7414] do_exit+0x1300/0x2a00 [ 64.984247][ T7414] ? __pfx_do_exit+0x10/0x10 [ 64.984269][ T7414] ? do_raw_spin_lock+0x128/0x260 [ 64.984292][ T7414] ? find_held_lock+0x2b/0x80 [ 64.984316][ T7414] ? get_signal+0xa28/0x22e0 [ 64.984336][ T7414] do_group_exit+0xd5/0x2a0 [ 64.984360][ T7414] get_signal+0x1f58/0x22e0 [ 64.984378][ T7414] ? __pfx_futex_wait+0x10/0x10 [ 64.984407][ T7414] ? __pfx_get_signal+0x10/0x10 [ 64.984427][ T7414] ? do_futex+0x190/0x440 [ 64.984456][ T7414] arch_do_signal_or_restart+0x91/0x7a0 [ 64.984487][ T7414] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 64.984528][ T7414] exit_to_user_mode_loop+0x139/0x700 [ 64.984552][ T7414] ? rcu_is_watching+0x13/0xc0 [ 64.984579][ T7414] __do_fast_syscall_32+0x5b0/0x8c0 [ 64.984610][ T7414] do_fast_syscall_32+0x32/0x70 [ 64.984637][ T7414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.984661][ T7414] RIP: 0023:0xf740efbc [ 64.984676][ T7414] Code: Unable to access opcode bytes at 0xf740ef92. [ 64.984685][ T7414] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 64.984704][ T7414] RAX: fffffffffffffe00 RBX: 00000000f7434f88 RCX: 0000000000000080 [ 64.984716][ T7414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 64.984727][ T7414] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 64.984738][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.984749][ T7414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.984772][ T7414] [ 64.995904][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.230535][ T7429] FAULT_INJECTION: forcing a failure. [ 65.230535][ T7429] name failslab, interval 1, probability 5, space 0, times 85 [ 65.230552][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.3.642 Not tainted syzkaller #0 PREEMPT(full) [ 65.230566][ T7429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.230574][ T7429] Call Trace: [ 65.230578][ T7429] [ 65.230583][ T7429] dump_stack_lvl+0x100/0x190 [ 65.230606][ T7429] should_fail_ex.cold+0x5/0xa [ 65.230624][ T7429] should_failslab+0xc2/0x120 [ 65.230641][ T7429] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 65.230655][ T7429] ? __alloc_skb+0x5b7/0x710 [ 65.230673][ T7429] ? __alloc_skb+0x140/0x710 [ 65.230693][ T7429] __alloc_skb+0x140/0x710 [ 65.230710][ T7429] ? __alloc_skb+0x5b7/0x710 [ 65.230728][ T7429] ? __pfx___alloc_skb+0x10/0x10 [ 65.230745][ T7429] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 65.230758][ T7429] ? lockdep_init_map_type+0x5c/0x250 [ 65.230775][ T7429] audit_log_start+0x350/0x930 [ 65.230789][ T7429] ? __pfx_audit_log_start+0x10/0x10 [ 65.230810][ T7429] audit_seccomp+0x60/0x190 [ 65.230831][ T7429] __seccomp_filter+0x88c/0x1130 [ 65.230850][ T7429] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.230870][ T7429] ? __pfx___seccomp_filter+0x10/0x10 [ 65.230891][ T7429] ? find_held_lock+0x2b/0x80 [ 65.230908][ T7429] ? __might_fault+0xc5/0x140 [ 65.230924][ T7429] ? __might_fault+0xc5/0x140 [ 65.230941][ T7429] __seccomp_permit_syscall+0x207/0x2d0 [ 65.230962][ T7429] __do_fast_syscall_32+0x431/0x8c0 [ 65.230990][ T7429] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.231010][ T7429] do_fast_syscall_32+0x32/0x70 [ 65.231030][ T7429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.231047][ T7429] RIP: 0023:0xf743efbc [ 65.231059][ T7429] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 65.231072][ T7429] RSP: 002b:00000000f54565cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 65.231085][ T7429] RAX: ffffffffffffffda RBX: 00000000f7464f8c RCX: 0000000000000081 [ 65.231093][ T7429] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 65.231101][ T7429] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 65.231109][ T7429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.231117][ T7429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.231132][ T7429] [ 65.231182][ T7429] FAULT_INJECTION: forcing a failure. [ 65.231182][ T7429] name failslab, interval 1, probability 5, space 0, times 84 [ 65.231198][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.3.642 Not tainted syzkaller #0 PREEMPT(full) [ 65.231213][ T7429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.231221][ T7429] Call Trace: [ 65.231225][ T7429] [ 65.231230][ T7429] dump_stack_lvl+0x100/0x190 [ 65.231250][ T7429] should_fail_ex.cold+0x5/0xa [ 65.231267][ T7429] should_failslab+0xc2/0x120 [ 65.231282][ T7429] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 65.231309][ T7429] ? __alloc_skb+0x5b7/0x710 [ 65.231327][ T7429] ? __alloc_skb+0x140/0x710 [ 65.231347][ T7429] __alloc_skb+0x140/0x710 [ 65.231364][ T7429] ? __alloc_skb+0x5b7/0x710 [ 65.231382][ T7429] ? __pfx___alloc_skb+0x10/0x10 [ 65.231398][ T7429] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 65.231412][ T7429] ? lockdep_init_map_type+0x5c/0x250 [ 65.231428][ T7429] audit_log_start+0x350/0x930 [ 65.231442][ T7429] ? __pfx_audit_log_start+0x10/0x10 [ 65.231461][ T7429] audit_seccomp+0x60/0x190 [ 65.231481][ T7429] __seccomp_filter+0x88c/0x1130 [ 65.231500][ T7429] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.231519][ T7429] ? __pfx___seccomp_filter+0x10/0x10 [ 65.231540][ T7429] ? find_held_lock+0x2b/0x80 [ 65.231557][ T7429] ? __might_fault+0xc5/0x140 [ 65.231572][ T7429] ? __might_fault+0xc5/0x140 [ 65.231588][ T7429] __seccomp_permit_syscall+0x207/0x2d0 [ 65.231610][ T7429] __do_fast_syscall_32+0x431/0x8c0 [ 65.231628][ T7429] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.231646][ T7429] do_fast_syscall_32+0x32/0x70 [ 65.231664][ T7429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.231679][ T7429] RIP: 0023:0xf743efbc [ 65.231689][ T7429] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 65.231701][ T7429] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 65.231712][ T7429] RAX: ffffffffffffffda RBX: 00000000f7464f88 RCX: 0000000000000080 [ 65.231720][ T7429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 65.231727][ T7429] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 65.231734][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.231741][ T7429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.231756][ T7429] [ 65.293077][ T7405] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24 [ 65.358537][ T7439] tipc: Enabling of bearer rejected, failed to enable media [ 65.465888][ T5638] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.590691][ T7455] FAULT_INJECTION: forcing a failure. [ 65.590691][ T7455] name failslab, interval 1, probability 5, space 0, times 80 [ 65.590709][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT(full) [ 65.590723][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.590730][ T7455] Call Trace: [ 65.590735][ T7455] [ 65.590740][ T7455] dump_stack_lvl+0x100/0x190 [ 65.590764][ T7455] should_fail_ex.cold+0x5/0xa [ 65.590782][ T7455] should_failslab+0xc2/0x120 [ 65.590798][ T7455] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 65.590812][ T7455] ? __alloc_skb+0x5b7/0x710 [ 65.590835][ T7455] ? __alloc_skb+0x140/0x710 [ 65.590864][ T7455] __alloc_skb+0x140/0x710 [ 65.590891][ T7455] ? __alloc_skb+0x5b7/0x710 [ 65.590919][ T7455] ? __pfx___alloc_skb+0x10/0x10 [ 65.590956][ T7455] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 65.590977][ T7455] ? lockdep_init_map_type+0x5c/0x250 [ 65.590995][ T7455] audit_log_start+0x350/0x930 [ 65.591010][ T7455] ? __pfx_audit_log_start+0x10/0x10 [ 65.591023][ T7455] ? kasan_quarantine_put+0x104/0x240 [ 65.591035][ T7455] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.591055][ T7455] ? putname+0xb1/0x110 [ 65.591070][ T7455] ? kmem_cache_free+0x127/0x6c0 [ 65.591090][ T7455] audit_seccomp+0x60/0x190 [ 65.591110][ T7455] __seccomp_filter+0x88c/0x1130 [ 65.591128][ T7455] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.591164][ T7455] ? __pfx___seccomp_filter+0x10/0x10 [ 65.591187][ T7455] ? find_held_lock+0x2b/0x80 [ 65.591205][ T7455] ? __might_fault+0xc5/0x140 [ 65.591220][ T7455] ? __might_fault+0xc5/0x140 [ 65.591239][ T7455] __seccomp_permit_syscall+0x207/0x2d0 [ 65.591261][ T7455] __do_fast_syscall_32+0x431/0x8c0 [ 65.591281][ T7455] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.591300][ T7455] do_fast_syscall_32+0x32/0x70 [ 65.591319][ T7455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.591336][ T7455] RIP: 0023:0xf743efbc [ 65.591347][ T7455] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 65.591359][ T7455] RSP: 002b:00000000f54564cc EFLAGS: 00000296 ORIG_RAX: 000000000000015a [ 65.591371][ T7455] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 65.591379][ T7455] RDX: 00000000f742eff4 RSI: 0000000000000007 RDI: 0000000000000000 [ 65.591387][ T7455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.591394][ T7455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.591401][ T7455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.591416][ T7455] [ 65.629311][ T5638] usb 6-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 65.630306][ T5638] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.633389][ T5638] usb 6-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 65.633400][ T5638] usb 6-1: Product: syz [ 65.633408][ T5638] usb 6-1: Manufacturer: syz [ 65.633416][ T5638] usb 6-1: SerialNumber: syz [ 65.638965][ T5638] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 65.639107][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 65.639843][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 65.639884][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 65.639924][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 65.639965][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 65.640008][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 65.640048][ T5638] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 65.641436][ T5638] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 65.785884][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.785915][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.842912][ T11] usb 6-1: USB disconnect, device number 2 [ 65.851129][ T11] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 65.851798][ T11] keyspan 6-1:1.0: device disconnected [ 66.386442][ T7468] __nla_validate_parse: 5 callbacks suppressed [ 66.386458][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'. [ 66.388358][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 66.457849][ T7479] FAULT_INJECTION: forcing a failure. [ 66.457849][ T7479] name failslab, interval 1, probability 5, space 0, times 75 [ 66.457873][ T7479] CPU: 3 UID: 0 PID: 7479 Comm: syz.1.660 Not tainted syzkaller #0 PREEMPT(full) [ 66.457895][ T7479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.457906][ T7479] Call Trace: [ 66.457912][ T7479] [ 66.457920][ T7479] dump_stack_lvl+0x100/0x190 [ 66.457953][ T7479] should_fail_ex.cold+0x5/0xa [ 66.457980][ T7479] should_failslab+0xc2/0x120 [ 66.458004][ T7479] __kmalloc_noprof+0xfc/0x840 [ 66.458023][ T7479] ? aa_label_asxprint+0x75/0x130 [ 66.458053][ T7479] aa_label_asxprint+0x75/0x130 [ 66.458079][ T7479] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 66.458100][ T7479] security_lsmprop_to_secctx+0x146/0x1a0 [ 66.458124][ T7479] audit_log_subj_ctx+0x34f/0x460 [ 66.458145][ T7479] ? map_id_range_up+0x2ce/0x3b0 [ 66.458168][ T7479] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 66.458190][ T7479] ? audit_log_format+0xe8/0x130 [ 66.458230][ T7479] ? apparmor_current_getlsmprop_subj+0x102/0x3c0 [ 66.458263][ T7479] audit_log_task_context+0x88/0xb0 [ 66.458282][ T7479] ? __pfx_audit_log_task_context+0x10/0x10 [ 66.458306][ T7479] audit_log_task+0x1b5/0x3b0 [ 66.458329][ T7479] ? __pfx_audit_log_task+0x10/0x10 [ 66.458373][ T7479] audit_seccomp+0x79/0x190 [ 66.458410][ T7479] __seccomp_filter+0x88c/0x1130 [ 66.458438][ T7479] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.458469][ T7479] ? __pfx___seccomp_filter+0x10/0x10 [ 66.458502][ T7479] ? find_held_lock+0x2b/0x80 [ 66.458527][ T7479] ? __might_fault+0xc5/0x140 [ 66.458549][ T7479] ? __might_fault+0xc5/0x140 [ 66.458575][ T7479] __seccomp_permit_syscall+0x207/0x2d0 [ 66.458605][ T7479] __do_fast_syscall_32+0x431/0x8c0 [ 66.458635][ T7479] do_fast_syscall_32+0x32/0x70 [ 66.458662][ T7479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.458685][ T7479] RIP: 0023:0xf7fb3fbc [ 66.458701][ T7479] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 66.458719][ T7479] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 66.458738][ T7479] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 66.458751][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 66.458764][ T7479] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 66.458776][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.458789][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.458812][ T7479] [ 66.459002][ T7479] FAULT_INJECTION: forcing a failure. [ 66.459002][ T7479] name failslab, interval 1, probability 5, space 0, times 74 [ 66.459021][ T7479] CPU: 3 UID: 0 PID: 7479 Comm: syz.1.660 Not tainted syzkaller #0 PREEMPT(full) [ 66.459041][ T7479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.459051][ T7479] Call Trace: [ 66.459058][ T7479] [ 66.459065][ T7479] dump_stack_lvl+0x100/0x190 [ 66.459093][ T7479] should_fail_ex.cold+0x5/0xa [ 66.459120][ T7479] should_failslab+0xc2/0x120 [ 66.459142][ T7479] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.459168][ T7479] ? audit_log_d_path+0xed/0x210 [ 66.459192][ T7479] audit_log_d_path+0xed/0x210 [ 66.459213][ T7479] audit_log_d_path_exe+0x46/0x80 [ 66.459233][ T7479] audit_log_task+0x2fc/0x3b0 [ 66.459256][ T7479] ? __pfx_audit_log_task+0x10/0x10 [ 66.459285][ T7479] audit_seccomp+0x79/0x190 [ 66.459314][ T7479] __seccomp_filter+0x88c/0x1130 [ 66.459345][ T7479] ? __pfx___seccomp_filter+0x10/0x10 [ 66.459376][ T7479] ? __might_fault+0xc5/0x140 [ 66.459404][ T7479] __seccomp_permit_syscall+0x207/0x2d0 [ 66.459442][ T7479] do_int80_emulation+0x408/0x650 [ 66.459472][ T7479] asm_int80_emulation+0x1a/0x20 [ 66.459491][ T7479] RIP: 0023:0xf71a7f6b [ 66.459506][ T7479] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 66.459524][ T7479] RSP: 002b:00000000f546642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 66.459541][ T7479] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7272405 [ 66.459553][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.459564][ T7479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.459575][ T7479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.459587][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.459609][ T7479] [ 66.459864][ T7479] FAULT_INJECTION: forcing a failure. [ 66.459864][ T7479] name failslab, interval 1, probability 5, space 0, times 73 [ 66.459884][ T7479] CPU: 3 UID: 0 PID: 7479 Comm: syz.1.660 Not tainted syzkaller #0 PREEMPT(full) [ 66.459905][ T7479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.459916][ T7479] Call Trace: [ 66.459923][ T7479] [ 66.459930][ T7479] dump_stack_lvl+0x100/0x190 [ 66.459959][ T7479] should_fail_ex.cold+0x5/0xa [ 66.459984][ T7479] should_failslab+0xc2/0x120 [ 66.460006][ T7479] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 66.460026][ T7479] ? fast_dput+0x494/0x6f0 [ 66.460051][ T7479] ? __d_alloc+0x34/0xad0 [ 66.460078][ T7479] __d_alloc+0x34/0xad0 [ 66.460104][ T7479] __d_alloc_parallel+0x105/0x15e0 [ 66.460127][ T7479] ? lock_acquire+0x1d1/0x380 [ 66.460146][ T7479] ? __d_lookup+0x73/0x4a0 [ 66.460165][ T7479] ? __pfx___d_alloc_parallel+0x10/0x10 [ 66.460183][ T7479] ? __d_lookup+0x25c/0x4a0 [ 66.460205][ T7479] ? __d_lookup+0x266/0x4a0 [ 66.460229][ T7479] lookup_open+0x6c4/0x19e0 [ 66.460246][ T7479] ? __d_lookup+0x230/0x4a0 [ 66.460272][ T7479] path_openat+0xe75/0x23f0 [ 66.460298][ T7479] ? __pfx_path_openat+0x10/0x10 [ 66.460328][ T7479] do_file_open+0x20e/0x430 [ 66.460352][ T7479] ? __pfx_do_file_open+0x10/0x10 [ 66.460383][ T7479] ? __pfx_kfree_link+0x10/0x10 [ 66.460415][ T7479] ? _raw_spin_unlock+0x28/0x50 [ 66.460440][ T7479] ? alloc_fd+0x471/0x7a0 [ 66.460471][ T7479] do_sys_openat2+0x163/0x1d0 [ 66.460497][ T7479] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.460532][ T7479] __ia32_compat_sys_openat+0x12d/0x210 [ 66.460560][ T7479] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 66.460596][ T7479] do_int80_emulation+0x166/0x650 [ 66.460626][ T7479] asm_int80_emulation+0x1a/0x20 [ 66.460644][ T7479] RIP: 0023:0xf71a7f6b [ 66.460659][ T7479] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 66.460676][ T7479] RSP: 002b:00000000f546642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 66.460694][ T7479] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7272405 [ 66.460706][ T7479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.460718][ T7479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.460730][ T7479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.460741][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.460765][ T7479] [ 66.460987][ T7479] FAULT_INJECTION: forcing a failure. [ 66.460987][ T7479] name failslab, interval 1, probability 5, space 0, times 72 [ 66.461001][ T7479] CPU: 3 UID: 0 PID: 7479 Comm: syz.1.660 Not tainted syzkaller #0 PREEMPT(full) [ 66.461016][ T7479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.461023][ T7479] Call Trace: [ 66.461028][ T7479] [ 66.461033][ T7479] dump_stack_lvl+0x100/0x190 [ 66.461054][ T7479] should_fail_ex.cold+0x5/0xa [ 66.461071][ T7479] should_failslab+0xc2/0x120 [ 66.461088][ T7479] __kmalloc_noprof+0xfc/0x840 [ 66.461101][ T7479] ? aa_label_asxprint+0x75/0x130 [ 66.461120][ T7479] aa_label_asxprint+0x75/0x130 [ 66.461138][ T7479] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 66.461152][ T7479] security_lsmprop_to_secctx+0x146/0x1a0 [ 66.461168][ T7479] audit_log_subj_ctx+0x34f/0x460 [ 66.461181][ T7479] ? map_id_range_up+0x2ce/0x3b0 [ 66.461196][ T7479] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 66.461210][ T7479] ? audit_log_format+0xe8/0x130 [ 66.461222][ T7479] ? apparmor_current_getlsmprop_subj+0x102/0x3c0 [ 66.461241][ T7479] audit_log_task_context+0x88/0xb0 [ 66.461254][ T7479] ? __pfx_audit_log_task_context+0x10/0x10 [ 66.461270][ T7479] audit_log_task+0x1b5/0x3b0 [ 66.461286][ T7479] ? __pfx_audit_log_task+0x10/0x10 [ 66.461303][ T7479] ? putname+0xb1/0x110 [ 66.461318][ T7479] ? kmem_cache_free+0x127/0x6c0 [ 66.461337][ T7479] audit_seccomp+0x79/0x190 [ 66.461357][ T7479] __seccomp_filter+0x88c/0x1130 [ 66.461376][ T7479] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.461396][ T7479] ? __pfx___seccomp_filter+0x10/0x10 [ 66.461423][ T7479] ? find_held_lock+0x2b/0x80 [ 66.461441][ T7479] ? __might_fault+0xc5/0x140 [ 66.461456][ T7479] ? __might_fault+0xc5/0x140 [ 66.461474][ T7479] __seccomp_permit_syscall+0x207/0x2d0 [ 66.461495][ T7479] __do_fast_syscall_32+0x431/0x8c0 [ 66.461515][ T7479] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.461534][ T7479] do_fast_syscall_32+0x32/0x70 [ 66.461553][ T7479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.461568][ T7479] RIP: 0023:0xf7fb3fbc [ 66.461578][ T7479] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 66.461590][ T7479] RSP: 002b:00000000f54665cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 66.461602][ T7479] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081 [ 66.461611][ T7479] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 66.461619][ T7479] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 66.461627][ T7479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.461634][ T7479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.461648][ T7479] [ 66.785717][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.810201][ T7504] FAULT_INJECTION: forcing a failure. [ 66.810201][ T7504] name failslab, interval 1, probability 5, space 0, times 70 [ 66.810254][ T7504] CPU: 2 UID: 0 PID: 7504 Comm: syz.0.673 Not tainted syzkaller #0 PREEMPT(full) [ 66.810279][ T7504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.810292][ T7504] Call Trace: [ 66.810300][ T7504] [ 66.810310][ T7504] dump_stack_lvl+0x100/0x190 [ 66.810347][ T7504] should_fail_ex.cold+0x5/0xa [ 66.810377][ T7504] should_failslab+0xc2/0x120 [ 66.810404][ T7504] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 66.810428][ T7504] ? __alloc_skb+0x5b7/0x710 [ 66.810457][ T7504] ? __alloc_skb+0x140/0x710 [ 66.810492][ T7504] __alloc_skb+0x140/0x710 [ 66.810519][ T7504] ? __alloc_skb+0x5b7/0x710 [ 66.810547][ T7504] ? __pfx___alloc_skb+0x10/0x10 [ 66.810575][ T7504] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 66.810614][ T7504] ? lockdep_init_map_type+0x5c/0x250 [ 66.810644][ T7504] audit_log_start+0x350/0x930 [ 66.810670][ T7504] ? __pfx_audit_log_start+0x10/0x10 [ 66.810693][ T7504] ? rcu_read_lock_any_held+0x6a/0x90 [ 66.810725][ T7504] ? find_held_lock+0x2b/0x80 [ 66.810752][ T7504] ? ksys_write+0x190/0x250 [ 66.810791][ T7504] ? ksys_write+0x190/0x250 [ 66.810815][ T7504] audit_seccomp+0x60/0x190 [ 66.810845][ T7504] __seccomp_filter+0x88c/0x1130 [ 66.810879][ T7504] ? __pfx___seccomp_filter+0x10/0x10 [ 66.810914][ T7504] ? find_held_lock+0x2b/0x80 [ 66.810948][ T7504] ? __might_fault+0xc5/0x140 [ 66.810972][ T7504] ? __might_fault+0xc5/0x140 [ 66.811000][ T7504] __seccomp_permit_syscall+0x207/0x2d0 [ 66.811034][ T7504] __do_fast_syscall_32+0x431/0x8c0 [ 66.811069][ T7504] do_fast_syscall_32+0x32/0x70 [ 66.811098][ T7504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.811124][ T7504] RIP: 0023:0xf740efbc [ 66.811142][ T7504] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 66.811162][ T7504] RSP: 002b:00000000f54265cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 66.811182][ T7504] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 66.811196][ T7504] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 66.811208][ T7504] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 66.811220][ T7504] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.811233][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.811258][ T7504] [ 66.812377][ T7504] FAULT_INJECTION: forcing a failure. [ 66.812377][ T7504] name failslab, interval 1, probability 5, space 0, times 69 [ 66.812393][ T7504] CPU: 2 UID: 0 PID: 7504 Comm: syz.0.673 Not tainted syzkaller #0 PREEMPT(full) [ 66.812407][ T7504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.812414][ T7504] Call Trace: [ 66.812418][ T7504] [ 66.812423][ T7504] dump_stack_lvl+0x100/0x190 [ 66.812448][ T7504] should_fail_ex.cold+0x5/0xa [ 66.812466][ T7504] should_failslab+0xc2/0x120 [ 66.812481][ T7504] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.812495][ T7504] ? audit_log_start+0x29d/0x930 [ 66.812509][ T7504] audit_log_start+0x29d/0x930 [ 66.812523][ T7504] ? __pfx_audit_log_start+0x10/0x10 [ 66.812536][ T7504] ? kasan_quarantine_put+0x104/0x240 [ 66.812548][ T7504] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.812567][ T7504] ? putname+0xb1/0x110 [ 66.812582][ T7504] ? kmem_cache_free+0x127/0x6c0 [ 66.812602][ T7504] audit_seccomp+0x60/0x190 [ 66.812622][ T7504] __seccomp_filter+0x88c/0x1130 [ 66.812641][ T7504] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.812664][ T7504] ? __pfx___seccomp_filter+0x10/0x10 [ 66.812685][ T7504] ? find_held_lock+0x2b/0x80 [ 66.812703][ T7504] ? __might_fault+0xc5/0x140 [ 66.812719][ T7504] ? __might_fault+0xc5/0x140 [ 66.812736][ T7504] __seccomp_permit_syscall+0x207/0x2d0 [ 66.812757][ T7504] __do_fast_syscall_32+0x431/0x8c0 [ 66.812776][ T7504] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.812794][ T7504] do_fast_syscall_32+0x32/0x70 [ 66.812813][ T7504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.812829][ T7504] RIP: 0023:0xf740efbc [ 66.812839][ T7504] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 66.812851][ T7504] RSP: 002b:00000000f54264cc EFLAGS: 00000296 ORIG_RAX: 000000000000015a [ 66.812864][ T7504] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 66.812871][ T7504] RDX: 00000000f73feff4 RSI: 0000000000000006 RDI: 0000000000000000 [ 66.812879][ T7504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.812886][ T7504] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.812893][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.812908][ T7504] [ 66.829687][ T7504] FAULT_INJECTION: forcing a failure. [ 66.829687][ T7504] name failslab, interval 1, probability 5, space 0, times 66 [ 66.829713][ T7504] CPU: 2 UID: 0 PID: 7504 Comm: syz.0.673 Not tainted syzkaller #0 PREEMPT(full) [ 66.829735][ T7504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.829747][ T7504] Call Trace: [ 66.829754][ T7504] [ 66.829762][ T7504] dump_stack_lvl+0x100/0x190 [ 66.829797][ T7504] should_fail_ex.cold+0x5/0xa [ 66.829825][ T7504] should_failslab+0xc2/0x120 [ 66.829850][ T7504] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.829871][ T7504] ? __send_signal_locked+0x1d1/0x1420 [ 66.829905][ T7504] __send_signal_locked+0x1d1/0x1420 [ 66.829944][ T7504] do_notify_parent+0xf15/0x10c0 [ 66.829974][ T7504] ? __pfx_do_notify_parent+0x10/0x10 [ 66.830003][ T7504] ? do_raw_spin_lock+0x128/0x260 [ 66.830031][ T7504] ? __wake_up+0x3f/0x60 [ 66.830062][ T7504] ? release_task+0xc27/0x1ca0 [ 66.830093][ T7504] release_task+0x14ea/0x1ca0 [ 66.830125][ T7504] ? __pfx_release_task+0x10/0x10 [ 66.830149][ T7504] ? do_raw_spin_lock+0x128/0x260 [ 66.830174][ T7504] ? find_held_lock+0x2b/0x80 [ 66.830231][ T7504] ? __wake_up+0x3f/0x60 [ 66.830260][ T7504] ? __wake_up+0x3f/0x60 [ 66.830291][ T7504] ? rcu_is_watching+0x13/0xc0 [ 66.830323][ T7504] do_exit+0x1300/0x2a00 [ 66.830351][ T7504] ? __pfx_do_exit+0x10/0x10 [ 66.830375][ T7504] ? do_raw_spin_lock+0x128/0x260 [ 66.830400][ T7504] ? find_held_lock+0x2b/0x80 [ 66.830426][ T7504] ? get_signal+0xa28/0x22e0 [ 66.830448][ T7504] do_group_exit+0xd5/0x2a0 [ 66.830474][ T7504] get_signal+0x1f58/0x22e0 [ 66.830493][ T7504] ? __pfx_futex_wait+0x10/0x10 [ 66.830519][ T7504] ? kmem_cache_free+0x127/0x6c0 [ 66.830547][ T7504] ? audit_log_end.part.0+0x1fa/0x280 [ 66.830569][ T7504] ? __pfx_get_signal+0x10/0x10 [ 66.830590][ T7504] ? do_futex+0x190/0x440 [ 66.830621][ T7504] arch_do_signal_or_restart+0x91/0x7a0 [ 66.830654][ T7504] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 66.830699][ T7504] exit_to_user_mode_loop+0x139/0x700 [ 66.830724][ T7504] ? rcu_is_watching+0x13/0xc0 [ 66.830754][ T7504] __do_fast_syscall_32+0x5b0/0x8c0 [ 66.830783][ T7504] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.830813][ T7504] do_fast_syscall_32+0x32/0x70 [ 66.830843][ T7504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.830868][ T7504] RIP: 0023:0xf740efbc [ 66.830885][ T7504] Code: Unable to access opcode bytes at 0xf740ef92. [ 66.830893][ T7504] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 66.830913][ T7504] RAX: fffffffffffffe00 RBX: 00000000f7434f88 RCX: 0000000000000080 [ 66.830926][ T7504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 66.830938][ T7504] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 66.830956][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.830967][ T7504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.830993][ T7504] [ 66.951486][ T50] usb 8-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 66.952714][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.954741][ T50] usb 8-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 66.954754][ T50] usb 8-1: Product: syz [ 66.954762][ T50] usb 8-1: Manufacturer: syz [ 66.954770][ T50] usb 8-1: SerialNumber: syz [ 66.959819][ T50] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected [ 66.959980][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 66.966368][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 66.966442][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 66.966509][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 66.966576][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 66.966642][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 66.966709][ T50] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 66.968235][ T50] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 67.066637][ T7527] FAULT_INJECTION: forcing a failure. [ 67.066637][ T7527] name failslab, interval 1, probability 5, space 0, times 65 [ 67.066657][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.1.684 Not tainted syzkaller #0 PREEMPT(full) [ 67.066672][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.066680][ T7527] Call Trace: [ 67.066685][ T7527] [ 67.066690][ T7527] dump_stack_lvl+0x100/0x190 [ 67.066713][ T7527] should_fail_ex.cold+0x5/0xa [ 67.066731][ T7527] should_failslab+0xc2/0x120 [ 67.066747][ T7527] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 67.066761][ T7527] ? __alloc_skb+0x5b7/0x710 [ 67.066784][ T7527] ? __alloc_skb+0x140/0x710 [ 67.066804][ T7527] __alloc_skb+0x140/0x710 [ 67.066823][ T7527] ? __alloc_skb+0x5b7/0x710 [ 67.066841][ T7527] ? __pfx___alloc_skb+0x10/0x10 [ 67.066859][ T7527] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 67.066873][ T7527] ? lockdep_init_map_type+0x5c/0x250 [ 67.066891][ T7527] audit_log_start+0x350/0x930 [ 67.066906][ T7527] ? __pfx_audit_log_start+0x10/0x10 [ 67.066921][ T7527] ? kmem_cache_free+0x127/0x6c0 [ 67.066939][ T7527] ? audit_log_end.part.0+0x1fa/0x280 [ 67.066954][ T7527] audit_seccomp+0x60/0x190 [ 67.066974][ T7527] __seccomp_filter+0x88c/0x1130 [ 67.066993][ T7527] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.067013][ T7527] ? __pfx___seccomp_filter+0x10/0x10 [ 67.067036][ T7527] ? find_held_lock+0x2b/0x80 [ 67.067054][ T7527] ? __might_fault+0xc5/0x140 [ 67.067070][ T7527] ? __might_fault+0xc5/0x140 [ 67.067088][ T7527] __seccomp_permit_syscall+0x207/0x2d0 [ 67.067109][ T7527] __do_fast_syscall_32+0x431/0x8c0 [ 67.067131][ T7527] do_fast_syscall_32+0x32/0x70 [ 67.067150][ T7527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.067168][ T7527] RIP: 0023:0xf7fb3fbc [ 67.067178][ T7527] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 67.067190][ T7527] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 67.067202][ T7527] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 67.067210][ T7527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 67.067217][ T7527] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 67.067225][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.067232][ T7527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.067246][ T7527] [ 67.067759][ T7527] FAULT_INJECTION: forcing a failure. [ 67.067759][ T7527] name failslab, interval 1, probability 5, space 0, times 64 [ 67.067778][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.1.684 Not tainted syzkaller #0 PREEMPT(full) [ 67.067792][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.067799][ T7527] Call Trace: [ 67.067803][ T7527] [ 67.067808][ T7527] dump_stack_lvl+0x100/0x190 [ 67.067828][ T7527] should_fail_ex.cold+0x5/0xa [ 67.067847][ T7527] should_failslab+0xc2/0x120 [ 67.067863][ T7527] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 67.067876][ T7527] ? proc_alloc_inode+0x25/0x200 [ 67.067896][ T7527] ? __pfx_proc_alloc_inode+0x10/0x10 [ 67.067915][ T7527] proc_alloc_inode+0x25/0x200 [ 67.067933][ T7527] alloc_inode+0x68/0x250 [ 67.067952][ T7527] new_inode+0x22/0x1c0 [ 67.067972][ T7527] proc_pid_make_inode+0x22/0x160 [ 67.067991][ T7527] proc_ns_dir_lookup+0x25b/0x390 [ 67.068011][ T7527] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 67.068028][ T7527] lookup_open+0xb29/0x19e0 [ 67.068040][ T7527] ? __d_lookup+0x230/0x4a0 [ 67.068057][ T7527] path_openat+0xe75/0x23f0 [ 67.068074][ T7527] ? __pfx_path_openat+0x10/0x10 [ 67.068094][ T7527] do_file_open+0x20e/0x430 [ 67.068110][ T7527] ? __pfx_do_file_open+0x10/0x10 [ 67.068131][ T7527] ? __pfx_kfree_link+0x10/0x10 [ 67.068149][ T7527] ? _raw_spin_unlock+0x28/0x50 [ 67.068164][ T7527] ? alloc_fd+0x471/0x7a0 [ 67.068183][ T7527] do_sys_openat2+0x163/0x1d0 [ 67.068202][ T7527] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.068225][ T7527] __ia32_compat_sys_openat+0x12d/0x210 [ 67.068244][ T7527] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 67.068274][ T7527] do_int80_emulation+0x166/0x650 [ 67.068303][ T7527] asm_int80_emulation+0x1a/0x20 [ 67.068321][ T7527] RIP: 0023:0xf71a7f6b [ 67.068338][ T7527] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 67.068358][ T7527] RSP: 002b:00000000f546642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 67.068374][ T7527] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7272405 [ 67.068382][ T7527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.068390][ T7527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.068397][ T7527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.068405][ T7527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.068421][ T7527] [ 67.075991][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.108027][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 67.171299][ T50] usb 8-1: USB disconnect, device number 5 [ 67.176052][ T50] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 67.179824][ T50] keyspan 8-1:1.0: device disconnected [ 67.218546][ T7540] FAULT_INJECTION: forcing a failure. [ 67.218546][ T7540] name failslab, interval 1, probability 5, space 0, times 57 [ 67.218565][ T7540] CPU: 3 UID: 0 PID: 7540 Comm: syz.1.689 Not tainted syzkaller #0 PREEMPT(full) [ 67.218593][ T7540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.218601][ T7540] Call Trace: [ 67.218606][ T7540] [ 67.218612][ T7540] dump_stack_lvl+0x100/0x190 [ 67.218636][ T7540] should_fail_ex.cold+0x5/0xa [ 67.218655][ T7540] should_failslab+0xc2/0x120 [ 67.218672][ T7540] __kmalloc_noprof+0xfc/0x840 [ 67.218685][ T7540] ? do_raw_spin_lock+0x128/0x260 [ 67.218700][ T7540] ? offload_action_alloc+0x29/0xf0 [ 67.218716][ T7540] offload_action_alloc+0x29/0xf0 [ 67.218730][ T7540] tcf_action_offload_add_ex+0x1b6/0x7b0 [ 67.218751][ T7540] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 67.218788][ T7540] ? tcf_pedit_get_fill_size+0x150/0x300 [ 67.218810][ T7540] tcf_action_init+0x7b5/0xb50 [ 67.218828][ T7540] ? __pfx_tcf_action_init+0x10/0x10 [ 67.218852][ T7540] ? __kernel_text_address+0xd/0x30 [ 67.218871][ T7540] ? unwind_get_return_address+0x59/0xa0 [ 67.218890][ T7540] ? arch_stack_walk+0xa6/0xf0 [ 67.218917][ T7540] ? kasan_save_stack+0x3f/0x50 [ 67.218930][ T7540] ? kasan_save_stack+0x30/0x50 [ 67.218942][ T7540] ? kasan_save_track+0x14/0x30 [ 67.218955][ T7540] ? kasan_save_free_info+0x3b/0x70 [ 67.218972][ T7540] ? __kasan_slab_free+0x5f/0x80 [ 67.218986][ T7540] ? kmem_cache_free+0x127/0x6c0 [ 67.219003][ T7540] ? kfree_skbmem+0x19a/0x210 [ 67.219017][ T7540] ? consume_skb+0xd1/0x110 [ 67.219028][ T7540] ? nlmon_xmit+0xa5/0xe0 [ 67.219045][ T7540] ? dev_hard_start_xmit+0x121/0x760 [ 67.219064][ T7540] tcf_action_add+0xef/0x750 [ 67.219079][ T7540] ? __pfx_tcf_action_add+0x10/0x10 [ 67.219113][ T7540] ? __nla_parse+0x40/0x60 [ 67.219134][ T7540] tc_ctl_action+0x2e3/0x470 [ 67.219149][ T7540] ? __pfx_tc_ctl_action+0x10/0x10 [ 67.219168][ T7540] ? __pfx_tc_ctl_action+0x10/0x10 [ 67.219184][ T7540] rtnetlink_rcv_msg+0x3c9/0xe90 [ 67.219199][ T7540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.219219][ T7540] netlink_rcv_skb+0x159/0x420 [ 67.219232][ T7540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.219246][ T7540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.219257][ T7540] ? __asan_memcpy+0x3c/0x60 [ 67.219280][ T7540] ? netlink_deliver_tap+0x1ae/0xb50 [ 67.219302][ T7540] netlink_unicast+0x668/0x950 [ 67.219323][ T7540] ? __pfx_netlink_unicast+0x10/0x10 [ 67.219347][ T7540] netlink_sendmsg+0x9ac/0x10c0 [ 67.219369][ T7540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.219391][ T7540] ? apparmor_socket_sendmsg+0x165/0x280 [ 67.219416][ T7540] ? ____sys_sendmsg+0xa99/0xc30 [ 67.219431][ T7540] ____sys_sendmsg+0xa99/0xc30 [ 67.219445][ T7540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.219468][ T7540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.219491][ T7540] ___sys_sendmsg+0x190/0x1e0 [ 67.219507][ T7540] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.219523][ T7540] ? futex_wait+0x11e/0x370 [ 67.219542][ T7540] ? find_held_lock+0x2b/0x80 [ 67.219569][ T7540] __sys_sendmsg+0x160/0x210 [ 67.219588][ T7540] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.219615][ T7540] __do_fast_syscall_32+0x14b/0x8c0 [ 67.219637][ T7540] do_fast_syscall_32+0x32/0x70 [ 67.219655][ T7540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.219672][ T7540] RIP: 0023:0xf7fb3fbc [ 67.219683][ T7540] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 67.219695][ T7540] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 67.219707][ T7540] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 67.219715][ T7540] RDX: 000000002400c800 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.219723][ T7540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.219730][ T7540] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.219737][ T7540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.219752][ T7540] [ 67.318176][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.695'. [ 67.367537][ T7562] FAULT_INJECTION: forcing a failure. [ 67.367537][ T7562] name failslab, interval 1, probability 5, space 0, times 56 [ 67.367555][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.2.699 Not tainted syzkaller #0 PREEMPT(full) [ 67.367569][ T7562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.367577][ T7562] Call Trace: [ 67.367581][ T7562] [ 67.367587][ T7562] dump_stack_lvl+0x100/0x190 [ 67.367628][ T7562] should_fail_ex.cold+0x5/0xa [ 67.367648][ T7562] should_failslab+0xc2/0x120 [ 67.367665][ T7562] __kmalloc_noprof+0xfc/0x840 [ 67.367678][ T7562] ? do_raw_spin_lock+0x128/0x260 [ 67.367694][ T7562] ? offload_action_alloc+0x29/0xf0 [ 67.367709][ T7562] offload_action_alloc+0x29/0xf0 [ 67.367722][ T7562] tcf_action_offload_add_ex+0x1b6/0x7b0 [ 67.367744][ T7562] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 67.367779][ T7562] ? tcf_pedit_get_fill_size+0x150/0x300 [ 67.367800][ T7562] tcf_action_init+0x7b5/0xb50 [ 67.367817][ T7562] ? __pfx_tcf_action_init+0x10/0x10 [ 67.367841][ T7562] ? __kernel_text_address+0xd/0x30 [ 67.367859][ T7562] ? unwind_get_return_address+0x59/0xa0 [ 67.367879][ T7562] ? arch_stack_walk+0xa6/0xf0 [ 67.367907][ T7562] ? kasan_save_stack+0x3f/0x50 [ 67.367919][ T7562] ? kasan_save_stack+0x30/0x50 [ 67.367932][ T7562] ? kasan_save_track+0x14/0x30 [ 67.367944][ T7562] ? kasan_save_free_info+0x3b/0x70 [ 67.367961][ T7562] ? __kasan_slab_free+0x5f/0x80 [ 67.367974][ T7562] ? kmem_cache_free+0x127/0x6c0 [ 67.367991][ T7562] ? kfree_skbmem+0x19a/0x210 [ 67.368005][ T7562] ? consume_skb+0xd1/0x110 [ 67.368016][ T7562] ? nlmon_xmit+0xa5/0xe0 [ 67.368032][ T7562] ? dev_hard_start_xmit+0x121/0x760 [ 67.368050][ T7562] tcf_action_add+0xef/0x750 [ 67.368066][ T7562] ? __pfx_tcf_action_add+0x10/0x10 [ 67.368100][ T7562] ? __nla_parse+0x40/0x60 [ 67.368121][ T7562] tc_ctl_action+0x2e3/0x470 [ 67.368135][ T7562] ? __pfx_tc_ctl_action+0x10/0x10 [ 67.368154][ T7562] ? __pfx_tc_ctl_action+0x10/0x10 [ 67.368168][ T7562] rtnetlink_rcv_msg+0x3c9/0xe90 [ 67.368183][ T7562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.368204][ T7562] netlink_rcv_skb+0x159/0x420 [ 67.368216][ T7562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.368231][ T7562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.368242][ T7562] ? __asan_memcpy+0x3c/0x60 [ 67.368265][ T7562] ? netlink_deliver_tap+0x1ae/0xb50 [ 67.368287][ T7562] netlink_unicast+0x668/0x950 [ 67.368308][ T7562] ? __pfx_netlink_unicast+0x10/0x10 [ 67.368332][ T7562] netlink_sendmsg+0x9ac/0x10c0 [ 67.368354][ T7562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.368382][ T7562] ? apparmor_socket_sendmsg+0x165/0x280 [ 67.368403][ T7562] ? ____sys_sendmsg+0xa99/0xc30 [ 67.368418][ T7562] ____sys_sendmsg+0xa99/0xc30 [ 67.368432][ T7562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.368471][ T7562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.368494][ T7562] ___sys_sendmsg+0x190/0x1e0 [ 67.368510][ T7562] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.368526][ T7562] ? futex_wait+0x11e/0x370 [ 67.368545][ T7562] ? find_held_lock+0x2b/0x80 [ 67.368573][ T7562] __sys_sendmsg+0x160/0x210 [ 67.368593][ T7562] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.368620][ T7562] __do_fast_syscall_32+0x14b/0x8c0 [ 67.368642][ T7562] do_fast_syscall_32+0x32/0x70 [ 67.368660][ T7562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.368676][ T7562] RIP: 0023:0xf7f67fbc [ 67.368687][ T7562] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 67.368699][ T7562] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 67.368712][ T7562] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 67.368720][ T7562] RDX: 000000002400c800 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.368728][ T7562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.368735][ T7562] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 67.368742][ T7562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.368758][ T7562] [ 67.457518][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'. [ 67.516658][ T44] kauditd_printk_skb: 459 callbacks suppressed [ 67.516673][ T44] audit: type=1326 audit(1794095397.983:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.516710][ T44] audit: type=1326 audit(1794095397.983:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.519383][ T44] audit: type=1326 audit(1794095397.983:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.519569][ T44] audit: type=1326 audit(1794095397.983:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.519613][ T44] audit: type=1326 audit(1794095397.983:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.519653][ T44] audit: type=1326 audit(1794095397.983:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.519689][ T44] audit: type=1326 audit(1794095397.983:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.519985][ T44] audit: type=1326 audit(1794095397.983:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.520279][ T44] audit: type=1326 audit(1794095397.983:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.520303][ T44] audit: type=1326 audit(1794095397.983:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.2.712" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f67fbc code=0x7ffc0000 [ 67.590590][ T7593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.706808][ T6562] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.876098][ T6562] usb 6-1: Using ep0 maxpacket: 32 [ 67.876957][ T6562] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 67.877675][ T6562] usb 6-1: config 0 has no interfaces? [ 67.880008][ T6562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.880025][ T6562] usb 6-1: Product: syz [ 67.880038][ T6562] usb 6-1: Manufacturer: syz [ 67.880051][ T6562] usb 6-1: SerialNumber: syz [ 67.882009][ T6562] usb 6-1: config 0 descriptor?? [ 68.063195][ T7642] vxcan1: Caught tx_queue_len zero misconfig [ 68.095932][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.105526][ T5938] usb 6-1: USB disconnect, device number 3 [ 68.118738][ T7644] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.736'. [ 68.257038][ T50] usb 5-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 68.257846][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.259942][ T50] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 68.259953][ T50] usb 5-1: Product: syz [ 68.259960][ T50] usb 5-1: Manufacturer: syz [ 68.259968][ T50] usb 5-1: SerialNumber: syz [ 68.266448][ T50] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 68.266544][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.267247][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.267295][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 68.267336][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.267377][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.267421][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 68.267461][ T50] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 68.271333][ T50] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 68.345768][ C1] net_ratelimit: 107 callbacks suppressed [ 68.568149][ T7668] FAULT_INJECTION: forcing a failure. [ 68.568149][ T7668] name failslab, interval 1, probability 5, space 0, times 55 [ 68.568168][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 68.568182][ T7668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.568190][ T7668] Call Trace: [ 68.568194][ T7668] [ 68.568200][ T7668] dump_stack_lvl+0x100/0x190 [ 68.568222][ T7668] should_fail_ex.cold+0x5/0xa [ 68.568240][ T7668] should_failslab+0xc2/0x120 [ 68.568257][ T7668] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 68.568270][ T7668] ? __alloc_skb+0x5b7/0x710 [ 68.568288][ T7668] ? __alloc_skb+0x140/0x710 [ 68.568308][ T7668] __alloc_skb+0x140/0x710 [ 68.568325][ T7668] ? __alloc_skb+0x5b7/0x710 [ 68.568343][ T7668] ? __pfx___alloc_skb+0x10/0x10 [ 68.568361][ T7668] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 68.568375][ T7668] ? lockdep_init_map_type+0x5c/0x250 [ 68.568392][ T7668] audit_log_start+0x350/0x930 [ 68.568406][ T7668] ? __pfx_audit_log_start+0x10/0x10 [ 68.568420][ T7668] ? rcu_read_lock_any_held+0x6a/0x90 [ 68.568439][ T7668] ? find_held_lock+0x2b/0x80 [ 68.568457][ T7668] ? ksys_write+0x190/0x250 [ 68.568470][ T7668] ? ksys_write+0x190/0x250 [ 68.568484][ T7668] audit_seccomp+0x60/0x190 [ 68.568504][ T7668] __seccomp_filter+0x88c/0x1130 [ 68.568526][ T7668] ? __pfx___seccomp_filter+0x10/0x10 [ 68.568547][ T7668] ? find_held_lock+0x2b/0x80 [ 68.568564][ T7668] ? __might_fault+0xc5/0x140 [ 68.568579][ T7668] ? __might_fault+0xc5/0x140 [ 68.568596][ T7668] __seccomp_permit_syscall+0x207/0x2d0 [ 68.568617][ T7668] __do_fast_syscall_32+0x431/0x8c0 [ 68.568638][ T7668] do_fast_syscall_32+0x32/0x70 [ 68.568657][ T7668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.568672][ T7668] RIP: 0023:0xf743efbc [ 68.568683][ T7668] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 68.568695][ T7668] RSP: 002b:00000000f54565cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 68.568708][ T7668] RAX: ffffffffffffffda RBX: 00000000f7464f8c RCX: 0000000000000081 [ 68.568717][ T7668] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 68.568725][ T7668] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 68.568733][ T7668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.568740][ T7668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.568755][ T7668] [ 68.570327][ T7668] FAULT_INJECTION: forcing a failure. [ 68.570327][ T7668] name failslab, interval 1, probability 5, space 0, times 54 [ 68.570342][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 68.570355][ T7668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.570363][ T7668] Call Trace: [ 68.570367][ T7668] [ 68.570372][ T7668] dump_stack_lvl+0x100/0x190 [ 68.570393][ T7668] should_fail_ex.cold+0x5/0xa [ 68.570412][ T7668] should_failslab+0xc2/0x120 [ 68.570428][ T7668] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 68.570441][ T7668] ? __alloc_skb+0x5b7/0x710 [ 68.570459][ T7668] ? __alloc_skb+0x140/0x710 [ 68.570479][ T7668] __alloc_skb+0x140/0x710 [ 68.570496][ T7668] ? __alloc_skb+0x5b7/0x710 [ 68.570513][ T7668] ? __pfx___alloc_skb+0x10/0x10 [ 68.570530][ T7668] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 68.570543][ T7668] ? lockdep_init_map_type+0x5c/0x250 [ 68.570560][ T7668] audit_log_start+0x350/0x930 [ 68.570575][ T7668] ? __pfx_audit_log_start+0x10/0x10 [ 68.570588][ T7668] ? kasan_quarantine_put+0x104/0x240 [ 68.570601][ T7668] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.570620][ T7668] ? putname+0xb1/0x110 [ 68.570635][ T7668] ? kmem_cache_free+0x127/0x6c0 [ 68.570655][ T7668] audit_seccomp+0x60/0x190 [ 68.570675][ T7668] __seccomp_filter+0x88c/0x1130 [ 68.570693][ T7668] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.570713][ T7668] ? __pfx___seccomp_filter+0x10/0x10 [ 68.570734][ T7668] ? find_held_lock+0x2b/0x80 [ 68.570751][ T7668] ? __might_fault+0xc5/0x140 [ 68.570766][ T7668] ? __might_fault+0xc5/0x140 [ 68.570783][ T7668] __seccomp_permit_syscall+0x207/0x2d0 [ 68.570804][ T7668] __do_fast_syscall_32+0x431/0x8c0 [ 68.570829][ T7668] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.570849][ T7668] do_fast_syscall_32+0x32/0x70 [ 68.570868][ T7668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.570885][ T7668] RIP: 0023:0xf743efbc [ 68.570896][ T7668] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 68.570909][ T7668] RSP: 002b:00000000f54564cc EFLAGS: 00000296 [ 68.570916][ T7668] ORIG_RAX: 000000000000015a [ 68.570923][ T7668] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 68.570932][ T7668] RDX: 00000000f742eff4 RSI: 0000000000000004 RDI: 0000000000000000 [ 68.570940][ T7668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.570948][ T7668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.570956][ T7668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.570970][ T7668] [ 68.571147][ T7668] FAULT_INJECTION: forcing a failure. [ 68.571147][ T7668] name failslab, interval 1, probability 5, space 0, times 53 [ 68.571161][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 68.571176][ T7668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.571184][ T7668] Call Trace: [ 68.571189][ T7668] [ 68.571194][ T7668] dump_stack_lvl+0x100/0x190 [ 68.571232][ T7668] should_fail_ex.cold+0x5/0xa [ 68.571249][ T7668] should_failslab+0xc2/0x120 [ 68.571265][ T7668] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.571280][ T7668] ? audit_log_start+0x29d/0x930 [ 68.571294][ T7668] audit_log_start+0x29d/0x930 [ 68.571308][ T7668] ? __pfx_audit_log_start+0x10/0x10 [ 68.571320][ T7668] ? __lock_acquire+0x5c0/0x1f40 [ 68.571335][ T7668] ? percpu_counter_add_batch+0xb9/0x230 [ 68.571350][ T7668] ? errseq_sample+0x51/0x70 [ 68.571369][ T7668] ? file_init_path+0x48e/0x670 [ 68.571388][ T7668] audit_seccomp+0x60/0x190 [ 68.571408][ T7668] __seccomp_filter+0x88c/0x1130 [ 68.571429][ T7668] ? __pfx___seccomp_filter+0x10/0x10 [ 68.571451][ T7668] ? find_held_lock+0x2b/0x80 [ 68.571468][ T7668] ? __might_fault+0xc5/0x140 [ 68.571483][ T7668] ? __might_fault+0xc5/0x140 [ 68.571501][ T7668] __seccomp_permit_syscall+0x207/0x2d0 [ 68.571510][ T50] usb 5-1: USB disconnect, device number 4 [ 68.571523][ T7668] __do_fast_syscall_32+0x431/0x8c0 [ 68.571542][ T7668] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.571560][ T7668] do_fast_syscall_32+0x32/0x70 [ 68.571579][ T7668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.571594][ T7668] RIP: 0023:0xf743efbc [ 68.571604][ T7668] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 68.571615][ T7668] RSP: 002b:00000000f54564cc EFLAGS: 00000287 ORIG_RAX: 000000000000015a [ 68.571627][ T7668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 68.571635][ T7668] RDX: 00000000f742eff4 RSI: 0000000000000004 RDI: 00000000f5456b30 [ 68.571642][ T7668] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 68.571649][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.571656][ T7668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.571671][ T7668] [ 68.575039][ T50] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 68.575384][ T50] keyspan 5-1:1.0: device disconnected [ 68.908313][ T7694] bridge0: port 1(syz_tun) entered blocking state [ 68.908360][ T7694] bridge0: port 1(syz_tun) entered disabled state [ 68.908467][ T7694] syz_tun: entered allmulticast mode [ 69.122103][ T7717] bridge0: port 3(syz_tun) entered blocking state [ 69.122184][ T7717] bridge0: port 3(syz_tun) entered disabled state [ 69.122316][ T7717] syz_tun: entered allmulticast mode [ 69.123444][ T7717] bridge0: port 3(syz_tun) entered blocking state [ 69.123486][ T7717] bridge0: port 3(syz_tun) entered forwarding state [ 69.144738][ T7720] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.768'. [ 69.155801][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.302149][ T7688] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26 [ 69.797957][ T7742] FAULT_INJECTION: forcing a failure. [ 69.797957][ T7742] name failslab, interval 1, probability 5, space 0, times 49 [ 69.797985][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.1.781 Not tainted syzkaller #0 PREEMPT(full) [ 69.798009][ T7742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.798023][ T7742] Call Trace: [ 69.798031][ T7742] [ 69.798039][ T7742] dump_stack_lvl+0x100/0x190 [ 69.798075][ T7742] should_fail_ex.cold+0x5/0xa [ 69.798105][ T7742] should_failslab+0xc2/0x120 [ 69.798131][ T7742] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.798152][ T7742] ? __fget_files+0x215/0x3d0 [ 69.798176][ T7742] ? create_new_namespaces+0x30/0xac0 [ 69.798225][ T7742] create_new_namespaces+0x30/0xac0 [ 69.798253][ T7742] __do_sys_setns+0x20f/0x1f90 [ 69.798278][ T7742] ? __might_fault+0xc5/0x140 [ 69.798305][ T7742] ? __pfx___do_sys_setns+0x10/0x10 [ 69.798338][ T7742] __do_fast_syscall_32+0x14b/0x8c0 [ 69.798370][ T7742] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.798401][ T7742] do_fast_syscall_32+0x32/0x70 [ 69.798433][ T7742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.798460][ T7742] RIP: 0023:0xf7fb3fbc [ 69.798478][ T7742] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 69.798498][ T7742] RSP: 002b:00000000f54664cc EFLAGS: 00000296 ORIG_RAX: 000000000000015a [ 69.798519][ T7742] RAX: ffffffffffffffda RBX: 00000000000000c9 RCX: 0000000000000000 [ 69.798533][ T7742] RDX: 00000000f743eff4 RSI: 0000000000000004 RDI: 0000000000000000 [ 69.798546][ T7742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.798558][ T7742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.798571][ T7742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.798598][ T7742] [ 69.976278][ T7746] FAULT_INJECTION: forcing a failure. [ 69.976278][ T7746] name failslab, interval 1, probability 5, space 0, times 46 [ 69.976302][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.3.783 Not tainted syzkaller #0 PREEMPT(full) [ 69.976326][ T7746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.976339][ T7746] Call Trace: [ 69.976346][ T7746] [ 69.976356][ T7746] dump_stack_lvl+0x100/0x190 [ 69.976391][ T7746] should_fail_ex.cold+0x5/0xa [ 69.976422][ T7746] should_failslab+0xc2/0x120 [ 69.976449][ T7746] __kmalloc_noprof+0xfc/0x840 [ 69.976472][ T7746] ? __register_sysctl_table+0xac/0x1650 [ 69.976501][ T7746] __register_sysctl_table+0xac/0x1650 [ 69.976524][ T7746] ? lock_acquire+0x1d1/0x380 [ 69.976551][ T7746] ? __pfx___register_sysctl_table+0x10/0x10 [ 69.976587][ T7746] ? is_module_address+0x5f/0xf0 [ 69.976616][ T7746] ? is_module_address+0x5f/0xf0 [ 69.976651][ T7746] register_net_sysctl_sz+0x325/0x420 [ 69.976682][ T7746] __devinet_sysctl_register+0x1b9/0x360 [ 69.976715][ T7746] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 69.976758][ T7746] ? __asan_memcpy+0x3c/0x60 [ 69.976795][ T7746] devinet_init_net+0x334/0x8d0 [ 69.976825][ T7746] ? __pfx_arp_net_init+0x10/0x10 [ 69.976858][ T7746] ? __pfx_devinet_init_net+0x10/0x10 [ 69.976888][ T7746] ops_init+0x1e2/0x5f0 [ 69.976914][ T7746] setup_net+0x118/0x3a0 [ 69.976936][ T7746] ? __pfx_setup_net+0x10/0x10 [ 69.976958][ T7746] ? bpf_lsm_namespace_init+0x9/0x10 [ 69.976989][ T7746] copy_net_ns+0x340/0x7a0 [ 69.977015][ T7746] create_new_namespaces+0x3ea/0xac0 [ 69.977045][ T7746] unshare_nsproxy_namespaces+0xf6/0x210 [ 69.977071][ T7746] ksys_unshare+0x44f/0x980 [ 69.977095][ T7746] ? __pfx_ksys_unshare+0x10/0x10 [ 69.977122][ T7746] ? __might_fault+0xc5/0x140 [ 69.977158][ T7746] __ia32_sys_unshare+0x30/0x40 [ 69.977182][ T7746] __do_fast_syscall_32+0x14b/0x8c0 [ 69.977217][ T7746] do_fast_syscall_32+0x32/0x70 [ 69.977249][ T7746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.977277][ T7746] RIP: 0023:0xf743efbc [ 69.977295][ T7746] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 69.977318][ T7746] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 69.977341][ T7746] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 69.977356][ T7746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.977368][ T7746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.977382][ T7746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.977397][ T7746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.977426][ T7746] [ 70.079940][ T7750] tipc: Enabling of bearer rejected, failed to enable media [ 70.248098][ T7774] FAULT_INJECTION: forcing a failure. [ 70.248098][ T7774] name failslab, interval 1, probability 5, space 0, times 45 [ 70.248118][ T7774] CPU: 2 UID: 0 PID: 7774 Comm: syz.0.793 Not tainted syzkaller #0 PREEMPT(full) [ 70.248132][ T7774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.248140][ T7774] Call Trace: [ 70.248145][ T7774] [ 70.248150][ T7774] dump_stack_lvl+0x100/0x190 [ 70.248174][ T7774] should_fail_ex.cold+0x5/0xa [ 70.248195][ T7774] should_failslab+0xc2/0x120 [ 70.248212][ T7774] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.248225][ T7774] ? do_getname+0x35/0x390 [ 70.248248][ T7774] do_getname+0x35/0x390 [ 70.248269][ T7774] user_path_at+0x26/0x60 [ 70.248284][ T7774] __ia32_sys_mount+0x1fb/0x310 [ 70.248304][ T7774] ? __pfx___ia32_sys_mount+0x10/0x10 [ 70.248327][ T7774] __do_fast_syscall_32+0x14b/0x8c0 [ 70.248348][ T7774] do_fast_syscall_32+0x32/0x70 [ 70.248367][ T7774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.248383][ T7774] RIP: 0023:0xf740efbc [ 70.248394][ T7774] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 70.248405][ T7774] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 70.248418][ T7774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080001b00 [ 70.248426][ T7774] RDX: 0000000080001b40 RSI: 0000000000800000 RDI: 0000000000000000 [ 70.248434][ T7774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.248441][ T7774] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.248448][ T7774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.248463][ T7774] [ 70.670239][ T7799] tipc: Enabling of bearer rejected, failed to enable media [ 70.910272][ T30] cfg80211: failed to load regulatory.db [ 70.922883][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923018][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.997655][ T7813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.805'. [ 71.197525][ T7798] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input28 [ 71.442922][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.815'. [ 71.488087][ T7842] FAULT_INJECTION: forcing a failure. [ 71.488087][ T7842] name failslab, interval 1, probability 5, space 0, times 44 [ 71.488104][ T7842] CPU: 3 UID: 0 PID: 7842 Comm: syz.1.817 Not tainted syzkaller #0 PREEMPT(full) [ 71.488118][ T7842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.488127][ T7842] Call Trace: [ 71.488132][ T7842] [ 71.488137][ T7842] dump_stack_lvl+0x100/0x190 [ 71.488160][ T7842] should_fail_ex.cold+0x5/0xa [ 71.488178][ T7842] should_failslab+0xc2/0x120 [ 71.488195][ T7842] kmem_cache_alloc_noprof+0x92/0x6a0 [ 71.488207][ T7842] ? __pfx_map_id_range_down+0x10/0x10 [ 71.488221][ T7842] ? rcu_is_watching+0x13/0xc0 [ 71.488240][ T7842] ? security_inode_alloc+0x3b/0x2c0 [ 71.488260][ T7842] security_inode_alloc+0x3b/0x2c0 [ 71.488278][ T7842] inode_init_always_gfp+0xc75/0xfb0 [ 71.488295][ T7842] alloc_inode+0x8e/0x250 [ 71.488314][ T7842] sock_alloc+0x42/0x240 [ 71.488328][ T7842] __sock_create+0xc2/0x860 [ 71.488346][ T7842] __sys_socket+0x14d/0x260 [ 71.488362][ T7842] ? __pfx___sys_socket+0x10/0x10 [ 71.488378][ T7842] ? __might_fault+0xc5/0x140 [ 71.488396][ T7842] __ia32_sys_socket+0x72/0xb0 [ 71.488412][ T7842] __do_fast_syscall_32+0x14b/0x8c0 [ 71.488431][ T7842] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.488449][ T7842] do_fast_syscall_32+0x32/0x70 [ 71.488468][ T7842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.488484][ T7842] RIP: 0023:0xf7fb3fbc [ 71.488495][ T7842] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 71.488507][ T7842] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 71.488520][ T7842] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000003 [ 71.488528][ T7842] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000f546653c [ 71.488536][ T7842] RBP: 00000000f54665ec R08: 0000000000000000 R09: 0000000000000000 [ 71.488544][ T7842] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 71.488552][ T7842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.488567][ T7842] [ 71.530144][ T7846] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.814'. [ 71.591109][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 71.831912][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 71.881924][ T7891] FAULT_INJECTION: forcing a failure. [ 71.881924][ T7891] name fail_futex, interval 1, probability 0, space 0, times 0 [ 71.881943][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.1.839 Not tainted syzkaller #0 PREEMPT(full) [ 71.881957][ T7891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.881964][ T7891] Call Trace: [ 71.881969][ T7891] [ 71.881977][ T7891] dump_stack_lvl+0x100/0x190 [ 71.882026][ T7891] should_fail_ex.cold+0x5/0xa [ 71.882046][ T7891] get_futex_key+0x1c9/0x13e0 [ 71.882066][ T7891] ? __pfx_get_futex_key+0x10/0x10 [ 71.882085][ T7891] ? __pfx___smp_call_single_queue+0x10/0x10 [ 71.882110][ T7891] futex_wait_setup+0x91/0x540 [ 71.882137][ T7891] __futex_wait+0x19f/0x360 [ 71.882153][ T7891] ? __pfx___futex_wait+0x10/0x10 [ 71.882164][ T7891] ? __pfx_try_to_wake_up+0x10/0x10 [ 71.882178][ T7891] ? futex_hash+0x311/0x400 [ 71.882225][ T7891] ? __pfx_futex_wake_mark+0x10/0x10 [ 71.882249][ T7891] ? find_held_lock+0x2b/0x80 [ 71.882273][ T7891] ? futex_wake+0x4ea/0x5e0 [ 71.882291][ T7891] futex_wait+0xe6/0x370 [ 71.882304][ T7891] ? __pfx_futex_wait+0x10/0x10 [ 71.882320][ T7891] ? rcu_read_lock_any_held+0x6a/0x90 [ 71.882339][ T7891] ? find_held_lock+0x2b/0x80 [ 71.882358][ T7891] ? ksys_write+0x190/0x250 [ 71.882377][ T7891] ? ksys_write+0x190/0x250 [ 71.882398][ T7891] do_futex+0x265/0x440 [ 71.882446][ T7891] ? __pfx_do_futex+0x10/0x10 [ 71.882468][ T7891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.882490][ T7891] __ia32_sys_futex_time32+0x2f4/0x470 [ 71.882512][ T7891] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 71.882533][ T7891] ? __might_fault+0xc5/0x140 [ 71.882552][ T7891] __do_fast_syscall_32+0x14b/0x8c0 [ 71.882573][ T7891] do_fast_syscall_32+0x32/0x70 [ 71.882593][ T7891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.882609][ T7891] RIP: 0023:0xf7fb3fbc [ 71.882620][ T7891] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 71.882632][ T7891] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 71.882644][ T7891] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 71.882652][ T7891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 71.882659][ T7891] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 71.882667][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.882674][ T7891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.882689][ T7891] [ 71.916195][ T7893] FAULT_INJECTION: forcing a failure. [ 71.916195][ T7893] name failslab, interval 1, probability 5, space 0, times 40 [ 71.916220][ T7893] CPU: 2 UID: 0 PID: 7893 Comm: syz.1.840 Not tainted syzkaller #0 PREEMPT(full) [ 71.916235][ T7893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.916243][ T7893] Call Trace: [ 71.916248][ T7893] [ 71.916253][ T7893] dump_stack_lvl+0x100/0x190 [ 71.916276][ T7893] should_fail_ex.cold+0x5/0xa [ 71.916295][ T7893] should_failslab+0xc2/0x120 [ 71.916312][ T7893] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.916331][ T7893] ? dummy_alloc_request+0xa9/0x1b0 [ 71.916351][ T7893] dummy_alloc_request+0xa9/0x1b0 [ 71.916374][ T7893] usb_ep_alloc_request+0x6e/0x2e0 [ 71.916396][ T7893] gadgetfs_bind+0x457/0x940 [ 71.916430][ T7893] gadget_bind_driver+0x28c/0xbf0 [ 71.916457][ T7893] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 71.916482][ T7893] ? __pfx_gadget_bind_driver+0x10/0x10 [ 71.916507][ T7893] really_probe+0x241/0xa60 [ 71.916528][ T7893] __driver_probe_device+0x210/0x460 [ 71.916547][ T7893] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.916566][ T7893] driver_probe_device+0x4a/0x140 [ 71.916586][ T7893] __driver_attach+0x231/0x5b0 [ 71.916598][ T7893] ? __pfx___driver_attach+0x10/0x10 [ 71.916609][ T7893] bus_for_each_dev+0x13e/0x1d0 [ 71.916625][ T7893] ? __pfx_bus_for_each_dev+0x10/0x10 [ 71.916640][ T7893] ? bus_add_driver+0x306/0x620 [ 71.916661][ T7893] bus_add_driver+0x4bf/0x620 [ 71.916680][ T7893] driver_register+0x1e2/0x360 [ 71.916694][ T7893] usb_gadget_register_driver_owner+0x132/0x210 [ 71.916715][ T7893] dev_config+0xdce/0x1610 [ 71.916730][ T7893] ? ksys_write+0xa0/0x250 [ 71.916743][ T7893] ? __pfx_dev_config+0x10/0x10 [ 71.916761][ T7893] vfs_write+0x2aa/0x1050 [ 71.916775][ T7893] ? __pfx_dev_config+0x10/0x10 [ 71.916788][ T7893] ? lock_acquire+0x1d1/0x380 [ 71.916802][ T7893] ? __fget_files+0x34/0x3d0 [ 71.916816][ T7893] ? __pfx_vfs_write+0x10/0x10 [ 71.916828][ T7893] ? find_held_lock+0x2b/0x80 [ 71.916845][ T7893] ? __fget_files+0x215/0x3d0 [ 71.916862][ T7893] ? __fget_files+0x21f/0x3d0 [ 71.916880][ T7893] ksys_write+0x12a/0x250 [ 71.916893][ T7893] ? __pfx_ksys_write+0x10/0x10 [ 71.916911][ T7893] __do_fast_syscall_32+0x14b/0x8c0 [ 71.916932][ T7893] do_fast_syscall_32+0x32/0x70 [ 71.916951][ T7893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.916966][ T7893] RIP: 0023:0xf7fb3fbc [ 71.916978][ T7893] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 71.916990][ T7893] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 71.917002][ T7893] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 71.917010][ T7893] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.917017][ T7893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.917024][ T7893] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.917031][ T7893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.917046][ T7893] [ 71.917876][ T7893] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 71.917890][ T7893] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 71.919281][ T7893] gadgetfs: bound to dummy_udc driver [ 72.362967][ T7912] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 72.371347][ T7914] FAULT_INJECTION: forcing a failure. [ 72.371347][ T7914] name fail_futex, interval 1, probability 0, space 0, times 0 [ 72.371364][ T7914] CPU: 3 UID: 0 PID: 7914 Comm: syz.3.849 Not tainted syzkaller #0 PREEMPT(full) [ 72.371379][ T7914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.371387][ T7914] Call Trace: [ 72.371392][ T7914] [ 72.371397][ T7914] dump_stack_lvl+0x100/0x190 [ 72.371421][ T7914] should_fail_ex.cold+0x5/0xa [ 72.371441][ T7914] get_futex_key+0x1c9/0x13e0 [ 72.371462][ T7914] ? __pfx_get_futex_key+0x10/0x10 [ 72.371479][ T7914] ? __lock_acquire+0x5c0/0x1f40 [ 72.371492][ T7914] ? _parse_integer_limit+0x1ac/0x220 [ 72.371512][ T7914] futex_wait_setup+0x91/0x540 [ 72.371529][ T7914] __futex_wait+0x19f/0x360 [ 72.371543][ T7914] ? __pfx___futex_wait+0x10/0x10 [ 72.371556][ T7914] ? futex_hash+0x311/0x400 [ 72.371574][ T7914] ? __pfx_futex_wake_mark+0x10/0x10 [ 72.371589][ T7914] ? __pfx_futex_hash+0x10/0x10 [ 72.371604][ T7914] ? __pfx_get_futex_key+0x10/0x10 [ 72.371621][ T7914] ? get_pid_task+0xfc/0x250 [ 72.371637][ T7914] ? get_pid_task+0xfc/0x250 [ 72.371656][ T7914] futex_wait+0xe6/0x370 [ 72.371670][ T7914] ? __pfx_futex_wait+0x10/0x10 [ 72.371682][ T7914] ? find_held_lock+0x2b/0x80 [ 72.371704][ T7914] ? rcu_read_lock_any_held+0x6a/0x90 [ 72.371723][ T7914] ? find_held_lock+0x2b/0x80 [ 72.371740][ T7914] ? ksys_write+0x190/0x250 [ 72.371753][ T7914] ? ksys_write+0x190/0x250 [ 72.371781][ T7914] do_futex+0x265/0x440 [ 72.371803][ T7914] ? __pfx_do_futex+0x10/0x10 [ 72.371824][ T7914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 72.371847][ T7914] __ia32_sys_futex_time32+0x2f4/0x470 [ 72.371871][ T7914] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 72.371897][ T7914] ? __might_fault+0xc5/0x140 [ 72.371918][ T7914] __do_fast_syscall_32+0x14b/0x8c0 [ 72.371941][ T7914] do_fast_syscall_32+0x32/0x70 [ 72.371961][ T7914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.371978][ T7914] RIP: 0023:0xf743efbc [ 72.371990][ T7914] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.372003][ T7914] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 72.372016][ T7914] RAX: ffffffffffffffda RBX: 00000000f7464f88 RCX: 0000000000000080 [ 72.372024][ T7914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 72.372032][ T7914] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 72.372039][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.372047][ T7914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.372062][ T7914] [ 72.543680][ T7928] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.853'. [ 72.547775][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.856'. [ 72.679479][ T7937] FAULT_INJECTION: forcing a failure. [ 72.679479][ T7937] name fail_futex, interval 1, probability 0, space 0, times 0 [ 72.679498][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.2.860 Not tainted syzkaller #0 PREEMPT(full) [ 72.679512][ T7937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.679520][ T7937] Call Trace: [ 72.679524][ T7937] [ 72.679530][ T7937] dump_stack_lvl+0x100/0x190 [ 72.679566][ T7937] should_fail_ex.cold+0x5/0xa [ 72.679585][ T7937] get_futex_key+0x1c9/0x13e0 [ 72.679605][ T7937] ? __pfx_get_futex_key+0x10/0x10 [ 72.679623][ T7937] ? __pfx___smp_call_single_queue+0x10/0x10 [ 72.679641][ T7937] futex_wait_setup+0x91/0x540 [ 72.679658][ T7937] __futex_wait+0x19f/0x360 [ 72.679672][ T7937] ? __pfx___futex_wait+0x10/0x10 [ 72.679684][ T7937] ? __pfx_try_to_wake_up+0x10/0x10 [ 72.679698][ T7937] ? futex_hash+0x311/0x400 [ 72.679716][ T7937] ? __pfx_futex_wake_mark+0x10/0x10 [ 72.679732][ T7937] ? find_held_lock+0x2b/0x80 [ 72.679749][ T7937] ? futex_wake+0x4ea/0x5e0 [ 72.679765][ T7937] futex_wait+0xe6/0x370 [ 72.679778][ T7937] ? __pfx_futex_wait+0x10/0x10 [ 72.679794][ T7937] ? rcu_read_lock_any_held+0x6a/0x90 [ 72.679813][ T7937] ? find_held_lock+0x2b/0x80 [ 72.679830][ T7937] ? ksys_write+0x190/0x250 [ 72.679851][ T7937] ? ksys_write+0x190/0x250 [ 72.679866][ T7937] do_futex+0x265/0x440 [ 72.679886][ T7937] ? __pfx_do_futex+0x10/0x10 [ 72.679906][ T7937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 72.679928][ T7937] __ia32_sys_futex_time32+0x2f4/0x470 [ 72.679964][ T7937] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 72.679985][ T7937] ? __might_fault+0xc5/0x140 [ 72.680006][ T7937] __do_fast_syscall_32+0x14b/0x8c0 [ 72.680027][ T7937] do_fast_syscall_32+0x32/0x70 [ 72.680046][ T7937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.680063][ T7937] RIP: 0023:0xf7f67fbc [ 72.680074][ T7937] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.680086][ T7937] RSP: 002b:00000000f54165bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 72.680098][ T7937] RAX: ffffffffffffffda RBX: 00000000f7424f88 RCX: 0000000000000080 [ 72.680106][ T7937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 72.680114][ T7937] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 72.680122][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.680129][ T7937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.680144][ T7937] [ 72.696618][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.795756][ T5638] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.836971][ T5864] usb 5-1: device descriptor read/64, error -71 [ 72.945743][ T5638] usb 6-1: Using ep0 maxpacket: 32 [ 72.946263][ T5638] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 72.946730][ T5638] usb 6-1: config 0 has no interfaces? [ 72.948827][ T5638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.948850][ T5638] usb 6-1: Product: syz [ 72.948862][ T5638] usb 6-1: Manufacturer: syz [ 72.948876][ T5638] usb 6-1: SerialNumber: syz [ 72.950767][ T5638] usb 6-1: config 0 descriptor?? [ 73.095822][ T5864] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.159268][ T5796] Bluetooth: hci2: status 0x17 [ 73.159299][ T5796] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 73.170703][ T5893] usb 6-1: USB disconnect, device number 4 [ 73.225779][ T5864] usb 5-1: device descriptor read/64, error -71 [ 73.335946][ T5864] usb usb5-port1: attempt power cycle [ 73.379709][ T7949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.866'. [ 73.502572][ T7956] FAULT_INJECTION: forcing a failure. [ 73.502572][ T7956] name fail_futex, interval 1, probability 0, space 0, times 0 [ 73.502599][ T7956] CPU: 2 UID: 0 PID: 7956 Comm: syz.3.869 Not tainted syzkaller #0 PREEMPT(full) [ 73.502622][ T7956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.502634][ T7956] Call Trace: [ 73.502642][ T7956] [ 73.502650][ T7956] dump_stack_lvl+0x100/0x190 [ 73.502699][ T7956] should_fail_ex.cold+0x5/0xa [ 73.502728][ T7956] get_futex_key+0x1c9/0x13e0 [ 73.502759][ T7956] ? __pfx_get_futex_key+0x10/0x10 [ 73.502789][ T7956] ? __pfx___smp_call_single_queue+0x10/0x10 [ 73.502819][ T7956] futex_wait_setup+0x91/0x540 [ 73.502845][ T7956] __futex_wait+0x19f/0x360 [ 73.502868][ T7956] ? __pfx___futex_wait+0x10/0x10 [ 73.502886][ T7956] ? __pfx_try_to_wake_up+0x10/0x10 [ 73.502904][ T7956] ? futex_hash+0x311/0x400 [ 73.502922][ T7956] ? __pfx_futex_wake_mark+0x10/0x10 [ 73.502937][ T7956] ? find_held_lock+0x2b/0x80 [ 73.502955][ T7956] ? futex_wake+0x4ea/0x5e0 [ 73.502971][ T7956] futex_wait+0xe6/0x370 [ 73.502984][ T7956] ? __pfx_futex_wait+0x10/0x10 [ 73.503000][ T7956] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.503019][ T7956] ? find_held_lock+0x2b/0x80 [ 73.503036][ T7956] ? ksys_write+0x190/0x250 [ 73.503050][ T7956] ? ksys_write+0x190/0x250 [ 73.503064][ T7956] do_futex+0x265/0x440 [ 73.503083][ T7956] ? __pfx_do_futex+0x10/0x10 [ 73.503101][ T7956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.503123][ T7956] __ia32_sys_futex_time32+0x2f4/0x470 [ 73.503146][ T7956] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 73.503167][ T7956] ? __might_fault+0xc5/0x140 [ 73.503187][ T7956] __do_fast_syscall_32+0x14b/0x8c0 [ 73.503208][ T7956] do_fast_syscall_32+0x32/0x70 [ 73.503226][ T7956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.503242][ T7956] RIP: 0023:0xf743efbc [ 73.503253][ T7956] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.503265][ T7956] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 73.503278][ T7956] RAX: ffffffffffffffda RBX: 00000000f7464f88 RCX: 0000000000000080 [ 73.503286][ T7956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 73.503294][ T7956] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 73.503301][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.503308][ T7956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.503323][ T7956] [ 73.597352][ T7962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.695961][ T5864] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.716577][ T5864] usb 5-1: device descriptor read/8, error -71 [ 73.852564][ T7979] syzkaller0: entered promiscuous mode [ 73.852578][ T7979] syzkaller0: entered allmulticast mode [ 73.855555][ T7979] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.891931][ T7983] FAULT_INJECTION: forcing a failure. [ 73.891931][ T7983] name fail_futex, interval 1, probability 0, space 0, times 0 [ 73.891960][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT(full) [ 73.891986][ T7983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.891999][ T7983] Call Trace: [ 73.892007][ T7983] [ 73.892017][ T7983] dump_stack_lvl+0x100/0x190 [ 73.892054][ T7983] should_fail_ex.cold+0x5/0xa [ 73.892084][ T7983] get_futex_key+0x1c9/0x13e0 [ 73.892118][ T7983] ? __pfx_get_futex_key+0x10/0x10 [ 73.892153][ T7983] futex_wait_setup+0x91/0x540 [ 73.892183][ T7983] __futex_wait+0x19f/0x360 [ 73.892207][ T7983] ? __pfx___futex_wait+0x10/0x10 [ 73.892227][ T7983] ? __pfx_try_to_wake_up+0x10/0x10 [ 73.892249][ T7983] ? futex_hash+0x311/0x400 [ 73.892279][ T7983] ? __pfx_futex_wake_mark+0x10/0x10 [ 73.892305][ T7983] ? find_held_lock+0x2b/0x80 [ 73.892334][ T7983] ? futex_wake+0x4ea/0x5e0 [ 73.892362][ T7983] futex_wait+0xe6/0x370 [ 73.892384][ T7983] ? __pfx_futex_wait+0x10/0x10 [ 73.892412][ T7983] ? rcu_read_lock_any_held+0x6a/0x90 [ 73.892442][ T7983] ? find_held_lock+0x2b/0x80 [ 73.892470][ T7983] ? ksys_write+0x190/0x250 [ 73.892492][ T7983] ? ksys_write+0x190/0x250 [ 73.892517][ T7983] do_futex+0x265/0x440 [ 73.892547][ T7983] ? __pfx_do_futex+0x10/0x10 [ 73.892579][ T7983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.892614][ T7983] __ia32_sys_futex_time32+0x2f4/0x470 [ 73.892651][ T7983] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 73.892685][ T7983] ? __might_fault+0xc5/0x140 [ 73.892718][ T7983] __do_fast_syscall_32+0x14b/0x8c0 [ 73.892752][ T7983] do_fast_syscall_32+0x32/0x70 [ 73.892783][ T7983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.892810][ T7983] RIP: 0023:0xf7fb3fbc [ 73.892827][ T7983] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 73.892848][ T7983] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 73.892869][ T7983] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 73.892883][ T7983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 73.892895][ T7983] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 73.892907][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.892926][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.892952][ T7983] [ 73.930540][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.883'. [ 73.965997][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 73.986388][ T5864] usb 5-1: device descriptor read/8, error -71 [ 74.106361][ T1165] net_ratelimit: 140 callbacks suppressed [ 74.108601][ T5864] usb usb5-port1: unable to enumerate USB device [ 74.238048][ T8009] device-mapper: ioctl: Invalid target message parameters. [ 74.251354][ T8006] FAULT_INJECTION: forcing a failure. [ 74.251354][ T8006] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.251383][ T8006] CPU: 3 UID: 0 PID: 8006 Comm: syz.3.891 Not tainted syzkaller #0 PREEMPT(full) [ 74.251408][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.251422][ T8006] Call Trace: [ 74.251429][ T8006] [ 74.251438][ T8006] dump_stack_lvl+0x100/0x190 [ 74.251476][ T8006] should_fail_ex.cold+0x5/0xa [ 74.251506][ T8006] get_futex_key+0x1c9/0x13e0 [ 74.251537][ T8006] ? __pfx_get_futex_key+0x10/0x10 [ 74.251565][ T8006] ? __lock_acquire+0x5c0/0x1f40 [ 74.251586][ T8006] ? _parse_integer_limit+0x1ac/0x220 [ 74.251615][ T8006] futex_wait_setup+0x91/0x540 [ 74.251644][ T8006] __futex_wait+0x19f/0x360 [ 74.251669][ T8006] ? __pfx___futex_wait+0x10/0x10 [ 74.251691][ T8006] ? futex_hash+0x311/0x400 [ 74.251721][ T8006] ? __pfx_futex_wake_mark+0x10/0x10 [ 74.251748][ T8006] ? __pfx_futex_hash+0x10/0x10 [ 74.251793][ T8006] ? __pfx_get_futex_key+0x10/0x10 [ 74.251825][ T8006] ? get_pid_task+0xfc/0x250 [ 74.251853][ T8006] ? get_pid_task+0xfc/0x250 [ 74.251880][ T8006] futex_wait+0xe6/0x370 [ 74.251902][ T8006] ? __pfx_futex_wait+0x10/0x10 [ 74.251922][ T8006] ? find_held_lock+0x2b/0x80 [ 74.251958][ T8006] ? rcu_read_lock_any_held+0x6a/0x90 [ 74.251991][ T8006] ? find_held_lock+0x2b/0x80 [ 74.252020][ T8006] ? ksys_write+0x190/0x250 [ 74.252044][ T8006] ? ksys_write+0x190/0x250 [ 74.252071][ T8006] do_futex+0x265/0x440 [ 74.252104][ T8006] ? __pfx_do_futex+0x10/0x10 [ 74.252137][ T8006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.252176][ T8006] __ia32_sys_futex_time32+0x2f4/0x470 [ 74.252216][ T8006] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 74.252253][ T8006] ? __might_fault+0xc5/0x140 [ 74.252298][ T8006] __do_fast_syscall_32+0x14b/0x8c0 [ 74.252339][ T8006] do_fast_syscall_32+0x32/0x70 [ 74.252373][ T8006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.252402][ T8006] RIP: 0023:0xf743efbc [ 74.252421][ T8006] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.252442][ T8006] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 74.252464][ T8006] RAX: ffffffffffffffda RBX: 00000000f7464f88 RCX: 0000000000000080 [ 74.252479][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 74.252492][ T8006] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 74.252505][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.252519][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.252547][ T8006] [ 74.275243][ T8012] syzkaller0: entered promiscuous mode [ 74.275253][ T8012] syzkaller0: entered allmulticast mode [ 74.278658][ T8012] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 74.299174][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.894'. [ 74.480494][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'. [ 74.604156][ T44] kauditd_printk_skb: 195 callbacks suppressed [ 74.604169][ T44] audit: type=1326 audit(1794095405.063:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.604389][ T44] audit: type=1326 audit(1794095405.063:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.605743][ T44] audit: type=1326 audit(1794095405.063:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.605772][ T44] audit: type=1326 audit(1794095405.073:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.605880][ T44] audit: type=1326 audit(1794095405.073:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.606014][ T44] audit: type=1326 audit(1794095405.073:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.606115][ T44] audit: type=1326 audit(1794095405.073:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.606409][ T44] audit: type=1326 audit(1794095405.073:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.606510][ T44] audit: type=1326 audit(1794095405.073:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 74.606622][ T44] audit: type=1326 audit(1794095405.073:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.3.906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 75.165807][ T8080] batadv_slave_0: Caught tx_queue_len zero misconfig [ 75.239656][ T8084] syzkaller0: entered promiscuous mode [ 75.239666][ T8084] syzkaller0: entered allmulticast mode [ 75.241295][ T8084] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 75.335564][ T8086] FAULT_INJECTION: forcing a failure. [ 75.335564][ T8086] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.335594][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.2.928 Not tainted syzkaller #0 PREEMPT(full) [ 75.335630][ T8086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.335641][ T8086] Call Trace: [ 75.335649][ T8086] [ 75.335658][ T8086] dump_stack_lvl+0x100/0x190 [ 75.335694][ T8086] should_fail_ex.cold+0x5/0xa [ 75.335723][ T8086] get_futex_key+0x1c9/0x13e0 [ 75.335755][ T8086] ? __pfx_get_futex_key+0x10/0x10 [ 75.335781][ T8086] ? __pfx___smp_call_single_queue+0x10/0x10 [ 75.335799][ T8086] futex_wait_setup+0x91/0x540 [ 75.335816][ T8086] __futex_wait+0x19f/0x360 [ 75.335830][ T8086] ? __pfx___futex_wait+0x10/0x10 [ 75.335843][ T8086] ? __pfx_try_to_wake_up+0x10/0x10 [ 75.335856][ T8086] ? futex_hash+0x311/0x400 [ 75.335878][ T8086] ? __pfx_futex_wake_mark+0x10/0x10 [ 75.335893][ T8086] ? find_held_lock+0x2b/0x80 [ 75.335910][ T8086] ? futex_wake+0x4ea/0x5e0 [ 75.335927][ T8086] futex_wait+0xe6/0x370 [ 75.335940][ T8086] ? __pfx_futex_wait+0x10/0x10 [ 75.335956][ T8086] ? rcu_read_lock_any_held+0x6a/0x90 [ 75.335976][ T8086] ? find_held_lock+0x2b/0x80 [ 75.335994][ T8086] ? ksys_write+0x190/0x250 [ 75.336008][ T8086] ? ksys_write+0x190/0x250 [ 75.336023][ T8086] do_futex+0x265/0x440 [ 75.336042][ T8086] ? __pfx_do_futex+0x10/0x10 [ 75.336060][ T8086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.336081][ T8086] __ia32_sys_futex_time32+0x2f4/0x470 [ 75.336103][ T8086] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 75.336124][ T8086] ? __might_fault+0xc5/0x140 [ 75.336143][ T8086] __do_fast_syscall_32+0x14b/0x8c0 [ 75.336164][ T8086] do_fast_syscall_32+0x32/0x70 [ 75.336183][ T8086] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.336199][ T8086] RIP: 0023:0xf7f67fbc [ 75.336210][ T8086] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 75.336222][ T8086] RSP: 002b:00000000f54165bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 75.336235][ T8086] RAX: ffffffffffffffda RBX: 00000000f7424f88 RCX: 0000000000000080 [ 75. ** replaying previous printk message ** [ 75.336243][ T8086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 75.336250][ T8086] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 75.336257][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.336264][ T8086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.336279][ T8086] [ 75.339289][ T8086] kcov: kcov_task_exit: t = ffff88806c9c0000, kcov->t = ffff88806c9c0000 [ 75.366613][ T8088] kcov: kcov_start: t = ffff88806dfdcb00, size = 524288, area = ffffc90007bb4000 [ 75.369297][ T8087] 842_decompress: template is 1c [ 75.369309][ T8087] 842_decompress: template is 1b [ 75.369317][ T8087] 842_decompress: template is 1 [ 75.369323][ T8087] 842_decompress: op is 24 [ 75.369330][ T8087] 842_decompress: op is 22 [ 75.369335][ T8087] 842_decompress: op is 12 [ 75.369342][ T8087] 842_decompress: index2 to f off 1e adjoff 1e tot 20 data 0 [ 75.369353][ T8087] 842_decompress: op is 40 [ 75.369359][ T8087] 842_decompress: template is 1c [ 75.369364][ T8087] 842_decompress: template is 1b [ 75.369371][ T8087] 842_decompress: template is 15 [ 75.369377][ T8087] 842_decompress: op is 14 [ 75.369383][ T8087] 842_decompress: index4 to 27 off 9c adjoff 9c tot a0 data 0 [ 75.369394][ T8087] 842_decompress: op is 22 [ 75.369407][ T8087] 842_decompress: op is 12 [ 75.369413][ T8087] 842_decompress: index2 to 11 off 22 adjoff 22 tot a0 data 22f7 [ 75.369423][ T8087] 842_decompress: op is 40 [ 75.369429][ T8087] 842_decompress: template is 18 [ 75.369435][ T8087] 842_decompress: op is 14 [ 75.369441][ T8087] 842_decompress: index4 to 9 off 24 adjoff 24 tot a8 data 36000000 [ 75.369452][ T8087] 842_decompress: op is 14 [ 75.369458][ T8087] 842_decompress: index4 to 28 off a0 adjoff a0 tot a8 data 0 [ 75.369468][ T8087] 842_decompress: op is 40 [ 75.369474][ T8087] 842_decompress: op is 40 [ 75.369480][ T8087] 842_decompress: template is 1c [ 75.369486][ T8087] 842_decompress: template is 1b [ 75.369493][ T8087] 842_decompress: template is 9 [ 75.369498][ T8087] 842_decompress: op is 22 [ 75.369504][ T8087] 842_decompress: op is 12 [ 75.369510][ T8087] 842_decompress: index2 to 53 off a6 adjoff a6 tot 128 data 22f7 [ 75.369521][ T8087] 842_decompress: op is 14 [ 75.369527][ T8087] 842_decompress: index4 to 2a off a8 adjoff a8 tot 128 data 36000000 [ 75.369538][ T8087] 842_decompress: op is 40 [ 75.369544][ T8087] 842_decompress: template is 1c [ 75.369550][ T8087] 842_decompress: template is 1b [ 75.369556][ T8087] 842_decompress: template is 15 [ 75.369562][ T8087] 842_decompress: op is 14 [ 75.369568][ T8087] 842_decompress: index4 to 69 off 1a4 adjoff 1a4 tot 1a8 data 0 [ 75.369579][ T8087] 842_decompress: op is 22 [ 75.369585][ T8087] 842_decompress: op is 12 [ 75.369590][ T8087] 842_decompress: index2 to 95 off 12a adjoff 12a tot 1a8 data 22f7 [ 75.369601][ T8087] 842_decompress: op is 40 [ 75.369607][ T8087] 842_decompress: template is 19 [ 75.369613][ T8087] 842_decompress: op is 18 [ 75.369619][ T8087] 842_decompress: index8 to 15 off a8 adjoff a8 tot 1b0 data 3600000000000000 [ 75.369630][ T8087] 842_decompress: op is 40 [ 75.369636][ T8087] 842_decompress: op is 40 [ 75.369642][ T8087] 842_decompress: op is 40 [ 75.369647][ T8087] 842_decompress: template is 1c [ 75.369653][ T8087] 842_decompress: template is 1b [ 75.369660][ T8087] 842_decompress: template is 9 [ 75.369666][ T8087] 842_decompress: op is 22 [ 75.369672][ T8087] 842_decompress: op is 12 [ 75.369677][ T8087] 842_decompress: index2 to d7 off 1ae adjoff 1ae tot 230 data 22f7 [ 75.369688][ T8087] 842_decompress: op is 14 [ 75.369694][ T8087] 842_decompress: index4 to 6c off 1b0 adjoff 1b0 tot 230 data 36000000 [ 75.369705][ T8087] 842_decompress: op is 40 [ 75.369711][ T8087] 842_decompress: template is 1c [ 75.369717][ T8087] 842_decompress: template is 1b [ 75.369723][ T8087] 842_decompress: template is 15 [ 75.369729][ T8087] 842_decompress: op is 14 [ 75.369735][ T8087] 842_decompress: index4 to ab off 2ac adjoff 2ac tot 2b0 data 0 [ 75.369746][ T8087] 842_decompress: op is 22 [ 75.369751][ T8087] 842_decompress: op is 12 [ 75.369757][ T8087] 842_decompress: index2 to 19 off 32 adjoff 232 tot 2b0 data 22f7 [ 75.369768][ T8087] 842_decompress: op is 40 [ 75.369774][ T8087] 842_decompress: template is 19 [ 75.369780][ T8087] 842_decompress: op is 18 [ 75.369786][ T8087] 842_decompress: index8 to 36 off 1b0 adjoff 1b0 tot 2b8 data 3600000000000000 [ 75.369797][ T8087] 842_decompress: op is 40 [ 75.369803][ T8087] 842_decompress: op is 40 [ 75.369808][ T8087] 842_decompress: op is 40 [ 75.369814][ T8087] 842_decompress: template is 1c [ 75.369820][ T8087] 842_decompress: template is 1b [ 75.369826][ T8087] 842_decompress: template is 9 [ 75.369832][ T8087] 842_decompress: op is 22 [ 75.369838][ T8087] 842_decompress: op is 12 [ 75.369844][ T8087] 842_decompress: index2 to 5b off b6 adjoff 2b6 tot 338 data 22f7 [ 75.369855][ T8087] 842_decompress: op is 14 [ 75.369861][ T8087] 842_decompress: index4 to ae off 2b8 adjoff 2b8 tot 338 data 36000000 [ 75.369872][ T8087] 842_decompress: op is 40 [ 75.369877][ T8087] 842_decompress: template is 1c [ 75.369883][ T8087] 842_decompress: template is 1b [ 75.369890][ T8087] 842_decompress: template is 15 [ 75.369896][ T8087] 842_decompress: op is 14 [ 75.369902][ T8087] 842_decompress: index4 to ed off 3b4 adjoff 3b4 tot 3b8 data 0 [ 75.369912][ T8087] 842_decompress: op is 22 [ 75.369918][ T8087] 842_decompress: op is 12 [ 75.369924][ T8087] 842_decompress: index2 to 9d off 13a adjoff 33a tot 3b8 data 22f7 [ 75.369935][ T8087] 842_decompress: op is 40 [ 75.369941][ T8087] 842_decompress: template is 19 [ 75.369947][ T8087] 842_decompress: op is 18 [ 75.369952][ T8087] 842_decompress: index8 to 57 off 2b8 adjoff 2b8 tot 3c0 data 3600000000000000 [ 75.369964][ T8087] 842_decompress: op is 40 [ 75.369969][ T8087] 842_decompress: op is 40 [ 75.369975][ T8087] 842_decompress: op is 40 [ 75.369981][ T8087] 842_decompress: template is 1c [ 75.369987][ T8087] 842_decompress: template is 1b [ 75.369993][ T8087] 842_decompress: template is 9 [ 75.370034][ T8087] 842_decompress: op is 22 [ 75.370042][ T8087] 842_decompress: op is 12 [ 75.370048][ T8087] 842_decompress: index2 to df off 1be adjoff 3be tot 440 data 22f7 [ 75.370059][ T8087] 842_decompress: op is 14 [ 75.370065][ T8087] 842_decompress: index4 to f0 off 3c0 adjoff 3c0 tot 440 data 36000000 [ 75.370076][ T8087] 842_decompress: op is 40 [ 75.370082][ T8087] 842_decompress: template is 1c [ 75.370088][ T8087] 842_decompress: template is 1b [ 75.370095][ T8087] 842_decompress: template is 15 [ 75.370101][ T8087] 842_decompress: op is 14 [ 75.370106][ T8087] 842_decompress: index4 to 12f off 4bc adjoff 4bc tot 4c0 data 0 [ 75.370117][ T8087] 842_decompress: op is 22 [ 75.370123][ T8087] 842_decompress: op is 12 [ 75.370128][ T8087] 842_decompress: index2 to 21 off 42 adjoff 442 tot 4c0 data 22f7 [ 75.370140][ T8087] 842_decompress: op is 40 [ 75.370145][ T8087] 842_decompress: template is 19 [ 75.370151][ T8087] 842_decompress: op is 18 [ 75.370157][ T8087] 842_decompress: index8 to 78 off 3c0 adjoff 3c0 tot 4c8 data 3600000000000000 [ 75.370189][ T8087] 842_decompress: op is 40 [ 75.370196][ T8087] 842_decompress: op is 40 [ 75.370202][ T8087] 842_decompress: op is 40 [ 75.370208][ T8087] 842_decompress: template is 1c [ 75.370214][ T8087] 842_decompress: template is 1b [ 75.370220][ T8087] 842_decompress: template is 9 [ 75.370226][ T8087] 842_decompress: op is 22 [ 75.370232][ T8087] 842_decompress: op is 12 [ 75.370238][ T8087] 842_decompress: index2 to 63 off c6 adjoff 4c6 tot 548 data 22f7 [ 75.370249][ T8087] 842_decompress: op is 14 [ 75.370255][ T8087] 842_decompress: index4 to 132 off 4c8 adjoff 4c8 tot 548 data 36000000 [ 75.370266][ T8087] 842_decompress: op is 40 [ 75.370272][ T8087] 842_decompress: template is 1c [ 75.370278][ T8087] 842_decompress: template is 1b [ 75.370284][ T8087] 842_decompress: template is 15 [ 75.370290][ T8087] 842_decompress: op is 14 [ 75.370296][ T8087] 842_decompress: index4 to 171 off 5c4 adjoff 5c4 tot 5c8 data 0 [ 75.370307][ T8087] 842_decompress: op is 22 [ 75.370313][ T8087] 842_decompress: op is 12 [ 75.370318][ T8087] 842_decompress: index2 to a5 off 14a adjoff 54a tot 5c8 data 22f7 [ 75.370329][ T8087] 842_decompress: op is 40 [ 75.370335][ T8087] 842_decompress: template is 19 [ 75.370341][ T8087] 842_decompress: op is 18 [ 75.370347][ T8087] 842_decompress: index8 to 99 off 4c8 adjoff 4c8 tot 5d0 data 3600000000000000 [ 75.370358][ T8087] 842_decompress: op is 40 [ 75.370364][ T8087] 842_decompress: op is 40 [ 75.370370][ T8087] 842_decompress: op is 40 [ 75.370375][ T8087] 842_decompress: template is 1c [ 75.370381][ T8087] 842_decompress: template is 1b [ 75.370388][ T8087] 842_decompress: template is 9 [ 75.370394][ T8087] 842_decompress: op is 22 [ 75.370403][ T8087] 842_decompress: op is 12 [ 75.370409][ T8087] 842_decompress: index2 to e7 off 1ce adjoff 5ce tot 650 data 22f7 [ 75.370420][ T8087] 842_decompress: op is 14 [ 75.370426][ T8087] 842_decompress: index4 to 174 off 5d0 adjoff 5d0 tot 650 data 36000000 [ 75.370437][ T8087] 842_decompress: op is 40 [ 75.370443][ T8087] 842_decompress: template is 1c [ 75.370449][ T8087] 842_decompress: template is 1b [ 75.370456][ T8087] 842_decompress: template is 15 [ 75.370461][ T8087] 842_decompress: op is 14 [ 75.370467][ T8087] 842_decompress: index4 to 1b3 off 6cc adjoff 6cc tot 6d0 data 0 [ 75.370478][ T8087] 842_decompress: op is 22 [ 75.370484][ T8087] 842_decompress: op is 12 [ 75.370490][ T8087] 842_decompress: index2 to 29 off 52 adjoff 652 tot 6d0 data 22f7 [ 75.370501][ T8087] 842_decompress: op is 40 [ 75.370506][ T8087] 842_decompress: template is 19 [ 75.370512][ T8087] 842_decompress: op is 18 [ 75.370518][ T8087] 842_decompress: index8 to ba off 5d0 adjoff 5d0 tot 6d8 data 3600000000000000 [ 75.370530][ T8087] 842_decompress: op is 40 [ 75.370535][ T8087] 842_decompress: op is 40 [ 75.370541][ T8087] 842_decompress: op is 40 [ 75.370547][ T8087] 842_decompress: template is 1c [ 75.370553][ T8087] 842_decompress: template is 1b [ 75.370559][ T8087] 842_decompress: template is 9 [ 75.370565][ T8087] 842_decompress: op is 22 [ 75.370571][ T8087] 842_decompress: op is 12 [ 75.370577][ T8087] 842_decompress: index2 to 6b off d6 adjoff 6d6 tot 758 data 22f7 [ 75.370587][ T8087] 842_decompress: op is 14 [ 75.370593][ T8087] 842_decompress: index4 to 1b6 off 6d8 adjoff 6d8 tot 758 data 36000000 [ 75.370604][ T8087] 842_decompress: op is 40 [ 75.370610][ T8087] 842_decompress: template is 1c [ 75.370616][ T8087] 842_decompress: template is 1b [ 75.370623][ T8087] 842_decompress: template is 15 [ 75.370629][ T8087] 842_decompress: op is 14 [ 75.370634][ T8087] 842_decompress: index4 to 1f5 off 7d4 adjoff 7d4 tot 7d8 data 0 [ 75.370645][ T8087] 842_decompress: op is 22 [ 75.370651][ T8087] 842_decompress: op is 12 [ 75.370657][ T8087] 842_decompress: index2 to ad off 15a adjoff 75a tot 7d8 data 22f7 [ 75.370668][ T8087] 842_decompress: op is 40 [ 75.370674][ T8087] 842_decompress: template is 19 [ 75.370680][ T8087] 842_decompress: op is 18 [ 75.370686][ T8087] 842_decompress: index8 to db off 6d8 adjoff 6d8 tot 7e0 data 3600000000000000 [ 75.370697][ T8087] 842_decompress: op is 40 [ 75.370703][ T8087] 842_decompress: op is 40 [ 75.370709][ T8087] 842_decompress: op is 40 [ 75.370715][ T8087] 842_decompress: template is 1c [ 75.370720][ T8087] 842_decompress: template is 1b [ 75.370727][ T8087] 842_decompress: template is 9 [ 75.370733][ T8087] 842_decompress: op is 22 [ 75.370739][ T8087] 842_decompress: op is 12 [ 75.370744][ T8087] 842_decompress: index2 to ef off 1de adjoff 7de tot 860 data 22f7 [ 75.370755][ T8087] 842_decompress: op is 14 [ 75.370761][ T8087] 842_decompress: index4 to 1f8 off 7e0 adjoff 7e0 tot 860 data 36000000 [ 75.370772][ T8087] 842_decompress: op is 40 [ 75.370778][ T8087] 842_decompress: template is 1c [ 75.370784][ T8087] 842_decompress: template is 1b [ 75.370791][ T8087] 842_decompress: template is 15 [ 75.370797][ T8087] 842_decompress: op is 14 [ 75.370803][ T8087] 842_decompress: index4 to 37 off dc adjoff 8dc tot 8e0 data 0 [ 75.370813][ T8087] 842_decompress: op is 22 [ 75.370819][ T8087] 842_decompress: op is 12 [ 75.370825][ T8087] 842_decompress: index2 to 31 off 62 adjoff 862 tot 8e0 data 22f7 [ 75.370836][ T8087] 842_decompress: op is 40 [ 75.370842][ T8087] 842_decompress: template is 19 [ 75.370847][ T8087] 842_decompress: op is 18 [ 75.370853][ T8087] 842_decompress: index8 to fc off 7e0 adjoff 7e0 tot 8e8 data 3600000000000000 [ 75.370865][ T8087] 842_decompress: op is 40 [ 75.370871][ T8087] 842_decompress: op is 40 [ 75.370876][ T8087] 842_decompress: op is 40 [ 75.370882][ T8087] 842_decompress: template is 1c [ 75.370888][ T8087] 842_decompress: template is 1b [ 75.370895][ T8087] 842_decompress: template is 9 [ 75.370900][ T8087] 842_decompress: op is 22 [ 75.370906][ T8087] 842_decompress: op is 12 [ 75.370912][ T8087] 842_decompress: index2 to 73 off e6 adjoff 8e6 tot 968 data 22f7 [ 75.370923][ T8087] 842_decompress: op is 14 [ 75.370929][ T8087] 842_decompress: index4 to 3a off e8 adjoff 8e8 tot 968 data 36000000 [ 75.370940][ T8087] 842_decompress: op is 40 [ 75.370946][ T8087] 842_decompress: template is 1c [ 75.370952][ T8087] 842_decompress: template is 1b [ 75.370959][ T8087] 842_decompress: template is 15 [ 75.370965][ T8087] 842_decompress: op is 14 [ 75.370971][ T8087] 842_decompress: index4 to 79 off 1e4 adjoff 9e4 tot 9e8 data 0 [ 75.370981][ T8087] 842_decompress: op is 22 [ 75.370987][ T8087] 842_decompress: op is 12 [ 75.370993][ T8087] 842_decompress: index2 to b5 off 16a adjoff 96a tot 9e8 data 22f7 [ 75.371005][ T8087] 842_decompress: op is 40 [ 75.371010][ T8087] 842_decompress: template is 19 [ 75.371016][ T8087] 842_decompress: op is 18 [ 75.371022][ T8087] 842_decompress: index8 to 1d off e8 adjoff 8e8 tot 9f0 data 3600000000000000 [ 75.371034][ T8087] 842_decompress: op is 40 [ 75.371039][ T8087] 842_decompress: op is 40 [ 75.371045][ T8087] 842_decompress: op is 40 [ 75.371051][ T8087] 842_decompress: template is 1c [ 75.371057][ T8087] 842_decompress: template is 1b [ 75.371064][ T8087] 842_decompress: template is 9 [ 75.371070][ T8087] 842_decompress: op is 22 [ 75.371075][ T8087] 842_decompress: op is 12 [ 75.371081][ T8087] 842_decompress: index2 to f7 off 1ee adjoff 9ee tot a70 data 22f7 [ 75.371092][ T8087] 842_decompress: op is 14 [ 75.371098][ T8087] 842_decompress: index4 to 7c off 1f0 adjoff 9f0 tot a70 data 36000000 [ 75.371109][ T8087] 842_decompress: op is 40 [ 75.371115][ T8087] 842_decompress: template is 1c [ 75.371121][ T8087] 842_decompress: template is 1b [ 75.371128][ T8087] 842_decompress: template is 15 [ 75.371146][ T8087] 842_decompress: op is 14 [ 75.371151][ T8087] 842_decompress: index4 to bb off 2ec adjoff aec tot af0 data 0 [ 75.371162][ T8087] 842_decompress: op is 22 [ 75.371168][ T8087] 842_decompress: op is 12 [ 75.371174][ T8087] 842_decompress: index2 to 39 off 72 adjoff a72 tot af0 data 22f7 [ 75.371185][ T8087] 842_decompress: op is 40 [ 75.371191][ T8087] 842_decompress: template is 19 [ 75.371197][ T8087] 842_decompress: op is 18 [ 75.371203][ T8087] 842_decompress: index8 to 3e off 1f0 adjoff 9f0 tot af8 data 3600000000000000 [ 75.371214][ T8087] 842_decompress: op is 40 [ 75.371220][ T8087] 842_decompress: op is 40 [ 75.371226][ T8087] 842_decompress: op is 40 [ 75.371232][ T8087] 842_decompress: template is 1c [ 75.371238][ T8087] 842_decompress: template is 1b [ 75.371245][ T8087] 842_decompress: template is 9 [ 75.371251][ T8087] 842_decompress: op is 22 [ 75.371256][ T8087] 842_decompress: op is 12 [ 75.371262][ T8087] 842_decompress: index2 to 7b off f6 adjoff af6 tot b78 data 22f7 [ 75.371273][ T8087] 842_decompress: op is 14 [ 75.371279][ T8087] 842_decompress: index4 to be off 2f8 adjoff af8 tot b78 data 36000000 [ 75.371327][ T8087] 842_decompress: op is 40 [ 75.371335][ T8087] 842_decompress: template is 1c [ 75.371341][ T8087] 842_decompress: template is 1b [ 75.371348][ T8087] 842_decompress: template is 15 [ 75.371354][ T8087] 842_decompress: op is 14 [ 75.371360][ T8087] 842_decompress: index4 to fd off 3f4 adjoff bf4 tot bf8 data 0 [ 75.371371][ T8087] 842_decompress: op is 22 [ 75.371377][ T8087] 842_decompress: op is 12 [ 75.371383][ T8087] 842_decompress: index2 to bd off 17a adjoff b7a tot bf8 data 22f7 [ 75.371393][ T8087] 842_decompress: op is 40 [ 75.371403][ T8087] 842_decompress: template is 19 [ 75.371409][ T8087] 842_decompress: op is 18 [ 75.371415][ T8087] 842_decompress: index8 to 5f off 2f8 adjoff af8 tot c00 data 3600000000000000 [ 75.371426][ T8087] 842_decompress: op is 40 [ 75.371432][ T8087] 842_decompress: op is 40 [ 75.371437][ T8087] 842_decompress: op is 40 [ 75.371443][ T8087] 842_decompress: template is 1c [ 75.371449][ T8087] 842_decompress: template is 1b [ 75.371456][ T8087] 842_decompress: template is 9 [ 75.371462][ T8087] 842_decompress: op is 22 [ 75.371468][ T8087] 842_decompress: op is 12 [ 75.371473][ T8087] 842_decompress: index2 to ff off 1fe adjoff bfe tot c80 data 22f7 [ 75.371484][ T8087] 842_decompress: op is 14 [ 75.371490][ T8087] 842_decompress: index4 to 100 off 400 adjoff c00 tot c80 data 36000000 [ 75.371501][ T8087] 842_decompress: op is 40 [ 75.371507][ T8087] 842_decompress: template is 1c [ 75.371513][ T8087] 842_decompress: template is 1b [ 75.371520][ T8087] 842_decompress: template is 15 [ 75.371526][ T8087] 842_decompress: op is 14 [ 75.371532][ T8087] 842_decompress: index4 to 13f off 4fc adjoff cfc tot d00 data 0 [ 75.371543][ T8087] 842_decompress: op is 22 [ 75.371549][ T8087] 842_decompress: op is 12 [ 75.371555][ T8087] 842_decompress: index2 to 41 off 82 adjoff c82 tot d00 data 22f7 [ 75.371566][ T8087] 842_decompress: op is 40 [ 75.371572][ T8087] 842_decompress: template is 19 [ 75.371578][ T8087] 842_decompress: op is 18 [ 75.371584][ T8087] 842_decompress: index8 to 80 off 400 adjoff c00 tot d08 data 3600000000000000 [ 75.371595][ T8087] 842_decompress: op is 40 [ 75.371601][ T8087] 842_decompress: op is 40 [ 75.371607][ T8087] 842_decompress: op is 40 [ 75.371612][ T8087] 842_decompress: template is 1c [ 75.371618][ T8087] 842_decompress: template is 1b [ 75.371625][ T8087] 842_decompress: template is 9 [ 75.371631][ T8087] 842_decompress: op is 22 [ 75.371637][ T8087] 842_decompress: op is 12 [ 75.371643][ T8087] 842_decompress: index2 to 83 off 106 adjoff d06 tot d88 data 22f7 [ 75.371654][ T8087] 842_decompress: op is 14 [ 75.371660][ T8087] 842_decompress: index4 to 142 off 508 adjoff d08 tot d88 data 36000000 [ 75.371671][ T8087] 842_decompress: op is 40 [ 75.371677][ T8087] 842_decompress: template is 1c [ 75.371683][ T8087] 842_decompress: template is 1b [ 75.371690][ T8087] 842_decompress: template is 15 [ 75.371696][ T8087] 842_decompress: op is 14 [ 75.371702][ T8087] 842_decompress: index4 to 181 off 604 adjoff e04 tot e08 data 0 [ 75.371713][ T8087] 842_decompress: op is 22 [ 75.371719][ T8087] 842_decompress: op is 12 [ 75.371724][ T8087] 842_decompress: index2 to c5 off 18a adjoff d8a tot e08 data 22f7 [ 75.371736][ T8087] 842_decompress: op is 40 [ 75.371741][ T8087] 842_decompress: template is 19 [ 75.371747][ T8087] 842_decompress: op is 18 [ 75.371753][ T8087] 842_decompress: index8 to a1 off 508 adjoff d08 tot e10 data 3600000000000000 [ 75.371765][ T8087] 842_decompress: op is 40 [ 75.371771][ T8087] 842_decompress: op is 40 [ 75.371776][ T8087] 842_decompress: op is 40 [ 75.371782][ T8087] 842_decompress: template is 1c [ 75.371788][ T8087] 842_decompress: template is 1b [ 75.371795][ T8087] 842_decompress: template is 9 [ 75.371801][ T8087] 842_decompress: op is 22 [ 75.371807][ T8087] 842_decompress: op is 12 [ 75.371813][ T8087] 842_decompress: index2 to 7 off e adjoff e0e tot e90 data 22f7 [ 75.371824][ T8087] 842_decompress: op is 14 [ 75.371830][ T8087] 842_decompress: index4 to 184 off 610 adjoff e10 tot e90 data 36000000 [ 75.371841][ T8087] 842_decompress: op is 40 [ 75.371847][ T8087] 842_decompress: template is 1c [ 75.371853][ T8087] 842_decompress: template is 1b [ 75.371860][ T8087] 842_decompress: template is 15 [ 75.371866][ T8087] 842_decompress: op is 14 [ 75.371872][ T8087] 842_decompress: index4 to 1c3 off 70c adjoff f0c tot f10 data 0 [ 75.371883][ T8087] 842_decompress: op is 22 [ 75.371888][ T8087] 842_decompress: op is 12 [ 75.371894][ T8087] 842_decompress: index2 to 49 off 92 adjoff e92 tot f10 data 22f7 [ 75.371905][ T8087] 842_decompress: op is 40 [ 75.371911][ T8087] 842_decompress: template is 19 [ 75.371917][ T8087] 842_decompress: op is 18 [ 75.371923][ T8087] 842_decompress: index8 to c2 off 610 adjoff e10 tot f18 data 3600000000000000 [ 75.371934][ T8087] 842_decompress: op is 40 [ 75.371940][ T8087] 842_decompress: op is 40 [ 75.371946][ T8087] 842_decompress: op is 40 [ 75.371952][ T8087] 842_decompress: template is 1c [ 75.371958][ T8087] 842_decompress: template is 1b [ 75.371964][ T8087] 842_decompress: template is 9 [ 75.371970][ T8087] 842_decompress: op is 22 [ 75.371976][ T8087] 842_decompress: op is 12 [ 75.371982][ T8087] 842_decompress: index2 to 8b off 116 adjoff f16 tot f98 data 22f7 [ 75.371993][ T8087] 842_decompress: op is 14 [ 75.371999][ T8087] 842_decompress: index4 to 1c6 off 718 adjoff f18 tot f98 data 36000000 [ 75.372010][ T8087] 842_decompress: op is 40 [ 75.372016][ T8087] 842_decompress: template is 1c [ 75.372022][ T8087] 842_decompress: template is 1b [ 75.372029][ T8087] 842_decompress: template is 1e [ 75.373122][ T8088] kcov: kcov_task_exit: t = ffff88806dfdcb00, kcov->t = ffff88806dfdcb00 [ 75.395759][ C0] Dropped {multi|broad}cast of type=[86dd] [ 75.395895][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 75.398014][ T8090] kcov: kcov_start: t = ffff88806dfda580, size = 524288, area = ffffc90007bb4000 [ 75.401873][ T8090] kernfs remove: removing [ 75.401899][ T8090] pcieport 0000:00:04.0: PME# disabled [ 75.401915][ T8090] kernfs 0000:00:04.0: removing [ 75.401947][ T8090] kernfs driver: removing [ 75.401974][ T8090] pcieport 0000:00:04.0: vgaarb: pci_notify [ 75.401992][ T8090] device: '0000:00:04.0:pcie001': device_unregister [ 75.402045][ T8090] kernfs power: removing [ 75.402078][ T8090] kernfs uevent: removing [ 75.402125][ T8090] kernfs subsystem: removing [ 75.402155][ T8090] kernfs 0000:00:04.0:pcie001: removing [ 75.402202][ T8090] bus: 'pci_express': remove device 0000:00:04.0:pcie001 [ 75.402219][ T8090] kernfs 0000:00:04.0:pcie001: removing [ 75.402250][ T8090] kernfs driver: removing [ 75.403070][ T8090] kobject: '0000:00:04.0:pcie001' (ffff888025651020): kobject_uevent_env [ 75.403109][ T8090] kobject: '0000:00:04.0:pcie001' (ffff888025651020): fill_kobj_path: path = '/devices/pci0000:00/0000:00:04.0/0000:00:04.0:pcie001' [ 75.403234][ T8090] PM: Removing info for pci_express:0000:00:04.0:pcie001 [ 75.403251][ T8090] kobject: '0000:00:04.0:pcie001' (ffff888025651020): kobject_uevent_env [ 75.403282][ T8090] kobject: '0000:00:04.0:pcie001' (ffff888025651020): fill_kobj_path: path = '/devices/pci0000:00/0000:00:04.0/0000:00:04.0:pcie001' [ 75.403379][ T8090] kernfs 0000:00:04.0:pcie001: removing [ 75.403505][ T8090] kobject: '0000:00:04.0:pcie001' (ffff888025651020): kobject_cleanup, parent 0000000000000000 [ 75.403519][ T8090] kobject: '0000:00:04.0:pcie001' (ffff888025651020): calling ktype release [ 75.403550][ T8090] kobject: '0000:00:04.0:pcie001': free name [ 75.403567][ T8090] device: '0000:00:04.0:pcie002': device_unregister [ 75.403619][ T8090] kernfs power: removing [ 75.403652][ T8090] kernfs uevent: removing [ 75.403686][ T8090] kernfs subsystem: removing [ 75.403721][ T8090] kernfs 0000:00:04.0:pcie002: removing [ 75.403750][ T8090] bus: 'pci_express': remove device 0000:00:04.0:pcie002 [ 75.403766][ T8090] kernfs 0000:00:04.0:pcie002: removing [ 75.403796][ T8090] kernfs driver: removing [ 75.405456][ T8090] kobject: '0000:00:04.0:pcie002' (ffff888025650020): kobject_uevent_env [ 75.405490][ T8090] kobject: '0000:00:04.0:pcie002' (ffff888025650020): fill_kobj_path: path = '/devices/pci0000:00/0000:00:04.0/0000:00:04.0:pcie002' [ 75.405960][ T8090] PM: Removing info for pci_express:0000:00:04.0:pcie002 [ 75.405978][ T8090] kobject: '0000:00:04.0:pcie002' (ffff888025650020): kobject_uevent_env [ 75.406005][ T8090] kobject: '0000:00:04.0:pcie002' (ffff888025650020): fill_kobj_path: path = '/devices/pci0000:00/0000:00:04.0/0000:00:04.0:pcie002' [ 75.406090][ T8090] kernfs 0000:00:04.0:pcie002: removing [ 75.406110][ T8090] kobject: '0000:00:04.0:pcie002' (ffff888025650020): kobject_cleanup, parent 0000000000000000 [ 75.406122][ T8090] kobject: '0000:00:04.0:pcie002' (ffff888025650020): calling ktype release [ 75.406149][ T8090] kobject: '0000:00:04.0:pcie002': free name [ 75.407713][ T8090] kernfs per_cpu_count: removing [ 75.407799][ T8090] kernfs chip_name: removing [ 75.407831][ T8090] kernfs hwirq: removing [ 75.407861][ T8090] kernfs type: removing [ 75.407890][ T8090] kernfs wakeup: removing [ 75.407920][ T8090] kernfs name: removing [ 75.408082][ T8090] kernfs actions: removing [ 75.408119][ T8090] kernfs 25: removing [ 75.408415][ T8090] kernfs per_cpu_count: removing [ 75.408448][ T8090] kernfs chip_name: removing [ 75.408480][ T8090] kernfs hwirq: removing [ 75.408510][ T8090] kernfs type: removing [ 75.408540][ T8090] kernfs wakeup: removing [ 75.408568][ T8090] kernfs name: removing [ 75.408598][ T8090] kernfs actions: removing [ 75.408627][ T8090] kernfs 26: removing [ 75.408722][ T8090] kernfs 25: removing [ 75.408800][ T8090] kernfs 26: removing [ 75.410946][ T8090] ================================================================== [ 75.410955][ T8090] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 75.410976][ T8090] Read of size 1 at addr ffff888021f9c480 by task syz.2.930/8090 [ 75.410987][ T8090] [ 75.410994][ T8090] CPU: 1 UID: 0 PID: 8090 Comm: syz.2.930 Not tainted syzkaller #0 PREEMPT(full) [ 75.411009][ T8090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.411017][ T8090] Call Trace: [ 75.411022][ T8090] [ 75.411027][ T8090] dump_stack_lvl+0x100/0x190 [ 75.411048][ T8090] print_report+0x13d/0x4b0 [ 75.411067][ T8090] ? __virt_addr_valid+0x239/0x430 [ 75.411080][ T8090] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 75.411097][ T8090] kasan_report+0xdf/0x1c0 [ 75.411112][ T8090] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 75.411129][ T8090] acpi_ns_get_attached_object+0x148/0x1b0 [ 75.411145][ T8090] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 75.411161][ T8090] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 75.411174][ T8090] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 75.411190][ T8090] ? acpi_ds_create_operand+0x267/0xc20 [ 75.411209][ T8090] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 75.411225][ T8090] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 75.411240][ T8090] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 75.411251][ T8090] ? __asan_memset+0x23/0x50 [ 75.411270][ T8090] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 75.411284][ T8090] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 75.411303][ T8090] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 75.411322][ T8090] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 75.411341][ T8090] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 75.411354][ T8090] acpi_ds_exec_end_op+0xb78/0x1e60 [ 75.411373][ T8090] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 75.411392][ T8090] acpi_ps_parse_loop+0x5e1/0x26e0 [ 75.411421][ T8090] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 75.411440][ T8090] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 75.411453][ T8090] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 75.411466][ T8090] ? acpi_ut_create_thread_state+0x6d/0x170 [ 75.411489][ T8090] acpi_ps_parse_aml+0x81e/0x1120 [ 75.411504][ T8090] acpi_ps_execute_method+0x5c4/0xe90 [ 75.411520][ T8090] acpi_ns_evaluate+0x640/0x1670 [ 75.411537][ T8090] acpi_ut_evaluate_object+0xf7/0x610 [ 75.411553][ T8090] acpi_rs_get_prt_method_data+0xa0/0x150 [ 75.411569][ T8090] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 75.411584][ T8090] ? acpi_ut_status_exit+0x111/0x1c0 [ 75.411597][ T8090] ? acpi_rs_validate_parameters+0x104/0x210 [ 75.411613][ T8090] acpi_get_irq_routing_table+0xb8/0x140 [ 75.411628][ T8090] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 75.411644][ T8090] ? do_raw_spin_lock+0x128/0x260 [ 75.411660][ T8090] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 75.411676][ T8090] ? do_raw_spin_lock+0x128/0x260 [ 75.411691][ T8090] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 75.411707][ T8090] ? mark_held_locks+0x40/0x70 [ 75.411719][ T8090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.411736][ T8090] acpi_pci_irq_lookup+0x8e/0x6b0 [ 75.411751][ T8090] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 75.411767][ T8090] acpi_pci_irq_disable+0x1a8/0x360 [ 75.411782][ T8090] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 75.411796][ T8090] pcibios_disable_device+0x89/0xb0 [ 75.411812][ T8090] do_pci_disable_device+0x9f/0x100 [ 75.411826][ T8090] ? __pfx_do_pci_disable_device+0x10/0x10 [ 75.411842][ T8090] pci_disable_device+0x130/0x270 [ 75.411856][ T8090] pci_device_remove+0xb2/0x1d0 [ 75.411875][ T8090] ? __pfx_pci_device_remove+0x10/0x10 [ 75.411894][ T8090] device_remove+0xcb/0x180 [ 75.411912][ T8090] device_release_driver_internal+0x441/0x610 [ 75.411926][ T8090] pci_stop_bus_device+0x120/0x160 [ 75.411939][ T8090] pci_stop_and_remove_bus_device+0x58/0xa0 [ 75.411953][ T8090] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 75.411967][ T8090] remove_store+0x123/0x140 [ 75.411982][ T8090] ? __pfx_remove_store+0x10/0x10 [ 75.411997][ T8090] ? find_held_lock+0x2b/0x80 [ 75.412013][ T8090] ? sysfs_file_kobj+0xe4/0x290 [ 75.412029][ T8090] ? sysfs_file_kobj+0xe4/0x290 [ 75.412044][ T8090] ? __pfx_remove_store+0x10/0x10 [ 75.412059][ T8090] dev_attr_store+0x58/0x80 [ 75.412071][ T8090] ? __pfx_dev_attr_store+0x10/0x10 [ 75.412083][ T8090] sysfs_kf_write+0xf2/0x150 [ 75.412098][ T8090] kernfs_fop_write_iter+0x3e0/0x5f0 [ 75.412112][ T8090] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.412128][ T8090] vfs_write+0x6af/0x1050 [ 75.412142][ T8090] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 75.412156][ T8090] ? __pfx_vfs_write+0x10/0x10 [ 75.412168][ T8090] ? find_held_lock+0x2b/0x80 [ 75.412187][ T8090] ksys_write+0x12a/0x250 [ 75.412199][ T8090] ? __pfx_ksys_write+0x10/0x10 [ 75.412214][ T8090] __do_fast_syscall_32+0x14b/0x8c0 [ 75.412233][ T8090] do_fast_syscall_32+0x32/0x70 [ 75.412250][ T8090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.412266][ T8090] RIP: 0023:0xf7f67fbc [ 75.412276][ T8090] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 75.412288][ T8090] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 75.412300][ T8090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a00 [ 75.412308][ T8090] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.412315][ T8090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.412323][ T8090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.412330][ T8090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.412340][ T8090] [ 75.412345][ T8090] [ 75.412347][ T8090] Allocated by task 1: [ 75.412353][ T8090] kasan_save_stack+0x30/0x50 [ 75.412366][ T8090] kasan_save_track+0x14/0x30 [ 75.412380][ T8090] __kasan_slab_alloc+0x89/0x90 [ 75.412392][ T8090] kmem_cache_alloc_noprof+0x269/0x6a0 [ 75.412409][ T8090] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 75.412427][ T8090] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 75.412445][ T8090] acpi_ds_build_internal_object+0x173/0x790 [ 75.412463][ T8090] acpi_ds_create_node+0xe3/0x280 [ 75.412479][ T8090] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 75.412496][ T8090] acpi_ps_parse_loop+0x5e1/0x26e0 [ 75.412515][ T8090] acpi_ps_parse_aml+0x81e/0x1120 [ 75.412526][ T8090] acpi_ps_execute_table+0x393/0x500 [ 75.412538][ T8090] acpi_ns_execute_table+0x596/0x970 [ 75.412553][ T8090] acpi_ns_parse_table+0xcb/0x160 [ 75.412567][ T8090] acpi_ns_load_table+0xc9/0x490 [ 75.412580][ T8090] acpi_tb_load_namespace+0x2b0/0x8f0 [ 75.412596][ T8090] acpi_load_tables+0x89/0x160 [ 75.412613][ T8090] acpi_init+0x146/0x840 [ 75.412625][ T8090] do_one_initcall+0x11c/0x6f0 [ 75.412637][ T8090] kernel_init_freeable+0x6ea/0x7b0 [ 75.412655][ T8090] kernel_init+0x21/0x1e0 [ 75.412665][ T8090] ret_from_fork+0x730/0xd60 [ 75.412677][ T8090] ret_from_fork_asm+0x1a/0x30 [ 75.412689][ T8090] [ 75.412691][ T8090] Freed by task 7320: [ 75.412697][ T8090] kasan_save_stack+0x30/0x50 [ 75.412709][ T8090] kasan_save_track+0x14/0x30 [ 75.412721][ T8090] kasan_save_free_info+0x3b/0x70 [ 75.412737][ T8090] __kasan_slab_free+0x5f/0x80 [ 75.412749][ T8090] kmem_cache_free+0x127/0x6c0 [ 75.412764][ T8090] acpi_os_release_object+0x1c/0x30 [ 75.412776][ T8090] acpi_ut_delete_object_desc+0xea/0x130 [ 75.412792][ T8090] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 75.412806][ T8090] acpi_ut_update_object_reference+0x5f9/0x800 [ 75.412819][ T8090] acpi_ut_remove_reference+0x192/0x1d0 [ 75.412832][ T8090] acpi_rs_get_prt_method_data+0xcd/0x150 [ 75.412845][ T8090] acpi_get_irq_routing_table+0xb8/0x140 [ 75.412859][ T8090] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 75.412874][ T8090] acpi_pci_irq_lookup+0x8e/0x6b0 [ 75.412886][ T8090] acpi_pci_irq_disable+0x1a8/0x360 [ 75.412899][ T8090] pcibios_disable_device+0x89/0xb0 [ 75.412914][ T8090] do_pci_disable_device+0x9f/0x100 [ 75.412926][ T8090] pci_disable_device+0x130/0x270 [ 75.412938][ T8090] virtio_pci_remove+0xcf/0x110 [ 75.412950][ T8090] pci_device_remove+0xb2/0x1d0 [ 75.412967][ T8090] device_remove+0xcb/0x180 [ 75.412983][ T8090] device_release_driver_internal+0x441/0x610 [ 75.412995][ T8090] pci_stop_bus_device+0x120/0x160 [ 75.413006][ T8090] pci_stop_and_remove_bus_device+0x58/0xa0 [ 75.413019][ T8090] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 75.413032][ T8090] remove_store+0x123/0x140 [ 75.413045][ T8090] dev_attr_store+0x58/0x80 [ 75.413056][ T8090] sysfs_kf_write+0xf2/0x150 [ 75.413069][ T8090] kernfs_fop_write_iter+0x3e0/0x5f0 [ 75.413081][ T8090] vfs_write+0x6af/0x1050 [ 75.413092][ T8090] ksys_write+0x12a/0x250 [ 75.413103][ T8090] __do_fast_syscall_32+0x14b/0x8c0 [ 75.413120][ T8090] do_fast_syscall_32+0x32/0x70 [ 75.413136][ T8090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.413151][ T8090] [ 75.413154][ T8090] The buggy address belongs to the object at ffff888021f9c478 [ 75.413154][ T8090] which belongs to the cache Acpi-Operand of size 72 [ 75.413163][ T8090] The buggy address is located 8 bytes inside of [ 75.413163][ T8090] freed 72-byte region [ffff888021f9c478, ffff888021f9c4c0) [ 75.413174][ T8090] [ 75.413177][ T8090] The buggy address belongs to the physical page: [ 75.413183][ T8090] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021f9cf08 pfn:0x21f9c [ 75.413194][ T8090] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 75.413204][ T8090] page_type: f5(slab) [ 75.413215][ T8090] raw: 00fff00000000200 ffff88801d44da40 ffffea00007cdfd0 ffffea00007ce290 [ 75.413225][ T8090] raw: ffff888021f9cf08 0000000200270007 00000000f5000000 0000000000000000 [ 75.413232][ T8090] page dumped because: kasan: bad access detected [ 75.413238][ T8090] page_owner tracks the page as allocated [ 75.413242][ T8090] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2471628088 [ 75.413260][ T8090] post_alloc_hook+0xfd/0x120 [ 75.413282][ T8090] get_page_from_freelist+0x112f/0x3640 [ 75.413303][ T8090] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 75.413320][ T8090] new_slab+0xb1/0x6d0 [ 75.413336][ T8090] refill_objects+0xe3/0x410 [ 75.413355][ T8090] __pcs_replace_empty_main+0x35e/0x650 [ 75.413373][ T8090] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 75.413384][ T8090] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 75.413407][ T8090] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 75.413425][ T8090] acpi_ds_create_operand+0x6be/0xc20 [ 75.413442][ T8090] acpi_ds_eval_data_object_operands+0x125/0x640 [ 75.413461][ T8090] acpi_ds_exec_end_op+0xe41/0x1e60 [ 75.413480][ T8090] acpi_ps_parse_loop+0x5e1/0x26e0 [ 75.413497][ T8090] acpi_ps_parse_aml+0x81e/0x1120 [ 75.413509][ T8090] acpi_ps_execute_table+0x393/0x500 [ 75.413521][ T8090] acpi_ns_execute_table+0x596/0x970 [ 75.413536][ T8090] page_owner free stack trace missing [ 75.413541][ T8090] [ 75.413543][ T8090] Memory state around the buggy address: [ 75.413550][ T8090] ffff888021f9c380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 75.413558][ T8090] ffff888021f9c400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 75.413566][ T8090] >ffff888021f9c480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 75.413572][ T8090] ^ [ 75.413578][ T8090] ffff888021f9c500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 75.413585][ T8090] ffff888021f9c580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 75.413592][ T8090] ================================================================== [ 75.413599][ T8090] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.605304][ T8090] CPU: 1 UID: 0 PID: 8090 Comm: syz.2.930 Not tainted syzkaller #0 PREEMPT(full) [ 76.608963][ T8090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.612976][ T8090] Call Trace: [ 76.614342][ T8090] [ 76.615545][ T8090] dump_stack_lvl+0x100/0x190 [ 76.617457][ T8090] vpanic+0x2dc/0x6f8 [ 76.619089][ T8090] panic+0xd1/0xe0 [ 76.620632][ T8090] ? __pfx_panic+0x10/0x10 [ 76.622447][ T8090] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 76.624806][ T8090] check_panic_on_warn.cold+0x19/0x34 [ 76.626986][ T8090] end_report.part.0+0x3a/0x90 [ 76.628931][ T8090] kasan_report.cold+0xe/0x18 [ 76.630883][ T8090] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 76.633297][ T8090] acpi_ns_get_attached_object+0x148/0x1b0 [ 76.635666][ T8090] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 76.638059][ T8090] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 76.640129][ T8090] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 76.642751][ T8090] ? acpi_ds_create_operand+0x267/0xc20 [ 76.644984][ T8090] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 76.647228][ T8090] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 76.649696][ T8090] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 76.651840][ T8090] ? __asan_memset+0x23/0x50 [ 76.653663][ T8090] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 76.656069][ T8090] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 76.658330][ T8090] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 76.660852][ T8090] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 76.663211][ T8090] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 76.665278][ T8090] acpi_ds_exec_end_op+0xb78/0x1e60 [ 76.667420][ T8090] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 76.669680][ T8090] acpi_ps_parse_loop+0x5e1/0x26e0 [ 76.671768][ T8090] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 76.673998][ T8090] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 76.676255][ T8090] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 76.678677][ T8090] ? acpi_ut_create_thread_state+0x6d/0x170 [ 76.681100][ T8090] acpi_ps_parse_aml+0x81e/0x1120 [ 76.683143][ T8090] acpi_ps_execute_method+0x5c4/0xe90 [ 76.685300][ T8090] acpi_ns_evaluate+0x640/0x1670 [ 76.687323][ T8090] acpi_ut_evaluate_object+0xf7/0x610 [ 76.689488][ T8090] acpi_rs_get_prt_method_data+0xa0/0x150 [ 76.691794][ T8090] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 76.694328][ T8090] ? acpi_ut_status_exit+0x111/0x1c0 [ 76.696451][ T8090] ? acpi_rs_validate_parameters+0x104/0x210 [ 76.698890][ T8090] acpi_get_irq_routing_table+0xb8/0x140 [ 76.701165][ T8090] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 76.703689][ T8090] ? do_raw_spin_lock+0x128/0x260 [ 76.705768][ T8090] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 76.708132][ T8090] ? do_raw_spin_lock+0x128/0x260 [ 76.710178][ T8090] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 76.712718][ T8090] ? mark_held_locks+0x40/0x70 [ 76.714713][ T8090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.717067][ T8090] acpi_pci_irq_lookup+0x8e/0x6b0 [ 76.719137][ T8090] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 76.721438][ T8090] acpi_pci_irq_disable+0x1a8/0x360 [ 76.723559][ T8090] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 76.725874][ T8090] pcibios_disable_device+0x89/0xb0 [ 76.727987][ T8090] do_pci_disable_device+0x9f/0x100 [ 76.730088][ T8090] ? __pfx_do_pci_disable_device+0x10/0x10 [ 76.732454][ T8090] pci_disable_device+0x130/0x270 [ 76.734511][ T8090] pci_device_remove+0xb2/0x1d0 [ 76.736512][ T8090] ? __pfx_pci_device_remove+0x10/0x10 [ 76.738446][ T8090] device_remove+0xcb/0x180 [ 76.740227][ T8090] device_release_driver_internal+0x441/0x610 [ 76.742670][ T8090] pci_stop_bus_device+0x120/0x160 [ 76.744760][ T8090] pci_stop_and_remove_bus_device+0x58/0xa0 [ 76.747191][ T8090] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 76.749687][ T8090] remove_store+0x123/0x140 [ 76.751301][ T8090] ? __pfx_remove_store+0x10/0x10 [ 76.753281][ T8090] ? find_held_lock+0x2b/0x80 [ 76.755169][ T8090] ? sysfs_file_kobj+0xe4/0x290 [ 76.757160][ T8090] ? sysfs_file_kobj+0xe4/0x290 [ 76.759116][ T8090] ? __pfx_remove_store+0x10/0x10 [ 76.760815][ T8090] dev_attr_store+0x58/0x80 [ 76.762676][ T8090] ? __pfx_dev_attr_store+0x10/0x10 [ 76.764795][ T8090] sysfs_kf_write+0xf2/0x150 [ 76.766711][ T8090] kernfs_fop_write_iter+0x3e0/0x5f0 [ 76.768876][ T8090] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.771040][ T8090] vfs_write+0x6af/0x1050 [ 76.772821][ T8090] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 76.774791][ T8090] ? __pfx_vfs_write+0x10/0x10 [ 76.776759][ T8090] ? find_held_lock+0x2b/0x80 [ 76.778711][ T8090] ksys_write+0x12a/0x250 [ 76.780503][ T8090] ? __pfx_ksys_write+0x10/0x10 [ 76.782543][ T8090] __do_fast_syscall_32+0x14b/0x8c0 [ 76.784259][ T8090] do_fast_syscall_32+0x32/0x70 [ 76.786278][ T8090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.788839][ T8090] RIP: 0023:0xf7f67fbc [ 76.790515][ T8090] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 76.797948][ T8090] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 76.801140][ T8090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a00 [ 76.804321][ T8090] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.807562][ T8090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.810396][ T8090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.813766][ T8090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.816512][ T8090] [ 76.818191][ T8090] Kernel Offset: disabled [ 76.819590][ T8090] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:50:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880280b8000 RSI=ffffffff8201096e RDI=0000000000000005 RBP=ffff88802af424c0 RSP=ffffc900047af4d0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed10050172b3 R13=0000000000000003 R14=ffffed10055e8499 R15=0000000000000001 RIP=ffffffff82010970 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095279000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f655c0 CR3=000000004d8b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c18c95 RDI=ffffffff9cf42560 RBP=ffffffff9cf42520 RSP=ffffc900048eea50 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=000000000000000a R15=ffffc900048eed68 RIP=ffffffff85c18cbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095379000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f723fc8c CR3=00000000726e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff88801e722580 RSI=ffffffff8201096e RDI=0000000000000005 RBP=ffff88802af44660 RSP=ffffc9000100f8a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed1003ce4763 R13=0000000000000003 R14=ffffed10055e88cd R15=0000000000000001 RIP=ffffffff82010974 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095479000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7426288 CR3=00000000726e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=0000000080006e90 RCX=ffffc90024fb1000 RDX=0000000000080000 RSI=ffffffff82685a15 RDI=ffffffff8c815b60 RBP=ffffffff8c815b60 RSP=ffffc90003af7a10 R8 =000000007fffffff R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=00000000000000a9 R13=ffff88804f4debd0 R14=dffffc0000000000 R15=0000000080006e90 RIP=ffffffff820ddc8b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095579000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080006000 CR3=000000005efa1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000