last executing test programs: 643.562876ms ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 480.796443ms ago: executing program 3 (id=5): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x60e2, @private1, 0x30d}, 0x1c) r6 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r6, 0x8000000) dup3(r0, r6, 0x80000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x15, &(0x7f0000000780)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xca}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x3, 0x24c204c24e5413ab, 0xb, 0x80, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x3, 0xb, 0x1, 0x40, 0xfffffffffffffff0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x72, &(0x7f00000003c0)=""/114, 0x0, 0x44, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x9, 0xff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r7], &(0x7f0000000680), 0x10, 0x3868456d}, 0x94) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r13, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) ioctl$KVM_X86_SET_MCE(r13, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x50000, 0xe7, 0x6, 0x12}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 415.253955ms ago: executing program 2 (id=3): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 348.864255ms ago: executing program 1 (id=2): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x28011, r1, 0x2c93d000) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) 309.760468ms ago: executing program 2 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}}, 0x88080) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x28011, r3, 0x2c93d000) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) 274.788581ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x50) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 208.038265ms ago: executing program 3 (id=7): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80ffff}, 0x50) 171.118008ms ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='1', 0x1) 170.836859ms ago: executing program 3 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40854}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) syz_emit_ethernet(0x72, &(0x7f00000002c0)={@random="bb05df28859e", @local, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "deb46e", 0x38, 0x21, 0x0, @empty, @empty, {[@srh={0x3c, 0x4, 0x4, 0x2, 0x48, 0x70, 0x3ff, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x2, 0x2, "3e231d", 0x0, "9d5453"}}}}}}}, 0x0) 170.554552ms ago: executing program 2 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r2, &(0x7f00000000c0)=""/108, 0x6c) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x50) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 118.390677ms ago: executing program 1 (id=11): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='3', 0x1) syz_emit_ethernet(0x32, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x64, 0x0, 0xba, 0x21, 0x0, @empty, @multicast2}, {{0x4e20, 0x4e22, 0x4, 0x1, 0xd, 0x0, 0x0, 0x0, 0x1, "423c11", 0xcc, "0000e4"}}}}}}, 0x0) 118.243485ms ago: executing program 3 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x700}, 0x0) 107.500551ms ago: executing program 1 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x10000, &(0x7f0000e07000/0x10000)=nil, 0x0, r3}) fallocate(r3, 0x3, 0x0, 0x10000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 6.860165ms ago: executing program 0 (id=14): keyctl$clear(0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008810) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='N\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0xfffffffa) write(r0, &(0x7f0000000140)='1000\x00', 0x4) r1 = openat(r0, &(0x7f0000000180)='./dbg/failslab/probability\x00', 0x140041, 0x34) write(r1, &(0x7f00000001c0)='0\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 6.632186ms ago: executing program 0 (id=15): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 0s ago: executing program 2 (id=16): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0x20100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x0, 0x10a) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000380)={0x5c05, 0x1, 0x80, 0x1000, 0x80, 0x1, 0x10, 0x2, 0x80, 0xfffffff7, 0x10, 0x4, &(0x7f00000002c0)=[0x40, 0x5], 0x2, &(0x7f0000000340)="2bbba178f25881dc217e5d773d097d6e2133da685bfab175578b23f3ce9a20e41f68a0c9ece306d6a0b10335a2c2b6eeac6930881f956b", 0x37}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004340)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x4000800) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x2, 0x11, &(0x7f0000000040)="fe0cf95af4fff5757f08d81ee8eb4101b6", 0x59b67171, 0x0, 0x6, 0x0, 0x60, &(0x7f0000000080), 0x0, 0x76, 0x0, 0x22, &(0x7f0000000100)="e5d2b066720241976f240d9d23029024b7e93ecaf3aa21039d9c56d73a5a1041d406339e215dacaaf774c61d3b884efcd2cc48720a30b2d80c5f08887bf98132482d058fae1cbb3600b63a6ea08e4926f3a571d046d112744a4eef5c2aec1efcb94c7ddc7eb13da4abae55b7829e9d25a949827f6390", &(0x7f0000000180)=""/34, 0x1, 0x0, &(0x7f00000001c0)="2c7a146a60cfc4e8e20bd575b747", 0xffffff51}) r3 = gettid() rt_sigqueueinfo(r3, 0x36, &(0x7f00000007c0)={0x20, 0x2, 0x8}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52537' (ED25519) to the list of known hosts. [ 48.957786][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.957800][ T42] audit: type=1400 audit(1785270810.665:141): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.968336][ T42] audit: type=1400 audit(1785270810.675:142): avc: denied { mount } for pid=5722 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.971156][ T5722] cgroup: Unknown subsys name 'net' [ 48.978159][ T42] audit: type=1400 audit(1785270810.685:143): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.133615][ T5722] cgroup: Unknown subsys name 'cpuset' [ 49.138463][ T5722] cgroup: Unknown subsys name 'rlimit' [ 49.319542][ T42] audit: type=1400 audit(1785270811.035:144): avc: denied { setattr } for pid=5722 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.327803][ T42] audit: type=1400 audit(1785270811.035:145): avc: denied { create } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.334484][ T42] audit: type=1400 audit(1785270811.035:146): avc: denied { write } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.340794][ T42] audit: type=1400 audit(1785270811.035:147): avc: denied { read } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.346887][ T42] audit: type=1400 audit(1785270811.045:148): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.354393][ T42] audit: type=1400 audit(1785270811.045:149): avc: denied { mount } for pid=5722 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.361372][ T42] audit: type=1400 audit(1785270811.055:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.395777][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.159349][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.990112][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 53.990128][ T42] audit: type=1400 audit(1785270815.705:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.998206][ T42] audit: type=1400 audit(1785270815.705:160): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.006518][ T42] audit: type=1400 audit(1785270815.705:161): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.013637][ T42] audit: type=1400 audit(1785270815.725:162): avc: denied { ioctl } for pid=5740 comm="syz-executor" path="socket:[6661]" dev="sockfs" ino=6661 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.029321][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.030376][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.032788][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.034185][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.035373][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.035385][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.036528][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.038228][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.038372][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.038620][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.039355][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.039951][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.040242][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.041570][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.042355][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.043043][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.046156][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.054589][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.055152][ T42] audit: type=1400 audit(1785270815.765:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.059835][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.061820][ T42] audit: type=1400 audit(1785270815.765:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.066367][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.068068][ T42] audit: type=1400 audit(1785270815.765:165): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.068093][ T42] audit: type=1400 audit(1785270815.765:166): avc: denied { module_request } for pid=5740 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.102085][ T42] audit: type=1400 audit(1785270815.785:167): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.747178][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.750889][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.753361][ T5737] bridge_slave_0: entered allmulticast mode [ 54.756065][ T5737] bridge_slave_0: entered promiscuous mode [ 54.778063][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.781896][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.784405][ T5737] bridge_slave_1: entered allmulticast mode [ 54.787437][ T5737] bridge_slave_1: entered promiscuous mode [ 54.790661][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.793643][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.796438][ T5739] bridge_slave_0: entered allmulticast mode [ 54.799659][ T5739] bridge_slave_0: entered promiscuous mode [ 54.808014][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.810328][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.812576][ T5740] bridge_slave_0: entered allmulticast mode [ 54.815180][ T5740] bridge_slave_0: entered promiscuous mode [ 54.819051][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.822120][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.824496][ T5740] bridge_slave_1: entered allmulticast mode [ 54.827137][ T5740] bridge_slave_1: entered promiscuous mode [ 54.836002][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.838482][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.841084][ T5739] bridge_slave_1: entered allmulticast mode [ 54.844597][ T5739] bridge_slave_1: entered promiscuous mode [ 54.884371][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.901511][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.907405][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.911761][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.922311][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.926749][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.953855][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.956292][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.959068][ T5738] bridge_slave_0: entered allmulticast mode [ 54.962009][ T5738] bridge_slave_0: entered promiscuous mode [ 54.977064][ T5737] team0: Port device team_slave_0 added [ 54.986846][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.989981][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.993036][ T5738] bridge_slave_1: entered allmulticast mode [ 54.996706][ T5738] bridge_slave_1: entered promiscuous mode [ 55.001379][ T5739] team0: Port device team_slave_0 added [ 55.004256][ T5737] team0: Port device team_slave_1 added [ 55.013117][ T5740] team0: Port device team_slave_0 added [ 55.023582][ T5739] team0: Port device team_slave_1 added [ 55.039891][ T5740] team0: Port device team_slave_1 added [ 55.076352][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.078499][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.086750][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.101344][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.103538][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.111868][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.116704][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.121582][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.124970][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.127267][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.135310][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.139651][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.141879][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.151412][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.159954][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.162251][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.170828][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.186028][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.188206][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.196037][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.227548][ T5738] team0: Port device team_slave_0 added [ 55.237362][ T5738] team0: Port device team_slave_1 added [ 55.264944][ T5737] hsr_slave_0: entered promiscuous mode [ 55.267412][ T5737] hsr_slave_1: entered promiscuous mode [ 55.289675][ T5739] hsr_slave_0: entered promiscuous mode [ 55.292506][ T5739] hsr_slave_1: entered promiscuous mode [ 55.295195][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 55.297495][ T5739] Cannot create hsr debugfs directory [ 55.310834][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.313711][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.324139][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.340839][ T5740] hsr_slave_0: entered promiscuous mode [ 55.343098][ T5740] hsr_slave_1: entered promiscuous mode [ 55.345147][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 55.346990][ T5740] Cannot create hsr debugfs directory [ 55.349257][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.351873][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.361081][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.465989][ T5738] hsr_slave_0: entered promiscuous mode [ 55.468599][ T5738] hsr_slave_1: entered promiscuous mode [ 55.470889][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 55.472791][ T5738] Cannot create hsr debugfs directory [ 55.727192][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.737031][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.743652][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.750617][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.754227][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.761028][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.764776][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.771292][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.820864][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.826047][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.832584][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.837601][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.841625][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.847015][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.852076][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.860787][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.933653][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.937815][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.941385][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.945044][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.948883][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.953027][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.956649][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.961966][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.040535][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.044668][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.047507][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.053074][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.058436][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.067378][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.071858][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.075431][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.079235][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.089807][ T5750] Bluetooth: hci1: command tx timeout [ 56.089812][ T5752] Bluetooth: hci0: command tx timeout [ 56.099571][ T5750] Bluetooth: hci2: command tx timeout [ 56.099604][ T5752] Bluetooth: hci3: command tx timeout [ 56.115574][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.132864][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.135951][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.140817][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.143683][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.152933][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.194015][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.200834][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.207783][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.210652][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.228332][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.230749][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.247420][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.263397][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.265525][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.276093][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.278443][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.318524][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.342739][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.362548][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.365663][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.381702][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.384151][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.552170][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.588362][ T5737] veth0_vlan: entered promiscuous mode [ 56.595539][ T5737] veth1_vlan: entered promiscuous mode [ 56.615335][ T5737] veth0_macvtap: entered promiscuous mode [ 56.620089][ T5737] veth1_macvtap: entered promiscuous mode [ 56.626857][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.643392][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.655221][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.667383][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.677348][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.681386][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.691583][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.709889][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.720949][ T5739] veth0_vlan: entered promiscuous mode [ 56.734858][ T5739] veth1_vlan: entered promiscuous mode [ 56.770532][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.770858][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.776102][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.806798][ T5740] veth0_vlan: entered promiscuous mode [ 56.816577][ T5739] veth0_macvtap: entered promiscuous mode [ 56.824434][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.828410][ T5740] veth1_vlan: entered promiscuous mode [ 56.828492][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.837859][ T5739] veth1_macvtap: entered promiscuous mode [ 56.849555][ T42] audit: type=1400 audit(1785270818.555:168): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.864057][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.871375][ T5738] veth0_vlan: entered promiscuous mode [ 56.875553][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.885155][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.885679][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.888826][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.890317][ T5740] veth0_macvtap: entered promiscuous mode [ 56.903548][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.906549][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.916291][ T5738] veth1_vlan: entered promiscuous mode [ 56.919673][ T5740] veth1_macvtap: entered promiscuous mode [ 56.959775][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.979097][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.007218][ T5738] veth0_macvtap: entered promiscuous mode [ 57.014402][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.020870][ T5738] veth1_macvtap: entered promiscuous mode [ 57.020881][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.023232][ T5888] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.027871][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.029085][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.042821][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.047105][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.074869][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.084641][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.090194][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.097291][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.117017][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.122231][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.123298][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.127216][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.128657][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.140364][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175887][ T362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.179412][ T362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.215225][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.222890][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.255659][ T362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.264341][ T362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.395777][ T5907] Zero length message leads to an empty skb [ 57.399020][ T5907] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 57.423333][ T5907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.480418][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 57.484565][ T5913] hsr_slave_0: left promiscuous mode [ 57.487623][ T5913] hsr_slave_1: left promiscuous mode [ 57.505543][ T5915] syzkaller0: entered promiscuous mode [ 57.507303][ T5915] syzkaller0: entered allmulticast mode [ 57.527505][ T5738] FAULT_INJECTION: forcing a failure. [ 57.527505][ T5738] name failslab, interval 1, probability 1, space 0, times 1000 [ 57.531211][ T13] FAULT_INJECTION: forcing a failure. [ 57.531211][ T13] name failslab, interval 1, probability 1, space 0, times 1000 [ 57.532851][ T5738] CPU: 0 UID: 0 PID: 5738 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 57.532867][ T5738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.532880][ T5738] Call Trace: [ 57.532891][ T5738] [ 57.532896][ T5738] dump_stack_lvl+0x100/0x190 [ 57.532916][ T5738] should_fail_ex.cold+0x5/0xa [ 57.532930][ T5738] should_failslab+0xc2/0x120 [ 57.532946][ T5738] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.532960][ T5738] ? do_getname+0x35/0x390 [ 57.532977][ T5738] do_getname+0x35/0x390 [ 57.532993][ T5738] do_sys_openat2+0xc7/0x1e0 [ 57.533008][ T5738] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.533023][ T5738] ? kmem_cache_free+0x127/0x6b0 [ 57.533033][ T5738] ? __pfx_path_umount+0x10/0x10 [ 57.533048][ T5738] __x64_sys_openat+0x12d/0x210 [ 57.533063][ T5738] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.533078][ T5738] ? __pfx___x64_sys_umount+0x10/0x10 [ 57.533094][ T5738] do_syscall_64+0x115/0x870 [ 57.533107][ T5738] ? clear_bhb_loop+0x40/0x90 [ 57.533121][ T5738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.533133][ T5738] RIP: 0033:0x7f0e8e99d1bc [ 57.533143][ T5738] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 57.533154][ T5738] RSP: 002b:00007ffda9b35ac0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 57.533165][ T5738] RAX: ffffffffffffffda RBX: 00007f0e8ea3330a RCX: 00007f0e8e99d1bc [ 57.533172][ T5738] RDX: 0000000000090800 RSI: 00007ffda9b36cd0 RDI: 00000000ffffff9c [ 57.533179][ T5738] RBP: 00007ffda9b36cd0 R08: 00007ffda9b37cd0 R09: 00000000ffffffff [ 57.533185][ T5738] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffda9b36cd0 [ 57.533192][ T5738] R13: 00007f0e8ea3330a R14: 000000000000e047 R15: 00007ffda9b37da0 [ 57.533205][ T5738] [ 57.543318][ T5138] FAULT_INJECTION: forcing a failure. [ 57.543318][ T5138] name failslab, interval 1, probability 1, space 0, times 999 [ 57.545367][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.545391][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.545420][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.545450][ T13] Call Trace: [ 57.545457][ T13] [ 57.545463][ T13] dump_stack_lvl+0x100/0x190 [ 57.545488][ T13] should_fail_ex.cold+0x5/0xa [ 57.545510][ T13] should_failslab+0xc2/0x120 [ 57.545533][ T13] __kmalloc_noprof+0xfc/0x820 [ 57.545553][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.545574][ T13] ? nsim_fib_event_nb+0x64c/0xe40 [ 57.545605][ T13] nsim_fib_event_nb+0x64c/0xe40 [ 57.545631][ T13] ? lock_acquire+0x1b9/0x370 [ 57.545657][ T13] notifier_call_chain+0x99/0x3f0 [ 57.545679][ T13] atomic_notifier_call_chain+0x71/0x1c0 [ 57.545697][ T13] call_fib_notifiers+0x33/0x70 [ 57.545721][ T13] fib6_add_rt2node+0x14e3/0x3df0 [ 57.545752][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 57.545784][ T13] ? fib6_add+0x60e/0x1d30 [ 57.545803][ T13] fib6_add+0x60e/0x1d30 [ 57.545825][ T13] ? do_raw_spin_lock+0x128/0x260 [ 57.545851][ T13] ? __pfx_fib6_add+0x10/0x10 [ 57.545869][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.545903][ T13] ip6_ins_rt+0xb5/0x110 [ 57.545926][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 57.545947][ T13] ? nlmsg_notify+0xbf/0x290 [ 57.545963][ T13] ? nlmsg_notify+0xdc/0x290 [ 57.545978][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.546000][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 57.546037][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.546062][ T13] ? __cancel_work+0x2b5/0x340 [ 57.546085][ T13] ? __cancel_work+0x245/0x340 [ 57.546106][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.546127][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.546152][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.546172][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.546197][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.546225][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.546244][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.546267][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.546291][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.546320][ T13] process_one_work+0xa23/0x1940 [ 57.546350][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.546378][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.546402][ T13] worker_thread+0x5ef/0xe50 [ 57.546431][ T13] ? kthread+0x13a/0x450 [ 57.546451][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.546468][ T13] kthread+0x370/0x450 [ 57.546485][ T13] ? __pfx_kthread+0x10/0x10 [ 57.546505][ T13] ret_from_fork+0x72b/0xd50 [ 57.546533][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.546559][ T13] ? __switch_to+0x800/0x10f0 [ 57.546580][ T13] ? __pfx_kthread+0x10/0x10 [ 57.546599][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.546641][ T13] [ 57.548052][ T362] FAULT_INJECTION: forcing a failure. [ 57.548052][ T362] name failslab, interval 1, probability 1, space 0, times 998 [ 57.551788][ T1484] FAULT_INJECTION: forcing a failure. [ 57.551788][ T1484] name failslab, interval 1, probability 1, space 0, times 998 [ 57.552078][ T5138] CPU: 3 UID: 0 PID: 5138 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 57.552099][ T5138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.552108][ T5138] Call Trace: [ 57.552115][ T5138] [ 57.552121][ T5138] dump_stack_lvl+0x100/0x190 [ 57.552162][ T5138] should_fail_ex.cold+0x5/0xa [ 57.552183][ T5138] should_failslab+0xc2/0x120 [ 57.552206][ T5138] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.552226][ T5138] ? __alloc_skb+0x5b7/0x710 [ 57.552243][ T5138] ? __alloc_skb+0x140/0x710 [ 57.552262][ T5138] __alloc_skb+0x140/0x710 [ 57.552279][ T5138] ? __alloc_skb+0x5b7/0x710 [ 57.552296][ T5138] ? __pfx___alloc_skb+0x10/0x10 [ 57.552321][ T5138] alloc_skb_with_frags+0xdd/0x760 [ 57.552341][ T5138] ? find_held_lock+0x2b/0x80 [ 57.552363][ T5138] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 57.552382][ T5138] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 57.552405][ T5138] sock_alloc_send_pskb+0x801/0x980 [ 57.552426][ T5138] ? avc_has_perm+0x135/0x1e0 [ 57.552446][ T5138] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 57.552460][ T5138] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 57.552483][ T5138] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 57.552525][ T5138] ? sock_def_readable+0x1d2/0x600 [ 57.552549][ T5138] unix_dgram_sendmsg+0x3c7/0x1810 [ 57.552575][ T5138] ? __pfx_syslog_print+0x10/0x10 [ 57.552593][ T5138] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 57.552617][ T5138] ? selinux_socket_sendmsg+0x198/0x2f0 [ 57.552644][ T5138] __sys_sendto+0x48b/0x4e0 [ 57.552661][ T5138] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 57.552678][ T5138] ? __pfx___sys_sendto+0x10/0x10 [ 57.552702][ T5138] ? do_syslog+0x18c/0x6d0 [ 57.552733][ T5138] ? exit_to_user_mode_loop+0x166/0x6f0 [ 57.552758][ T5138] __x64_sys_sendto+0xe0/0x1c0 [ 57.552774][ T5138] ? do_syscall_64+0x90/0x870 [ 57.552791][ T5138] ? lockdep_hardirqs_on+0x78/0x100 [ 57.552809][ T5138] do_syscall_64+0x115/0x870 [ 57.552826][ T5138] ? clear_bhb_loop+0x40/0x90 [ 57.552846][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.552863][ T5138] RIP: 0033:0x7f600f6f0407 [ 57.552878][ T5138] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 57.552892][ T5138] RSP: 002b:00007ffc94f551c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 57.552906][ T5138] RAX: ffffffffffffffda RBX: 00007f600f5a0c80 RCX: 00007f600f6f0407 [ 57.552916][ T5138] RDX: 000000000000003a RSI: 00007ffc94f55300 RDI: 0000000000000003 [ 57.552926][ T5138] RBP: 00007ffc94f55730 R08: 0000000000000000 R09: 0000000000000000 [ 57.552935][ T5138] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc94f55748 [ 57.552945][ T5138] R13: 00007ffc94f55300 R14: 000000000000001f R15: 00007ffc94f55300 [ 57.552967][ T5138] [ 57.553375][ T5149] FAULT_INJECTION: forcing a failure. [ 57.553375][ T5149] name failslab, interval 1, probability 1, space 0, times 998 [ 57.553396][ T5149] CPU: 3 UID: 0 PID: 5149 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 57.553412][ T5149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.553418][ T5149] Call Trace: [ 57.553423][ T5149] [ 57.553429][ T5149] dump_stack_lvl+0x100/0x190 [ 57.553451][ T5149] should_fail_ex.cold+0x5/0xa [ 57.553471][ T5149] should_failslab+0xc2/0x120 [ 57.553492][ T5149] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.553512][ T5149] ? __do_sys_newfstatat+0xc6/0x120 [ 57.553527][ T5149] ? do_getname+0x35/0x390 [ 57.553544][ T5149] do_getname+0x35/0x390 [ 57.553559][ T5149] do_readlinkat+0xa9/0x370 [ 57.553572][ T5149] ? __pfx_do_readlinkat+0x10/0x10 [ 57.553585][ T5149] ? __pfx_ksys_read+0x10/0x10 [ 57.553605][ T5149] __x64_sys_readlink+0x78/0xc0 [ 57.553619][ T5149] ? lockdep_hardirqs_on+0x78/0x100 [ 57.553631][ T5149] do_syscall_64+0x115/0x870 [ 57.553643][ T5149] ? clear_bhb_loop+0x40/0x90 [ 57.553656][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.553668][ T5149] RIP: 0033:0x7f85337153a7 [ 57.553676][ T5149] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 57.553687][ T5149] RSP: 002b:00007ffeaa1cf7f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000059 [ 57.553697][ T5149] RAX: ffffffffffffffda RBX: 00007ffeaa1d0040 RCX: 00007f85337153a7 [ 57.553703][ T5149] RDX: 0000000000000400 RSI: 00007ffeaa1cfc00 RDI: 00007ffeaa1cf800 [ 57.553710][ T5149] RBP: 0000000000000200 R08: 0000556d0349ac29 R09: 0000000000000000 [ 57.553716][ T5149] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffeaa1cf800 [ 57.553722][ T5149] R13: 00007ffeaa1cfc00 R14: 0000000000000001 R15: 00007ffeaa1d0470 [ 57.553735][ T5149] [ 57.553743][ T362] CPU: 0 UID: 0 PID: 362 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 57.553757][ T362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.553764][ T362] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.553782][ T362] Call Trace: [ 57.553786][ T362] [ 57.553791][ T362] dump_stack_lvl+0x100/0x190 [ 57.553806][ T362] should_fail_ex.cold+0x5/0xa [ 57.553819][ T362] should_failslab+0xc2/0x120 [ 57.553834][ T362] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.553849][ T362] ? __alloc_skb+0x140/0x710 [ 57.553864][ T362] __alloc_skb+0x140/0x710 [ 57.553876][ T362] ? __alloc_skb+0x5b7/0x710 [ 57.553888][ T362] ? __pfx___alloc_skb+0x10/0x10 [ 57.553903][ T362] ? kfree_skbmem+0x19f/0x210 [ 57.553921][ T362] nsim_dev_trap_report_work+0x2af/0xd20 [ 57.553941][ T362] process_one_work+0xa23/0x1940 [ 57.553959][ T362] ? __pfx_process_one_work+0x10/0x10 [ 57.553975][ T362] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 57.553991][ T362] worker_thread+0x5ef/0xe50 [ 57.554008][ T362] ? kthread+0x13a/0x450 [ 57.554018][ T362] ? __pfx_worker_thread+0x10/0x10 [ 57.554029][ T362] kthread+0x370/0x450 [ 57.554039][ T362] ? __pfx_kthread+0x10/0x10 [ 57.554051][ T362] ret_from_fork+0x72b/0xd50 [ 57.554069][ T362] ? __pfx_ret_from_fork+0x10/0x10 [ 57.554085][ T362] ? __switch_to+0x800/0x10f0 [ 57.554097][ T362] ? __pfx_kthread+0x10/0x10 [ 57.554108][ T362] ret_from_fork_asm+0x1a/0x30 [ 57.554131][ T362] [ 57.559584][ T5138] FAULT_INJECTION: forcing a failure. [ 57.559584][ T5138] name failslab, interval 1, probability 1, space 0, times 994 [ 57.560005][ T13] FAULT_INJECTION: forcing a failure. [ 57.560005][ T13] name failslab, interval 1, probability 1, space 0, times 994 [ 57.560036][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.560049][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.560057][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.560075][ T13] Call Trace: [ 57.560079][ T13] [ 57.560084][ T13] dump_stack_lvl+0x100/0x190 [ 57.560100][ T13] should_fail_ex.cold+0x5/0xa [ 57.560115][ T13] should_failslab+0xc2/0x120 [ 57.560130][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.560145][ T13] ? __alloc_skb+0x140/0x710 [ 57.560160][ T13] __alloc_skb+0x140/0x710 [ 57.560172][ T13] ? __alloc_skb+0x5b7/0x710 [ 57.560184][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 57.560198][ T13] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 57.560213][ T13] ndisc_alloc_skb+0xd8/0x530 [ 57.560228][ T13] ndisc_send_rs+0x370/0x680 [ 57.560245][ T13] addrconf_dad_completed+0x47f/0xff0 [ 57.560265][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.560283][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.560295][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.560310][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.560325][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.560350][ T13] process_one_work+0xa23/0x1940 [ 57.560368][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.560385][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.560399][ T13] worker_thread+0x5ef/0xe50 [ 57.560416][ T13] ? kthread+0x13a/0x450 [ 57.560426][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.560438][ T13] kthread+0x370/0x450 [ 57.560448][ T13] ? __pfx_kthread+0x10/0x10 [ 57.560459][ T13] ret_from_fork+0x72b/0xd50 [ 57.560476][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.560493][ T13] ? __switch_to+0x800/0x10f0 [ 57.560505][ T13] ? __pfx_kthread+0x10/0x10 [ 57.560516][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.560539][ T13] [ 57.560601][ T13] FAULT_INJECTION: forcing a failure. [ 57.560601][ T13] name failslab, interval 1, probability 1, space 0, times 993 [ 57.565465][ T5138] CPU: 3 UID: 0 PID: 5138 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 57.565487][ T5138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.565497][ T5138] Call Trace: [ 57.565507][ T5138] [ 57.565512][ T5138] dump_stack_lvl+0x100/0x190 [ 57.565539][ T5138] should_fail_ex.cold+0x5/0xa [ 57.565560][ T5138] should_failslab+0xc2/0x120 [ 57.565582][ T5138] __kmalloc_cache_noprof+0x91/0x6c0 [ 57.565609][ T5138] ? syslog_print+0xf8/0x620 [ 57.565630][ T5138] syslog_print+0xf8/0x620 [ 57.565648][ T5138] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 57.565669][ T5138] ? __pfx_syslog_print+0x10/0x10 [ 57.565691][ T5138] ? avc_has_perm_noaudit+0x145/0x3b0 [ 57.565712][ T5138] ? avc_has_perm+0x135/0x1e0 [ 57.565739][ T5138] do_syslog+0x5bd/0x6d0 [ 57.565761][ T5138] ? __pfx_do_syslog+0x10/0x10 [ 57.565797][ T5138] __x64_sys_syslog+0x74/0xb0 [ 57.565816][ T5138] ? lockdep_hardirqs_on+0x78/0x100 [ 57.565834][ T5138] do_syscall_64+0x115/0x870 [ 57.565852][ T5138] ? clear_bhb_loop+0x40/0x90 [ 57.565873][ T5138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.565890][ T5138] RIP: 0033:0x7f600f76aa37 [ 57.565905][ T5138] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 57.565918][ T5138] RSP: 002b:00007ffc94f55818 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 57.565933][ T5138] RAX: ffffffffffffffda RBX: 00007f600f90a490 RCX: 00007f600f76aa37 [ 57.565944][ T5138] RDX: 00000000000003ff RSI: 00007f600f90a490 RDI: 0000000000000002 [ 57.565953][ T5138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.565962][ T5138] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f600f90a490 [ 57.565972][ T5138] R13: 00007f600f8e7dfe R14: 00007f600f90a88a R15: 00007f600f90a88a [ 57.565994][ T5138] [ 57.570782][ T5918] FAULT_INJECTION: forcing a failure. [ 57.570782][ T5918] name failslab, interval 1, probability 1, space 0, times 991 [ 57.572594][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.572609][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.572617][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.572637][ T13] Call Trace: [ 57.572641][ T13] [ 57.572646][ T13] dump_stack_lvl+0x100/0x190 [ 57.572662][ T13] should_fail_ex.cold+0x5/0xa [ 57.572677][ T13] should_failslab+0xc2/0x120 [ 57.572692][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.572706][ T13] ? fib6_add_1+0x2b0/0x1700 [ 57.572719][ T13] fib6_add_1+0x2b0/0x1700 [ 57.572734][ T13] fib6_add+0x1c5/0x1d30 [ 57.572748][ T13] ? do_raw_spin_lock+0x128/0x260 [ 57.572765][ T13] ? __pfx_fib6_add+0x10/0x10 [ 57.572775][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.572795][ T13] ip6_ins_rt+0xb5/0x110 [ 57.572808][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 57.572823][ T13] ? nlmsg_notify+0xbf/0x290 [ 57.572833][ T13] ? nlmsg_notify+0xdc/0x290 [ 57.572843][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.572858][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 57.572877][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.572895][ T13] ? __cancel_work+0x2b5/0x340 [ 57.572910][ T13] ? __cancel_work+0x245/0x340 [ 57.572923][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.572937][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.572952][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.572965][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.572981][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.572998][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.573011][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.573025][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.573040][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.573060][ T13] process_one_work+0xa23/0x1940 [ 57.573078][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.573094][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.573108][ T13] worker_thread+0x5ef/0xe50 [ 57.573125][ T13] ? kthread+0x13a/0x450 [ 57.573135][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.573147][ T13] kthread+0x370/0x450 [ 57.573157][ T13] ? __pfx_kthread+0x10/0x10 [ 57.573168][ T13] ret_from_fork+0x72b/0xd50 [ 57.573185][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.573202][ T13] ? __switch_to+0x800/0x10f0 [ 57.573214][ T13] ? __pfx_kthread+0x10/0x10 [ 57.573225][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.573248][ T13] [ 57.573332][ T1484] CPU: 1 UID: 0 PID: 1484 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 57.573356][ T1484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.573368][ T1484] Workqueue: mld mld_ifc_work [ 57.573395][ T1484] Call Trace: [ 57.573401][ T1484] [ 57.573408][ T1484] dump_stack_lvl+0x100/0x190 [ 57.573434][ T1484] should_fail_ex.cold+0x5/0xa [ 57.573458][ T1484] should_failslab+0xc2/0x120 [ 57.573483][ T1484] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.573507][ T1484] ? __alloc_skb+0x140/0x710 [ 57.573534][ T1484] __alloc_skb+0x140/0x710 [ 57.573553][ T1484] ? __alloc_skb+0x5b7/0x710 [ 57.573574][ T1484] ? __pfx___alloc_skb+0x10/0x10 [ 57.573596][ T1484] ? __pfx_ip6_finish_output+0x10/0x10 [ 57.573619][ T1484] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 57.573647][ T1484] mld_newpack.isra.0+0x18e/0xa20 [ 57.573672][ T1484] ? lock_acquire+0x1b9/0x370 [ 57.573697][ T1484] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 57.573723][ T1484] ? rcu_is_watching+0x12/0xc0 [ 57.573750][ T1484] ? trace_contention_end+0x126/0x160 [ 57.573781][ T1484] ? add_grhead+0x299/0x340 [ 57.573802][ T1484] add_grhead+0x299/0x340 [ 57.573828][ T1484] add_grec+0x1389/0x1930 [ 57.573861][ T1484] ? __pfx_add_grec+0x10/0x10 [ 57.573892][ T1484] mld_ifc_work+0x3c5/0xc10 [ 57.573917][ T1484] ? rcu_is_watching+0x12/0xc0 [ 57.573949][ T1484] process_one_work+0xa23/0x1940 [ 57.573981][ T1484] ? __pfx_process_one_work+0x10/0x10 [ 57.574016][ T1484] ? __pfx_mld_ifc_work+0x10/0x10 [ 57.574044][ T1484] worker_thread+0x5ef/0xe50 [ 57.574072][ T1484] ? __pfx_worker_thread+0x10/0x10 [ 57.574094][ T1484] ? kthread+0x13a/0x450 [ 57.574111][ T1484] ? __pfx_worker_thread+0x10/0x10 [ 57.574130][ T1484] kthread+0x370/0x450 [ 57.574147][ T1484] ? __pfx_kthread+0x10/0x10 [ 57.574167][ T1484] ret_from_fork+0x72b/0xd50 [ 57.574195][ T1484] ? __pfx_ret_from_fork+0x10/0x10 [ 57.574223][ T1484] ? __switch_to+0x800/0x10f0 [ 57.574242][ T1484] ? __pfx_kthread+0x10/0x10 [ 57.574263][ T1484] ret_from_fork_asm+0x1a/0x30 [ 57.574303][ T1484] [ 57.576070][ T13] FAULT_INJECTION: forcing a failure. [ 57.576070][ T13] name failslab, interval 1, probability 1, space 0, times 988 [ 57.576662][ T5918] CPU: 2 UID: 0 PID: 5918 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 57.576684][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.576693][ T5918] Call Trace: [ 57.576700][ T5918] [ 57.576707][ T5918] dump_stack_lvl+0x100/0x190 [ 57.576733][ T5918] should_fail_ex.cold+0x5/0xa [ 57.576755][ T5918] should_failslab+0xc2/0x120 [ 57.576778][ T5918] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 57.576800][ T5918] ? __d_alloc+0x35/0xa50 [ 57.576826][ T5918] __d_alloc+0x35/0xa50 [ 57.576849][ T5918] d_alloc+0x4a/0x1e0 [ 57.576869][ T5918] lookup_one_qstr_excl+0x171/0x250 [ 57.576891][ T5918] ? mnt_want_write+0x161/0x410 [ 57.576909][ T5918] filename_create+0x1cf/0x400 [ 57.576934][ T5918] ? __pfx_filename_create+0x10/0x10 [ 57.576962][ T5918] ? find_held_lock+0x2b/0x80 [ 57.576999][ T5918] filename_symlinkat+0xe1/0x560 [ 57.577023][ T5918] ? __pfx_filename_symlinkat+0x10/0x10 [ 57.577056][ T5918] ? strncpy_from_user+0x19d/0x2d0 [ 57.577083][ T5918] ? do_getname+0x191/0x390 [ 57.577107][ T5918] __x64_sys_symlinkat+0x9c/0xe0 [ 57.577129][ T5918] do_syscall_64+0x115/0x870 [ 57.577149][ T5918] ? clear_bhb_loop+0x40/0x90 [ 57.577172][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.577190][ T5918] RIP: 0033:0x7fe1d5d9cf57 [ 57.577206][ T5918] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.577222][ T5918] RSP: 002b:00007ffe8ba27388 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 57.577240][ T5918] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1d5d9cf57 [ 57.577272][ T5918] RDX: 00007fe1d5e34e68 RSI: 00000000ffffff9c RDI: 00007ffe8ba27420 [ 57.577298][ T5918] RBP: 00007ffe8ba273cc R08: 0000000000000001 R09: 00000000ffffffff [ 57.577308][ T5918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 57.577318][ T5918] R13: 00000000000927c0 R14: 000000000000dffa R15: 00007ffe8ba27420 [ 57.577338][ T5918] [ 57.577964][ T5918] FAULT_INJECTION: forcing a failure. [ 57.577964][ T5918] name failslab, interval 1, probability 1, space 0, times 987 [ 57.578640][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.578655][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.578663][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.578679][ T13] Call Trace: [ 57.578683][ T13] [ 57.578687][ T13] dump_stack_lvl+0x100/0x190 [ 57.578702][ T13] should_fail_ex.cold+0x5/0xa [ 57.578717][ T13] should_failslab+0xc2/0x120 [ 57.578732][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.578747][ T13] ? __alloc_skb+0x140/0x710 [ 57.578762][ T13] __alloc_skb+0x140/0x710 [ 57.578776][ T13] ? __alloc_skb+0x5b7/0x710 [ 57.578793][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 57.578811][ T13] ? __timer_delete+0xec/0x1b0 [ 57.578845][ T13] ? __pfx___timer_delete+0x10/0x10 [ 57.578864][ T13] __ipv6_ifa_notify+0x1f1/0xf90 [ 57.578891][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.578915][ T13] ? __cancel_work+0x2b5/0x340 [ 57.578936][ T13] ? __cancel_work+0x245/0x340 [ 57.578955][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.578974][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.578994][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.579013][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.579036][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.579063][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.579081][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.579099][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.579122][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.579175][ T13] process_one_work+0xa23/0x1940 [ 57.579218][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.579242][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.579261][ T13] worker_thread+0x5ef/0xe50 [ 57.579287][ T13] ? kthread+0x13a/0x450 [ 57.579302][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.579319][ T13] kthread+0x370/0x450 [ 57.579335][ T13] ? __pfx_kthread+0x10/0x10 [ 57.579350][ T13] ret_from_fork+0x72b/0xd50 [ 57.579372][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.579396][ T13] ? __switch_to+0x800/0x10f0 [ 57.579413][ T13] ? __pfx_kthread+0x10/0x10 [ 57.579430][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.579460][ T13] [ 57.658053][ C1] FAULT_INJECTION: forcing a failure. [ 57.658053][ C1] name failslab, interval 1, probability 1, space 0, times 986 [ 57.660941][ T5918] CPU: 3 UID: 0 PID: 5918 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 57.660959][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.660966][ T5918] Call Trace: [ 57.660971][ T5918] [ 57.660976][ T5918] dump_stack_lvl+0x100/0x190 [ 57.660997][ T5918] should_fail_ex.cold+0x5/0xa [ 57.661012][ T5918] should_failslab+0xc2/0x120 [ 57.661032][ T5918] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 57.661048][ T5918] ? __d_alloc+0x35/0xa50 [ 57.661064][ T5918] __d_alloc+0x35/0xa50 [ 57.661080][ T5918] d_alloc_parallel+0x105/0x14b0 [ 57.661103][ T5918] ? __pfx_d_alloc_parallel+0x10/0x10 [ 57.661122][ T5918] ? __pfx___might_resched+0x10/0x10 [ 57.661137][ T5918] ? try_to_unlazy+0x296/0x910 [ 57.661156][ T5918] ? down_read+0x13b/0x4c0 [ 57.661172][ T5918] ? __pfx_down_read+0x10/0x10 [ 57.661188][ T5918] __lookup_slow+0x98/0x320 [ 57.661225][ T5918] lookup_slow+0x50/0x70 [ 57.661241][ T5918] link_path_walk+0x1712/0x1cc0 [ 57.661264][ T5918] path_openat+0x1c9/0x4280 [ 57.661276][ T5918] ? __kasan_slab_alloc+0x89/0x90 [ 57.661291][ T5918] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 57.661304][ T5918] ? do_getname+0x35/0x390 [ 57.661321][ T5918] ? __x64_sys_openat+0x12d/0x210 [ 57.661340][ T5918] ? look_up_lock_class+0x55/0x120 [ 57.661354][ T5918] ? __pfx_path_openat+0x10/0x10 [ 57.661366][ T5918] ? register_lock_class+0x40/0x560 [ 57.661385][ T5918] do_file_open+0x20e/0x430 [ 57.661399][ T5918] ? __pfx_do_file_open+0x10/0x10 [ 57.661417][ T5918] ? __pfx_kfree_link+0x10/0x10 [ 57.661439][ T5918] ? alloc_fd+0x471/0x7a0 [ 57.661453][ T5918] ? do_getname+0x191/0x390 [ 57.661469][ T5918] do_sys_openat2+0x10f/0x1e0 [ 57.661485][ T5918] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.661505][ T5918] __x64_sys_openat+0x12d/0x210 [ 57.661521][ T5918] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.661541][ T5918] do_syscall_64+0x115/0x870 [ 57.661554][ T5918] ? clear_bhb_loop+0x40/0x90 [ 57.661569][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.661582][ T5918] RIP: 0033:0x7fe1d5d5e6ce [ 57.661593][ T5918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.661604][ T5918] RSP: 002b:00007ffe8ba26dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.661616][ T5918] RAX: ffffffffffffffda RBX: 000055557381e500 RCX: 00007fe1d5d5e6ce [ 57.661623][ T5918] RDX: 0000000000080001 RSI: 00007fe1d5e34e44 RDI: ffffffffffffff9c [ 57.661630][ T5918] RBP: 00007fe1d5e34e44 R08: 0000000000000000 R09: 0000000000000000 [ 57.661637][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 57.661643][ T5918] R13: 00007ffe8ba26eb0 R14: 000000000000dffa R15: 00007ffe8ba27420 [ 57.661658][ T5918] [ 57.662232][ T1170] FAULT_INJECTION: forcing a failure. [ 57.662232][ T1170] name failslab, interval 1, probability 1, space 0, times 985 [ 57.662936][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 57.662959][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.662968][ C1] Call Trace: [ 57.662974][ C1] [ 57.662983][ C1] dump_stack_lvl+0x100/0x190 [ 57.663014][ C1] should_fail_ex.cold+0x5/0xa [ 57.663038][ C1] should_failslab+0xc2/0x120 [ 57.663062][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.663084][ C1] ? __alloc_skb+0x5b7/0x710 [ 57.663106][ C1] ? __alloc_skb+0x140/0x710 [ 57.663130][ C1] __alloc_skb+0x140/0x710 [ 57.663173][ C1] ? __alloc_skb+0x5b7/0x710 [ 57.663191][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 57.663214][ C1] ? lock_acquire+0x1b9/0x370 [ 57.663239][ C1] __netdev_alloc_skb+0x7a/0x960 [ 57.663264][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 57.663291][ C1] ? __lock_acquire+0x49f/0x1a40 [ 57.663316][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 57.663340][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 57.663369][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 57.663401][ C1] __iterate_interfaces+0x2e6/0x650 [ 57.663422][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 57.663448][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 57.663471][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 57.663496][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 57.663525][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 57.663553][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 57.663588][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 57.663610][ T362] FAULT_INJECTION: forcing a failure. [ 57.663610][ T362] name failslab, interval 1, probability 1, space 0, times 985 [ 57.663618][ C1] handle_softirqs+0x1ea/0x9b0 [ 57.663646][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 57.663670][ C1] ? _raw_spin_unlock+0x28/0x50 [ 57.663697][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 57.663718][ C1] __irq_exit_rcu+0x162/0x210 [ 57.663742][ C1] irq_exit_rcu+0x9/0x30 [ 57.663763][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 57.663783][ C1] [ 57.663788][ C1] [ 57.663795][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 57.663816][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 57.663836][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 57.663853][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000202 [ 57.663867][ C1] RAX: 000000000005bf9b RBX: ffff88801eae2540 RCX: ffffffff8bbb22d5 [ 57.663878][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5f23 RDI: ffffffff8c401680 [ 57.663890][ C1] RBP: ffffed1003d5c4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 57.663902][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 57.663914][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 57.663931][ C1] ? ct_kernel_exit+0x125/0x180 [ 57.663957][ C1] default_idle+0x9/0x10 [ 57.663978][ C1] default_idle_call+0x6c/0xb0 [ 57.663994][ C1] do_idle+0x3a7/0x5b0 [ 57.664025][ C1] ? __pfx_do_idle+0x10/0x10 [ 57.664056][ C1] cpu_startup_entry+0x4f/0x60 [ 57.664081][ C1] start_secondary+0x21d/0x2d0 [ 57.664107][ C1] ? __pfx_start_secondary+0x10/0x10 [ 57.664134][ C1] common_startup_64+0x13e/0x158 [ 57.664175][ C1] [ 57.664449][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 57.664463][ T1170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.664471][ T1170] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.664488][ T1170] Call Trace: [ 57.664492][ T1170] [ 57.664497][ T1170] dump_stack_lvl+0x100/0x190 [ 57.664511][ T1170] should_fail_ex.cold+0x5/0xa [ 57.664525][ T1170] should_failslab+0xc2/0x120 [ 57.664540][ T1170] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.664554][ T1170] ? __alloc_skb+0x140/0x710 [ 57.664569][ T1170] __alloc_skb+0x140/0x710 [ 57.664581][ T1170] ? __alloc_skb+0x5b7/0x710 [ 57.664593][ T1170] ? __pfx___alloc_skb+0x10/0x10 [ 57.664607][ T1170] ? kfree_skbmem+0x19f/0x210 [ 57.664626][ T1170] nsim_dev_trap_report_work+0x2af/0xd20 [ 57.664645][ T1170] process_one_work+0xa23/0x1940 [ 57.664663][ T1170] ? __pfx_process_one_work+0x10/0x10 [ 57.664679][ T1170] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 57.664694][ T1170] worker_thread+0x5ef/0xe50 [ 57.664711][ T1170] ? kthread+0x13a/0x450 [ 57.664721][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 57.664733][ T1170] kthread+0x370/0x450 [ 57.664743][ T1170] ? __pfx_kthread+0x10/0x10 [ 57.664754][ T1170] ret_from_fork+0x72b/0xd50 [ 57.664771][ T1170] ? __pfx_ret_from_fork+0x10/0x10 [ 57.664788][ T1170] ? __switch_to+0x800/0x10f0 [ 57.664800][ T1170] ? __pfx_kthread+0x10/0x10 [ 57.664811][ T1170] ret_from_fork_asm+0x1a/0x30 [ 57.664834][ T1170] [ 57.665208][ T1170] FAULT_INJECTION: forcing a failure. [ 57.665208][ T1170] name failslab, interval 1, probability 1, space 0, times 983 [ 57.666278][ T362] CPU: 2 UID: 0 PID: 362 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 57.666317][ T362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.666329][ T362] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.666354][ T362] Call Trace: [ 57.666360][ T362] [ 57.666367][ T362] dump_stack_lvl+0x100/0x190 [ 57.666391][ T362] should_fail_ex.cold+0x5/0xa [ 57.666413][ T362] should_failslab+0xc2/0x120 [ 57.666437][ T362] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.666461][ T362] ? __alloc_skb+0x140/0x710 [ 57.666486][ T362] __alloc_skb+0x140/0x710 [ 57.666505][ T362] ? __alloc_skb+0x5b7/0x710 [ 57.666525][ T362] ? __pfx___alloc_skb+0x10/0x10 [ 57.666549][ T362] ? kfree_skbmem+0x19f/0x210 [ 57.666579][ T362] nsim_dev_trap_report_work+0x2af/0xd20 [ 57.666614][ T362] process_one_work+0xa23/0x1940 [ 57.666645][ T362] ? __pfx_process_one_work+0x10/0x10 [ 57.666672][ T362] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 57.666698][ T362] worker_thread+0x5ef/0xe50 [ 57.666728][ T362] ? kthread+0x13a/0x450 [ 57.666744][ T362] ? __pfx_worker_thread+0x10/0x10 [ 57.666763][ T362] kthread+0x370/0x450 [ 57.666780][ T362] ? __pfx_kthread+0x10/0x10 [ 57.666800][ T362] ret_from_fork+0x72b/0xd50 [ 57.666827][ T362] ? __pfx_ret_from_fork+0x10/0x10 [ 57.666854][ T362] ? __switch_to+0x800/0x10f0 [ 57.666873][ T362] ? __pfx_kthread+0x10/0x10 [ 57.666892][ T362] ret_from_fork_asm+0x1a/0x30 [ 57.666930][ T362] [ 57.675273][ T5919] FAULT_INJECTION: forcing a failure. [ 57.675273][ T5919] name failslab, interval 1, probability 1, space 0, times 980 [ 57.675866][ T1170] CPU: 0 UID: 0 PID: 1170 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 57.675881][ T1170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.675888][ T1170] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.675906][ T1170] Call Trace: [ 57.675910][ T1170] [ 57.675914][ T1170] dump_stack_lvl+0x100/0x190 [ 57.675930][ T1170] should_fail_ex.cold+0x5/0xa [ 57.675945][ T1170] should_failslab+0xc2/0x120 [ 57.675960][ T1170] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.675975][ T1170] ? __alloc_skb+0x140/0x710 [ 57.675990][ T1170] __alloc_skb+0x140/0x710 [ 57.676002][ T1170] ? __alloc_skb+0x5b7/0x710 [ 57.676014][ T1170] ? __pfx___alloc_skb+0x10/0x10 [ 57.676029][ T1170] ? kfree_skbmem+0x19f/0x210 [ 57.676047][ T1170] nsim_dev_trap_report_work+0x2af/0xd20 [ 57.676067][ T1170] process_one_work+0xa23/0x1940 [ 57.676084][ T1170] ? __pfx_process_one_work+0x10/0x10 [ 57.676100][ T1170] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 57.676115][ T1170] worker_thread+0x5ef/0xe50 [ 57.676132][ T1170] ? kthread+0x13a/0x450 [ 57.676142][ T1170] ? __pfx_worker_thread+0x10/0x10 [ 57.676154][ T1170] kthread+0x370/0x450 [ 57.676164][ T1170] ? __pfx_kthread+0x10/0x10 [ 57.676175][ T1170] ret_from_fork+0x72b/0xd50 [ 57.676193][ T1170] ? __pfx_ret_from_fork+0x10/0x10 [ 57.676209][ T1170] ? __switch_to+0x800/0x10f0 [ 57.676221][ T1170] ? __pfx_kthread+0x10/0x10 [ 57.676232][ T1170] ret_from_fork_asm+0x1a/0x30 [ 57.676255][ T1170] [ 57.682890][ T13] FAULT_INJECTION: forcing a failure. [ 57.682890][ T13] name failslab, interval 1, probability 1, space 0, times 978 [ 57.683616][ T5919] CPU: 3 UID: 0 PID: 5919 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 57.683632][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.683639][ T5919] Call Trace: [ 57.683644][ T5919] [ 57.683649][ T5919] dump_stack_lvl+0x100/0x190 [ 57.683667][ T5919] should_fail_ex.cold+0x5/0xa [ 57.683683][ T5919] should_failslab+0xc2/0x120 [ 57.683698][ T5919] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.683712][ T5919] ? __pfx___might_resched+0x10/0x10 [ 57.683726][ T5919] ? configfs_new_dirent+0x312/0x570 [ 57.683739][ T5919] ? configfs_new_dirent+0x52/0x570 [ 57.683755][ T5919] configfs_new_dirent+0x52/0x570 [ 57.683768][ T5919] ? __pfx_down_write_nested+0x10/0x10 [ 57.683785][ T5919] configfs_make_dirent+0x36/0x1a0 [ 57.683801][ T5919] configfs_create_file+0xfe/0x180 [ 57.683822][ T5919] configfs_attach_item.part.0+0x147/0x4f0 [ 57.683841][ T5919] configfs_mkdir+0xa22/0xb70 [ 57.683861][ T5919] ? __pfx_configfs_mkdir+0x10/0x10 [ 57.683879][ T5919] ? inode_permission+0x374/0x620 [ 57.683899][ T5919] vfs_mkdir+0x361/0x850 [ 57.683917][ T5919] filename_mkdirat+0x48b/0x5e0 [ 57.683932][ T5919] ? __pfx_filename_mkdirat+0x10/0x10 [ 57.683946][ T5919] ? strncpy_from_user+0x19d/0x2d0 [ 57.683962][ T5919] ? do_getname+0x191/0x390 [ 57.683978][ T5919] __x64_sys_mkdir+0x6b/0x90 [ 57.683990][ T5919] do_syscall_64+0x115/0x870 [ 57.684003][ T5919] ? clear_bhb_loop+0x40/0x90 [ 57.684016][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.684028][ T5919] RIP: 0033:0x7fe1d5d9de99 [ 57.684038][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.684049][ T5919] RSP: 002b:00007fe1d6c7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 57.684060][ T5919] RAX: ffffffffffffffda RBX: 00007fe1d6025fa0 RCX: 00007fe1d5d9de99 [ 57.684067][ T5919] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000500 [ 57.684073][ T5919] RBP: 00007fe1d5e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 57.684079][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.684085][ T5919] R13: 00007fe1d6026038 R14: 00007fe1d6025fa0 R15: 00007ffe8ba27028 [ 57.684099][ T5919] [ 57.684223][ T5919] ================================================================== [ 57.685243][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.685257][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.685265][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.685282][ T13] Call Trace: [ 57.685286][ T13] [ 57.685290][ T13] dump_stack_lvl+0x100/0x190 [ 57.685305][ T13] should_fail_ex.cold+0x5/0xa [ 57.685319][ T13] should_failslab+0xc2/0x120 [ 57.685340][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.685354][ T13] ? __alloc_skb+0x140/0x710 [ 57.685370][ T13] __alloc_skb+0x140/0x710 [ 57.685382][ T13] ? __alloc_skb+0x5b7/0x710 [ 57.685394][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 57.685406][ T13] ? __timer_delete+0xec/0x1b0 [ 57.685418][ T13] ? __pfx___timer_delete+0x10/0x10 [ 57.685433][ T13] __ipv6_ifa_notify+0x1f1/0xf90 [ 57.685453][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.685470][ T13] ? __cancel_work+0x2b5/0x340 [ 57.685484][ T13] ? __cancel_work+0x245/0x340 [ 57.685497][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.685511][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.685527][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.685540][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.685556][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.685573][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.685586][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.685600][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.685616][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.685635][ T13] process_one_work+0xa23/0x1940 [ 57.685653][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.685669][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.685683][ T13] worker_thread+0x5ef/0xe50 [ 57.685700][ T13] ? kthread+0x13a/0x450 [ 57.685710][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.685721][ T13] kthread+0x370/0x450 [ 57.685731][ T13] ? __pfx_kthread+0x10/0x10 [ 57.685743][ T13] ret_from_fork+0x72b/0xd50 [ 57.685760][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.685776][ T13] ? __switch_to+0x800/0x10f0 [ 57.685788][ T13] ? __pfx_kthread+0x10/0x10 [ 57.685799][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.685822][ T13] [ 57.686544][ T13] FAULT_INJECTION: forcing a failure. [ 57.686544][ T13] name failslab, interval 1, probability 1, space 0, times 976 [ 57.687988][ T5919] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x18a/0x1d0 [ 57.688009][ T5919] Read of size 8 at addr ffff888034983358 by task syz.2.16/5919 [ 57.688019][ T5919] [ 57.688025][ T5919] CPU: 3 UID: 0 PID: 5919 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 57.688038][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.688045][ T5919] Call Trace: [ 57.688049][ T5919] [ 57.688053][ T5919] dump_stack_lvl+0x100/0x190 [ 57.688067][ T5919] print_report+0x13d/0x4b0 [ 57.688083][ T5919] ? __virt_addr_valid+0x239/0x430 [ 57.688098][ T5919] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 57.688114][ T5919] kasan_report+0xdf/0x1c0 [ 57.688130][ T5919] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 57.688145][ T5919] ? __pfx_uvcg_extension_drop+0x10/0x10 [ 57.688158][ T5919] __list_del_entry_valid_or_report+0x18a/0x1d0 [ 57.688173][ T5919] ? __pfx_uvcg_extension_drop+0x10/0x10 [ 57.688185][ T5919] uvcg_extension_drop+0x88/0x290 [ 57.688197][ T5919] ? __pfx_uvcg_extension_drop+0x10/0x10 [ 57.688210][ T5919] client_drop_item+0xa6/0x100 [ 57.688223][ T5919] configfs_mkdir+0x712/0xb70 [ 57.688239][ T5919] ? __pfx_configfs_mkdir+0x10/0x10 [ 57.688254][ T5919] ? inode_permission+0x374/0x620 [ 57.688270][ T5919] vfs_mkdir+0x361/0x850 [ 57.688285][ T5919] filename_mkdirat+0x48b/0x5e0 [ 57.688297][ T5919] ? __pfx_filename_mkdirat+0x10/0x10 [ 57.688309][ T5919] ? strncpy_from_user+0x19d/0x2d0 [ 57.688323][ T5919] ? do_getname+0x191/0x390 [ 57.688337][ T5919] __x64_sys_mkdir+0x6b/0x90 [ 57.688349][ T5919] do_syscall_64+0x115/0x870 [ 57.688362][ T5919] ? clear_bhb_loop+0x40/0x90 [ 57.688374][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.688385][ T5919] RIP: 0033:0x7fe1d5d9de99 [ 57.688393][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.688404][ T5919] RSP: 002b:00007fe1d6c7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 57.688414][ T5919] RAX: ffffffffffffffda RBX: 00007fe1d6025fa0 RCX: 00007fe1d5d9de99 [ 57.688422][ T5919] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000500 [ 57.688428][ T5919] RBP: 00007fe1d5e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 57.688435][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.688441][ T5919] R13: 00007fe1d6026038 R14: 00007fe1d6025fa0 R15: 00007ffe8ba27028 [ 57.688450][ T5919] [ 57.688454][ T5919] [ 57.689731][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.689745][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.689752][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.689767][ T13] Call Trace: [ 57.689771][ T13] [ 57.689776][ T13] dump_stack_lvl+0x100/0x190 [ 57.689790][ T13] should_fail_ex.cold+0x5/0xa [ 57.689804][ T13] should_failslab+0xc2/0x120 [ 57.689819][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.689834][ T13] ? __alloc_skb+0x140/0x710 [ 57.689852][ T13] __alloc_skb+0x140/0x710 [ 57.689864][ T13] ? __alloc_skb+0x5b7/0x710 [ 57.689891][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 57.689904][ T13] ? find_held_lock+0x2b/0x80 [ 57.689922][ T13] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 57.689937][ T13] inet6_rt_notify+0x1d2/0x4c0 [ 57.689956][ T13] fib6_add_rt2node+0x1c1d/0x3df0 [ 57.689974][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 57.689992][ T13] ? fib6_add+0x60e/0x1d30 [ 57.690003][ T13] fib6_add+0x60e/0x1d30 [ 57.690016][ T13] ? do_raw_spin_lock+0x128/0x260 [ 57.690032][ T13] ? __pfx_fib6_add+0x10/0x10 [ 57.690043][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.690062][ T13] ip6_ins_rt+0xb5/0x110 [ 57.690076][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 57.690104][ T13] ? nlmsg_notify+0xbf/0x290 [ 57.690115][ T13] ? nlmsg_notify+0xdc/0x290 [ 57.690126][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.690140][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 57.690159][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.690176][ T13] ? __cancel_work+0x2b5/0x340 [ 57.690190][ T13] ? __cancel_work+0x245/0x340 [ 57.690203][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.690217][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.690232][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.690245][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.690263][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.690280][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.690293][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.690307][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.690322][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.690345][ T13] process_one_work+0xa23/0x1940 [ 57.690362][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.690378][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.690393][ T13] worker_thread+0x5ef/0xe50 [ 57.690409][ T13] ? kthread+0x13a/0x450 [ 57.690419][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.690430][ T13] kthread+0x370/0x450 [ 57.690440][ T13] ? __pfx_kthread+0x10/0x10 [ 57.690452][ T13] ret_from_fork+0x72b/0xd50 [ 57.690469][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.690485][ T13] ? __switch_to+0x800/0x10f0 [ 57.690497][ T13] ? __pfx_kthread+0x10/0x10 [ 57.690508][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.690531][ T13] [ 57.691463][ T13] FAULT_INJECTION: forcing a failure. [ 57.691463][ T13] name failslab, interval 1, probability 1, space 0, times 975 [ 57.692929][ T5919] Allocated by task 5919: [ 57.692938][ T5919] kasan_save_stack+0x30/0x50 [ 57.692955][ T5919] kasan_save_track+0x14/0x30 [ 57.694715][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.694730][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.694737][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.694752][ T13] Call Trace: [ 57.694756][ T13] [ 57.694761][ T13] dump_stack_lvl+0x100/0x190 [ 57.694775][ T13] should_fail_ex.cold+0x5/0xa [ 57.694789][ T13] should_failslab+0xc2/0x120 [ 57.694804][ T13] __kmalloc_noprof+0xfc/0x820 [ 57.694817][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.694831][ T13] ? nsim_fib_event_nb+0x64c/0xe40 [ 57.694850][ T13] nsim_fib_event_nb+0x64c/0xe40 [ 57.694867][ T13] ? lock_acquire+0x1b9/0x370 [ 57.694882][ T13] notifier_call_chain+0x99/0x3f0 [ 57.694896][ T13] atomic_notifier_call_chain+0x71/0x1c0 [ 57.694909][ T13] call_fib_notifiers+0x33/0x70 [ 57.694926][ T13] fib6_add_rt2node+0x14e3/0x3df0 [ 57.694944][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 57.694963][ T13] ? fib6_add+0x60e/0x1d30 [ 57.694973][ T13] fib6_add+0x60e/0x1d30 [ 57.694986][ T13] ? do_raw_spin_lock+0x128/0x260 [ 57.695002][ T13] ? __pfx_fib6_add+0x10/0x10 [ 57.695013][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.695032][ T13] ip6_ins_rt+0xb5/0x110 [ 57.695045][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 57.695060][ T13] ? nlmsg_notify+0xbf/0x290 [ 57.695071][ T13] ? nlmsg_notify+0xdc/0x290 [ 57.695081][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.695096][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 57.695114][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.695131][ T13] ? __cancel_work+0x2b5/0x340 [ 57.695164][ T13] ? __cancel_work+0x245/0x340 [ 57.695178][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.695192][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.695207][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.695220][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.695236][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.695253][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.695265][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.695280][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.695296][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.695315][ T13] process_one_work+0xa23/0x1940 [ 57.695336][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.695352][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.695366][ T13] worker_thread+0x5ef/0xe50 [ 57.695383][ T13] ? kthread+0x13a/0x450 [ 57.695393][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.695405][ T13] kthread+0x370/0x450 [ 57.695415][ T13] ? __pfx_kthread+0x10/0x10 [ 57.695427][ T13] ret_from_fork+0x72b/0xd50 [ 57.695443][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.695460][ T13] ? __switch_to+0x800/0x10f0 [ 57.695472][ T13] ? __pfx_kthread+0x10/0x10 [ 57.695483][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.695506][ T13] [ 57.695963][ C0] FAULT_INJECTION: forcing a failure. [ 57.695963][ C0] name failslab, interval 1, probability 1, space 0, times 974 [ 57.696143][ T5919] __kasan_kmalloc+0xaa/0xb0 [ 57.697568][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.697582][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.697589][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.697603][ C0] Call Trace: [ 57.697608][ C0] [ 57.697612][ C0] dump_stack_lvl+0x100/0x190 [ 57.697630][ C0] should_fail_ex.cold+0x5/0xa [ 57.697649][ C0] should_failslab+0xc2/0x120 [ 57.697669][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.697687][ C0] ? dst_alloc+0x99/0x1a0 [ 57.697707][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 57.697731][ C0] dst_alloc+0x99/0x1a0 [ 57.697748][ C0] ip6_pol_route+0x9fd/0x1310 [ 57.697773][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 57.697794][ C0] ? ip6t_do_table+0xbed/0x1c90 [ 57.697812][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 57.697830][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 57.697847][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 57.697860][ C0] fib6_rule_lookup+0x52f/0x720 [ 57.697873][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 57.697885][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 57.697898][ C0] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 57.697914][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 57.697928][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.697943][ C0] ip6_route_input+0x662/0xc50 [ 57.697958][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 57.697972][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 57.697989][ C0] ? find_held_lock+0x2b/0x80 [ 57.698006][ C0] ? nf_hook.constprop.0+0x2d9/0x750 [ 57.698023][ C0] ? nf_hook.constprop.0+0x2e3/0x750 [ 57.698037][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 57.698052][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 57.698068][ C0] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 57.698086][ C0] ipv6_rcv+0x1e8/0x3d0 [ 57.698100][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 57.698113][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 57.698126][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 57.698139][ C0] ? lock_acquire+0x1b9/0x370 [ 57.698153][ C0] ? process_backlog+0x32a/0x1580 [ 57.698165][ C0] ? process_backlog+0x32a/0x1580 [ 57.698175][ C0] __netif_receive_skb+0x1f/0x120 [ 57.698187][ C0] process_backlog+0x37a/0x1580 [ 57.698201][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 57.698214][ C0] net_rx_action+0xa40/0xf20 [ 57.698229][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 57.698241][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 57.698257][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 57.698269][ C0] ? sched_clock+0x38/0x60 [ 57.698282][ C0] ? sched_clock_cpu+0x6c/0x570 [ 57.698300][ C0] ? mark_held_locks+0x40/0x70 [ 57.698314][ C0] handle_softirqs+0x1ea/0x9b0 [ 57.698330][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 57.698348][ C0] ? irqtime_account_delta+0x9a/0x110 [ 57.698360][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 57.698371][ C0] do_softirq+0xac/0xe0 [ 57.698384][ C0] [ 57.698388][ C0] [ 57.698391][ C0] __local_bh_enable_ip+0xf8/0x120 [ 57.698405][ C0] ? __dev_queue_xmit+0xa12/0x4970 [ 57.698415][ C0] __dev_queue_xmit+0xa27/0x4970 [ 57.698428][ C0] ? ip6mr_fib_lookup+0x133/0x1a0 [ 57.698442][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 57.698456][ C0] ? __lock_acquire+0x49f/0x1a40 [ 57.698479][ C0] ip6_finish_output2+0xfd4/0x1ce0 [ 57.698496][ C0] __ip6_finish_output+0x357/0xdf0 [ 57.698511][ C0] ip6_output+0x2aa/0xa60 [ 57.698525][ C0] ? __pfx_ip6_output+0x10/0x10 [ 57.698539][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 57.698552][ C0] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 57.698566][ C0] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 57.698581][ C0] ? __pfx_ip6_output+0x10/0x10 [ 57.698593][ C0] NF_HOOK.constprop.0+0x115/0x5a0 [ 57.698607][ C0] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 57.698623][ C0] ? __pfx_dst_output+0x10/0x10 [ 57.698638][ C0] mld_sendpack+0x8f7/0xec0 [ 57.698653][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 57.698673][ C0] mld_send_initial_cr+0x219/0x320 [ 57.698688][ C0] ipv6_mc_dad_complete+0xa7/0x1d0 [ 57.698705][ C0] addrconf_dad_completed+0xd91/0xff0 [ 57.698720][ C0] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.698737][ C0] ? addrconf_dad_work+0x83c/0x1360 [ 57.698749][ C0] addrconf_dad_work+0x83c/0x1360 [ 57.698763][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.698777][ C0] ? rcu_is_watching+0x12/0xc0 [ 57.698795][ C0] process_one_work+0xa23/0x1940 [ 57.698812][ C0] ? __pfx_process_one_work+0x10/0x10 [ 57.698828][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.698842][ C0] worker_thread+0x5ef/0xe50 [ 57.698858][ C0] ? kthread+0x13a/0x450 [ 57.698868][ C0] ? __pfx_worker_thread+0x10/0x10 [ 57.698879][ C0] kthread+0x370/0x450 [ 57.698889][ C0] ? __pfx_kthread+0x10/0x10 [ 57.698900][ C0] ret_from_fork+0x72b/0xd50 [ 57.698915][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 57.698931][ C0] ? __switch_to+0x800/0x10f0 [ 57.698943][ C0] ? __pfx_kthread+0x10/0x10 [ 57.698954][ C0] ret_from_fork_asm+0x1a/0x30 [ 57.698975][ C0] [ 57.774138][ T13] FAULT_INJECTION: forcing a failure. [ 57.774138][ T13] name failslab, interval 1, probability 1, space 0, times 973 [ 57.775576][ T5919] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 57.775601][ T5919] uvcg_extension_make+0x98/0x4e0 [ 57.775615][ T5919] configfs_mkdir+0x7f6/0xb70 [ 57.777854][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.777871][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.777878][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.777896][ T13] Call Trace: [ 57.777900][ T13] [ 57.777906][ T13] dump_stack_lvl+0x100/0x190 [ 57.777922][ T13] should_fail_ex.cold+0x5/0xa [ 57.777937][ T13] should_failslab+0xc2/0x120 [ 57.777953][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.777967][ T13] ? dst_alloc+0x99/0x1a0 [ 57.777980][ T13] ? __pfx_ip6_dst_gc+0x10/0x10 [ 57.777997][ T13] dst_alloc+0x99/0x1a0 [ 57.778011][ T13] icmp6_dst_alloc+0x79/0x4f0 [ 57.778026][ T13] mld_sendpack+0x5ae/0xec0 [ 57.778043][ T13] ? __pfx_mld_sendpack+0x10/0x10 [ 57.778065][ T13] mld_send_initial_cr+0x219/0x320 [ 57.778081][ T13] ipv6_mc_dad_complete+0xa7/0x1d0 [ 57.778100][ T13] addrconf_dad_completed+0xd91/0xff0 [ 57.778116][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.778134][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.778147][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.778162][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.778177][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.778197][ T13] process_one_work+0xa23/0x1940 [ 57.778216][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.778232][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.778247][ T13] worker_thread+0x5ef/0xe50 [ 57.778264][ T13] ? kthread+0x13a/0x450 [ 57.778275][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.778286][ T13] kthread+0x370/0x450 [ 57.778296][ T13] ? __pfx_kthread+0x10/0x10 [ 57.778308][ T13] ret_from_fork+0x72b/0xd50 [ 57.778326][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.778345][ T13] ? __switch_to+0x800/0x10f0 [ 57.778357][ T13] ? __pfx_kthread+0x10/0x10 [ 57.778368][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.778392][ T13] [ 57.781535][ T13] FAULT_INJECTION: forcing a failure. [ 57.781535][ T13] name failslab, interval 1, probability 1, space 0, times 972 [ 57.781992][ T5919] vfs_mkdir+0x361/0x850 [ 57.782013][ T5919] filename_mkdirat+0x48b/0x5e0 [ 57.782025][ T5919] __x64_sys_mkdir+0x6b/0x90 [ 57.782037][ T5919] do_syscall_64+0x115/0x870 [ 57.788178][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.788202][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.788213][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.788238][ T13] Call Trace: [ 57.788245][ T13] [ 57.788252][ T13] dump_stack_lvl+0x100/0x190 [ 57.788276][ T13] should_fail_ex.cold+0x5/0xa [ 57.788299][ T13] should_failslab+0xc2/0x120 [ 57.788323][ T13] __kmalloc_noprof+0xfc/0x820 [ 57.788343][ T13] ? __local_bh_enable_ip+0x9e/0x120 [ 57.788367][ T13] ? ___neigh_create+0x1532/0x2940 [ 57.788399][ T13] ___neigh_create+0x1532/0x2940 [ 57.788429][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.788452][ T13] ? __local_bh_enable_ip+0x9e/0x120 [ 57.788476][ T13] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 57.788501][ T13] ? __pfx____neigh_create+0x10/0x10 [ 57.788532][ T13] ip6_finish_output2+0xffa/0x1ce0 [ 57.788564][ T13] __ip6_finish_output+0x357/0xdf0 [ 57.788589][ T13] ip6_output+0x2aa/0xa60 [ 57.788611][ T13] ? __pfx_ip6_output+0x10/0x10 [ 57.788635][ T13] ? __pfx_ip6_finish_output+0x10/0x10 [ 57.788656][ T13] ? ndisc_send_skb+0xbba/0x1bf0 [ 57.788677][ T13] ? ndisc_send_skb+0xbba/0x1bf0 [ 57.788701][ T13] ? __pfx_ip6_output+0x10/0x10 [ 57.788721][ T13] ndisc_send_skb+0xa85/0x1bf0 [ 57.788748][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 57.788768][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 57.788792][ T13] ? __pfx_dst_output+0x10/0x10 [ 57.788813][ T13] ? __asan_memcpy+0x3c/0x60 [ 57.788845][ T13] ? mark_held_locks+0x40/0x70 [ 57.788871][ T13] ndisc_send_ns+0xc6/0x140 [ 57.788892][ T13] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 57.788915][ T13] ? __pfx_ndisc_send_ns+0x10/0x10 [ 57.788946][ T13] addrconf_dad_work+0xca1/0x1360 [ 57.788970][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.788995][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.789023][ T13] process_one_work+0xa23/0x1940 [ 57.789053][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.789080][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.789103][ T13] worker_thread+0x5ef/0xe50 [ 57.789132][ T13] ? kthread+0x13a/0x450 [ 57.789165][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.789184][ T13] kthread+0x370/0x450 [ 57.789201][ T13] ? __pfx_kthread+0x10/0x10 [ 57.789220][ T13] ret_from_fork+0x72b/0xd50 [ 57.789245][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.789271][ T13] ? __switch_to+0x800/0x10f0 [ 57.789290][ T13] ? __pfx_kthread+0x10/0x10 [ 57.789308][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.789347][ T13] [ 57.789898][ T13] FAULT_INJECTION: forcing a failure. [ 57.789898][ T13] name failslab, interval 1, probability 1, space 0, times 971 [ 57.790594][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.790610][ T5919] [ 57.790613][ T5919] Freed by task 5919: [ 57.790619][ T5919] kasan_save_stack+0x30/0x50 [ 57.790633][ T5919] kasan_save_track+0x14/0x30 [ 57.790645][ T5919] kasan_save_free_info+0x3b/0x70 [ 57.793703][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.793718][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.793726][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.793742][ T13] Call Trace: [ 57.793747][ T13] [ 57.793752][ T13] dump_stack_lvl+0x100/0x190 [ 57.793767][ T13] should_fail_ex.cold+0x5/0xa [ 57.793782][ T13] should_failslab+0xc2/0x120 [ 57.793798][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 57.793812][ T13] ? dst_alloc+0x99/0x1a0 [ 57.793830][ T13] ? __pfx_ip6_dst_gc+0x10/0x10 [ 57.793847][ T13] dst_alloc+0x99/0x1a0 [ 57.793860][ T13] icmp6_dst_alloc+0x79/0x4f0 [ 57.793876][ T13] ndisc_send_skb+0x133f/0x1bf0 [ 57.793890][ T13] ? sk_alloc+0xcad/0xe80 [ 57.793905][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 57.793919][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 57.793936][ T13] ? __asan_memcpy+0x3c/0x60 [ 57.793951][ T13] ? mark_held_locks+0x40/0x70 [ 57.793967][ T13] ndisc_send_ns+0xc6/0x140 [ 57.793981][ T13] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 57.793996][ T13] ? __pfx_ndisc_send_ns+0x10/0x10 [ 57.794015][ T13] addrconf_dad_work+0xca1/0x1360 [ 57.794030][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.794045][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.794065][ T13] process_one_work+0xa23/0x1940 [ 57.794082][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.794099][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.794113][ T13] worker_thread+0x5ef/0xe50 [ 57.794130][ T13] ? kthread+0x13a/0x450 [ 57.794141][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.794152][ T13] kthread+0x370/0x450 [ 57.794163][ T13] ? __pfx_kthread+0x10/0x10 [ 57.794174][ T13] ret_from_fork+0x72b/0xd50 [ 57.794191][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.794208][ T13] ? __switch_to+0x800/0x10f0 [ 57.794220][ T13] ? __pfx_kthread+0x10/0x10 [ 57.794232][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.794255][ T13] [ 57.797471][ T13] FAULT_INJECTION: forcing a failure. [ 57.797471][ T13] name failslab, interval 1, probability 1, space 0, times 970 [ 57.798544][ T5919] __kasan_slab_free+0x5f/0x80 [ 57.798562][ T5919] kfree+0x22b/0x6c0 [ 57.798578][ T5919] config_item_cleanup+0x146/0x240 [ 57.798593][ T5919] config_item_put+0x93/0xb0 [ 57.798608][ T5919] uvcg_extension_drop+0x80/0x290 [ 57.798620][ T5919] client_drop_item+0xa6/0x100 [ 57.801685][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.801708][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.801720][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.801744][ T13] Call Trace: [ 57.801751][ T13] [ 57.801758][ T13] dump_stack_lvl+0x100/0x190 [ 57.801782][ T13] should_fail_ex.cold+0x5/0xa [ 57.801802][ T13] ? kasan_save_stack+0x30/0x50 [ 57.801831][ T13] should_failslab+0xc2/0x120 [ 57.801855][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 57.801884][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.801906][ T13] ? nsim_fib_event_nb+0x1a8/0xe40 [ 57.801937][ T13] nsim_fib_event_nb+0x1a8/0xe40 [ 57.801964][ T13] ? lock_acquire+0x1b9/0x370 [ 57.801988][ T13] notifier_call_chain+0x99/0x3f0 [ 57.802012][ T13] atomic_notifier_call_chain+0x71/0x1c0 [ 57.802032][ T13] call_fib_notifiers+0x33/0x70 [ 57.802060][ T13] fib6_add_rt2node+0x14e3/0x3df0 [ 57.802092][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 57.802122][ T13] ? fib6_add+0x60e/0x1d30 [ 57.802141][ T13] fib6_add+0x60e/0x1d30 [ 57.802162][ T13] ? do_raw_spin_lock+0x128/0x260 [ 57.802187][ T13] ? __pfx_fib6_add+0x10/0x10 [ 57.802204][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.802236][ T13] ip6_ins_rt+0xb5/0x110 [ 57.802258][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 57.802282][ T13] ? nlmsg_notify+0xbf/0x290 [ 57.802299][ T13] ? nlmsg_notify+0xdc/0x290 [ 57.802316][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.802339][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 57.802369][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.802395][ T13] ? __cancel_work+0x2b5/0x340 [ 57.802418][ T13] ? __cancel_work+0x245/0x340 [ 57.802439][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.802461][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.802487][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.802507][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.802533][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.802562][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.802581][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.802605][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.802630][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.802661][ T13] process_one_work+0xa23/0x1940 [ 57.802692][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.802719][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.802743][ T13] worker_thread+0x5ef/0xe50 [ 57.802772][ T13] ? kthread+0x13a/0x450 [ 57.802788][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.802807][ T13] kthread+0x370/0x450 [ 57.802823][ T13] ? __pfx_kthread+0x10/0x10 [ 57.802848][ T13] ret_from_fork+0x72b/0xd50 [ 57.802875][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.802901][ T13] ? __switch_to+0x800/0x10f0 [ 57.802920][ T13] ? __pfx_kthread+0x10/0x10 [ 57.802940][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.802978][ T13] [ 57.839354][ T59] FAULT_INJECTION: forcing a failure. [ 57.839354][ T59] name failslab, interval 1, probability 1, space 0, times 969 [ 57.840391][ T5919] configfs_mkdir+0x712/0xb70 [ 57.840413][ T5919] vfs_mkdir+0x361/0x850 [ 57.842379][ T59] CPU: 2 UID: 0 PID: 59 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.842403][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.842415][ T59] Workqueue: events nsim_fib_event_work [ 57.842447][ T59] Call Trace: [ 57.842454][ T59] [ 57.842462][ T59] dump_stack_lvl+0x100/0x190 [ 57.842487][ T59] should_fail_ex.cold+0x5/0xa [ 57.842512][ T59] should_failslab+0xc2/0x120 [ 57.842537][ T59] __kmalloc_cache_noprof+0x91/0x6c0 [ 57.842568][ T59] ? nsim_fib_event_work+0xfdd/0x6310 [ 57.842598][ T59] nsim_fib_event_work+0xfdd/0x6310 [ 57.842634][ T59] ? debug_object_deactivate+0x2e4/0x3b0 [ 57.842660][ T59] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 57.842692][ T59] ? rcu_is_watching+0x12/0xc0 [ 57.842721][ T59] process_one_work+0xa23/0x1940 [ 57.842750][ T59] ? __pfx_process_one_work+0x10/0x10 [ 57.842776][ T59] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 57.842804][ T59] worker_thread+0x5ef/0xe50 [ 57.842837][ T59] ? __pfx_worker_thread+0x10/0x10 [ 57.842859][ T59] ? kthread+0x13a/0x450 [ 57.842875][ T59] ? __pfx_worker_thread+0x10/0x10 [ 57.842893][ T59] kthread+0x370/0x450 [ 57.842910][ T59] ? __pfx_kthread+0x10/0x10 [ 57.842929][ T59] ret_from_fork+0x72b/0xd50 [ 57.842957][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 57.842983][ T59] ? __switch_to+0x800/0x10f0 [ 57.843003][ T59] ? __pfx_kthread+0x10/0x10 [ 57.843022][ T59] ret_from_fork_asm+0x1a/0x30 [ 57.843060][ T59] [ 57.849557][ T5832] FAULT_INJECTION: forcing a failure. [ 57.849557][ T5832] name failslab, interval 1, probability 1, space 0, times 968 [ 57.850735][ T5919] filename_mkdirat+0x48b/0x5e0 [ 57.850754][ T5919] __x64_sys_mkdir+0x6b/0x90 [ 57.850765][ T5919] do_syscall_64+0x115/0x870 [ 57.850778][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.859426][ T13] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 57.861467][ T5919] [ 57.861473][ T5919] The buggy address belongs to the object at ffff888034983300 [ 57.861473][ T5919] which belongs to the cache kmalloc-192 of size 192 [ 57.861484][ T5919] The buggy address is located 88 bytes inside of [ 57.861484][ T5919] freed 192-byte region [ffff888034983300, ffff8880349833c0) [ 57.861495][ T5919] [ 57.861498][ T5919] The buggy address belongs to the physical page: [ 57.861503][ T5919] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34983 [ 57.861514][ T5919] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.861525][ T5919] page_type: f5(slab) [ 57.865684][ T5832] CPU: 2 UID: 0 PID: 5832 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) [ 57.865707][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.865719][ T5832] Workqueue: mld mld_ifc_work [ 57.865748][ T5832] Call Trace: [ 57.865755][ T5832] [ 57.865763][ T5832] dump_stack_lvl+0x100/0x190 [ 57.865789][ T5832] should_fail_ex.cold+0x5/0xa [ 57.865813][ T5832] should_failslab+0xc2/0x120 [ 57.865846][ T5832] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.865870][ T5832] ? __alloc_skb+0x140/0x710 [ 57.865896][ T5832] __alloc_skb+0x140/0x710 [ 57.865915][ T5832] ? __alloc_skb+0x5b7/0x710 [ 57.865935][ T5832] ? __pfx___alloc_skb+0x10/0x10 [ 57.865954][ T5832] ? do_raw_spin_lock+0x128/0x260 [ 57.865981][ T5832] ? find_held_lock+0x2b/0x80 [ 57.866012][ T5832] mld_newpack.isra.0+0x18e/0xa20 [ 57.866035][ T5832] ? lock_acquire+0x1b9/0x370 [ 57.866059][ T5832] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 57.866083][ T5832] ? rcu_is_watching+0x12/0xc0 [ 57.866110][ T5832] ? trace_contention_end+0x126/0x160 [ 57.866139][ T5832] ? add_grhead+0x299/0x340 [ 57.866159][ T5832] add_grhead+0x299/0x340 [ 57.866184][ T5832] add_grec+0x1389/0x1930 [ 57.866214][ T5832] ? __pfx_add_grec+0x10/0x10 [ 57.866265][ T5832] mld_ifc_work+0x3c5/0xc10 [ 57.866289][ T5832] ? rcu_is_watching+0x12/0xc0 [ 57.866319][ T5832] process_one_work+0xa23/0x1940 [ 57.866349][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 57.866377][ T5832] ? __pfx_mld_ifc_work+0x10/0x10 [ 57.866403][ T5832] worker_thread+0x5ef/0xe50 [ 57.866430][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 57.866450][ T5832] ? kthread+0x13a/0x450 [ 57.866467][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 57.866485][ T5832] kthread+0x370/0x450 [ 57.866502][ T5832] ? __pfx_kthread+0x10/0x10 [ 57.866521][ T5832] ret_from_fork+0x72b/0xd50 [ 57.866547][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 57.866574][ T5832] ? __switch_to+0x800/0x10f0 [ 57.866593][ T5832] ? __pfx_kthread+0x10/0x10 [ 57.866612][ T5832] ret_from_fork_asm+0x1a/0x30 [ 57.866651][ T5832] [ 57.870945][ T13] FAULT_INJECTION: forcing a failure. [ 57.870945][ T13] name failslab, interval 1, probability 1, space 0, times 966 [ 57.871562][ T5919] raw: 00fff00000000000 ffff88801bc423c0 dead000000000100 dead000000000122 [ 57.871574][ T5919] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 57.871580][ T5919] page dumped because: kasan: bad access detected [ 57.871586][ T5919] page_owner tracks the page as allocated [ 57.871590][ T5919] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16007878600, free_ts 15817405881 [ 57.871610][ T5919] post_alloc_hook+0xfd/0x120 [ 57.874123][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.874145][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.874157][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.874183][ T13] Call Trace: [ 57.874190][ T13] [ 57.874197][ T13] dump_stack_lvl+0x100/0x190 [ 57.874222][ T13] should_fail_ex.cold+0x5/0xa [ 57.874242][ T13] ? kasan_save_stack+0x30/0x50 [ 57.874265][ T13] should_failslab+0xc2/0x120 [ 57.874290][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 57.874318][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.874340][ T13] ? nsim_fib_event_nb+0x1a8/0xe40 [ 57.874370][ T13] nsim_fib_event_nb+0x1a8/0xe40 [ 57.874397][ T13] ? lock_acquire+0x1b9/0x370 [ 57.874420][ T13] notifier_call_chain+0x99/0x3f0 [ 57.874444][ T13] atomic_notifier_call_chain+0x71/0x1c0 [ 57.874465][ T13] call_fib_notifiers+0x33/0x70 [ 57.874490][ T13] fib6_add_rt2node+0x14e3/0x3df0 [ 57.874521][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 57.874553][ T13] ? fib6_add+0x60e/0x1d30 [ 57.874571][ T13] fib6_add+0x60e/0x1d30 [ 57.874593][ T13] ? do_raw_spin_lock+0x128/0x260 [ 57.874618][ T13] ? __pfx_fib6_add+0x10/0x10 [ 57.874636][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.874668][ T13] ip6_ins_rt+0xb5/0x110 [ 57.874690][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 57.874713][ T13] ? nlmsg_notify+0xbf/0x290 [ 57.874730][ T13] ? nlmsg_notify+0xdc/0x290 [ 57.874748][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.874772][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 57.874801][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 57.874833][ T13] ? __cancel_work+0x2b5/0x340 [ 57.874856][ T13] ? __cancel_work+0x245/0x340 [ 57.874878][ T13] ? __pfx___cancel_work+0x10/0x10 [ 57.874899][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.874924][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 57.874945][ T13] addrconf_dad_completed+0x195/0xff0 [ 57.874970][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 57.875000][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 57.875020][ T13] addrconf_dad_work+0x83c/0x1360 [ 57.875044][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.875069][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.875101][ T13] process_one_work+0xa23/0x1940 [ 57.875131][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.875184][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.875207][ T13] worker_thread+0x5ef/0xe50 [ 57.875236][ T13] ? kthread+0x13a/0x450 [ 57.875253][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.875271][ T13] kthread+0x370/0x450 [ 57.875288][ T13] ? __pfx_kthread+0x10/0x10 [ 57.875307][ T13] ret_from_fork+0x72b/0xd50 [ 57.875333][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.875360][ T13] ? __switch_to+0x800/0x10f0 [ 57.875378][ T13] ? __pfx_kthread+0x10/0x10 [ 57.875395][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.875434][ T13] [ 57.929494][ T13] FAULT_INJECTION: forcing a failure. [ 57.929494][ T13] name failslab, interval 1, probability 1, space 0, times 965 [ 57.929870][ T5919] get_page_from_freelist+0xf48/0x3530 [ 57.929889][ T5919] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 57.929900][ T5919] new_slab+0xa2/0x640 [ 57.929910][ T5919] refill_objects+0xe3/0x410 [ 57.931571][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 57.931599][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.931607][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 57.931625][ T13] Call Trace: [ 57.931630][ T13] [ 57.931635][ T13] dump_stack_lvl+0x100/0x190 [ 57.931651][ T13] should_fail_ex.cold+0x5/0xa [ 57.931666][ T13] should_failslab+0xc2/0x120 [ 57.931682][ T13] __kmalloc_noprof+0xfc/0x820 [ 57.931696][ T13] ? __local_bh_enable_ip+0x9e/0x120 [ 57.931712][ T13] ? ___neigh_create+0x1532/0x2940 [ 57.931731][ T13] ___neigh_create+0x1532/0x2940 [ 57.931751][ T13] ? __lock_acquire+0x49f/0x1a40 [ 57.931767][ T13] ? __local_bh_enable_ip+0x9e/0x120 [ 57.931783][ T13] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 57.931799][ T13] ? __pfx____neigh_create+0x10/0x10 [ 57.931819][ T13] ip6_finish_output2+0xffa/0x1ce0 [ 57.931838][ T13] __ip6_finish_output+0x357/0xdf0 [ 57.931859][ T13] ip6_output+0x2aa/0xa60 [ 57.931874][ T13] ? __pfx_ip6_output+0x10/0x10 [ 57.931890][ T13] ? __pfx_ip6_finish_output+0x10/0x10 [ 57.931904][ T13] ? ndisc_send_skb+0xbba/0x1bf0 [ 57.931918][ T13] ? ndisc_send_skb+0xbba/0x1bf0 [ 57.931934][ T13] ? __pfx_ip6_output+0x10/0x10 [ 57.931947][ T13] ndisc_send_skb+0xa85/0x1bf0 [ 57.931964][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 57.931978][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 57.931994][ T13] ? __pfx_dst_output+0x10/0x10 [ 57.932008][ T13] ? __asan_memcpy+0x3c/0x60 [ 57.932024][ T13] ? mark_held_locks+0x40/0x70 [ 57.932040][ T13] ndisc_send_ns+0xc6/0x140 [ 57.932054][ T13] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 57.932069][ T13] ? __pfx_ndisc_send_ns+0x10/0x10 [ 57.932089][ T13] addrconf_dad_work+0xca1/0x1360 [ 57.932104][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.932120][ T13] ? rcu_is_watching+0x12/0xc0 [ 57.932140][ T13] process_one_work+0xa23/0x1940 [ 57.932158][ T13] ? __pfx_process_one_work+0x10/0x10 [ 57.932175][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 57.932190][ T13] worker_thread+0x5ef/0xe50 [ 57.932208][ T13] ? kthread+0x13a/0x450 [ 57.932218][ T13] ? __pfx_worker_thread+0x10/0x10 [ 57.932230][ T13] kthread+0x370/0x450 [ 57.932241][ T13] ? __pfx_kthread+0x10/0x10 [ 57.932253][ T13] ret_from_fork+0x72b/0xd50 [ 57.932270][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 57.932287][ T13] ? __switch_to+0x800/0x10f0 [ 57.932299][ T13] ? __pfx_kthread+0x10/0x10 [ 57.932311][ T13] ret_from_fork_asm+0x1a/0x30 [ 57.932335][ T13] [ 57.969577][ T362] FAULT_INJECTION: forcing a failure. [ 57.969577][ T362] name failslab, interval 1, probability 1, space 0, times 963 [ 57.971025][ T5919] __pcs_replace_empty_main+0x376/0x680 [ 57.971051][ T5919] __kmalloc_cache_noprof+0x479/0x6c0 [ 57.971069][ T5919] call_usermodehelper_setup+0xaf/0x360 [ 57.973180][ T362] CPU: 2 UID: 0 PID: 362 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 57.973203][ T362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.973216][ T362] Workqueue: events_unbound cfg80211_wiphy_work [ 57.973247][ T362] Call Trace: [ 57.973254][ T362] [ 57.973262][ T362] dump_stack_lvl+0x100/0x190 [ 57.973288][ T362] should_fail_ex.cold+0x5/0xa [ 57.973312][ T362] should_failslab+0xc2/0x120 [ 57.973337][ T362] __kmalloc_noprof+0xfc/0x820 [ 57.973359][ T362] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 57.973392][ T362] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 57.973420][ T362] ? __mod_timer+0x40e/0xca0 [ 57.973451][ T362] ? __lock_acquire+0x49f/0x1a40 [ 57.973475][ T362] ? sta_get_last_rx_stats+0x1ad/0x3a0 [ 57.973500][ T362] ? __pfx_round_jiffies+0x10/0x10 [ 57.973525][ T362] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 57.973564][ T362] ? rcu_is_watching+0x12/0xc0 [ 57.973596][ T362] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 57.973623][ T362] ? do_raw_spin_lock+0x128/0x260 [ 57.973649][ T362] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 57.973688][ T362] ieee80211_iface_work+0xa9a/0x1070 [ 57.973720][ T362] cfg80211_wiphy_work+0x2b7/0x550 [ 57.973749][ T362] process_one_work+0xa23/0x1940 [ 57.973779][ T362] ? __pfx_process_one_work+0x10/0x10 [ 57.973806][ T362] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 57.973840][ T362] worker_thread+0x5ef/0xe50 [ 57.973869][ T362] ? kthread+0x13a/0x450 [ 57.973887][ T362] ? __pfx_worker_thread+0x10/0x10 [ 57.973905][ T362] kthread+0x370/0x450 [ 57.973922][ T362] ? __pfx_kthread+0x10/0x10 [ 57.973942][ T362] ret_from_fork+0x72b/0xd50 [ 57.973968][ T362] ? __pfx_ret_from_fork+0x10/0x10 [ 57.973994][ T362] ? __switch_to+0x800/0x10f0 [ 57.974015][ T362] ? __pfx_kthread+0x10/0x10 [ 57.974034][ T362] ret_from_fork_asm+0x1a/0x30 [ 57.974073][ T362] [ 57.989678][ T362] FAULT_INJECTION: forcing a failure. [ 57.989678][ T362] name failslab, interval 1, probability 1, space 0, times 961 [ 57.990049][ T5919] kobject_uevent_env+0x17c1/0x18b0 [ 57.991878][ T362] CPU: 2 UID: 0 PID: 362 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 57.991899][ T362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.991909][ T362] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.991932][ T362] Call Trace: [ 57.991938][ T362] [ 57.991946][ T362] dump_stack_lvl+0x100/0x190 [ 57.991970][ T362] should_fail_ex.cold+0x5/0xa [ 57.991994][ T362] should_failslab+0xc2/0x120 [ 57.992019][ T362] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.992043][ T362] ? __alloc_skb+0x140/0x710 [ 57.992068][ T362] __alloc_skb+0x140/0x710 [ 57.992087][ T362] ? __alloc_skb+0x5b7/0x710 [ 57.992106][ T362] ? __pfx___alloc_skb+0x10/0x10 [ 57.992129][ T362] ? kfree_skbmem+0x19f/0x210 [ 57.992158][ T362] nsim_dev_trap_report_work+0x2af/0xd20 [ 57.992190][ T362] process_one_work+0xa23/0x1940 [ 57.992218][ T362] ? __pfx_process_one_work+0x10/0x10 [ 57.992244][ T362] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 57.992268][ T362] worker_thread+0x5ef/0xe50 [ 57.992298][ T362] ? kthread+0x13a/0x450 [ 57.992315][ T362] ? __pfx_worker_thread+0x10/0x10 [ 57.992333][ T362] kthread+0x370/0x450 [ 57.992350][ T362] ? __pfx_kthread+0x10/0x10 [ 57.992370][ T362] ret_from_fork+0x72b/0xd50 [ 57.992398][ T362] ? __pfx_ret_from_fork+0x10/0x10 [ 57.992424][ T362] ? __switch_to+0x800/0x10f0 [ 57.992444][ T362] ? __pfx_kthread+0x10/0x10 [ 57.992463][ T362] ret_from_fork_asm+0x1a/0x30 [ 57.992501][ T362] [ 57.993322][ T362] FAULT_INJECTION: forcing a failure. [ 57.993322][ T362] name failslab, interval 1, probability 1, space 0, times 960 [ 57.994790][ T5919] driver_register+0x29c/0x360 [ 57.994809][ T5919] __hid_register_driver+0x146/0x1f0 [ 57.994821][ T5919] do_one_initcall+0x11d/0x700 [ 57.994837][ T5919] kernel_init_freeable+0x6ea/0x7b0 [ 57.996889][ T362] CPU: 2 UID: 0 PID: 362 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 57.996912][ T362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.996924][ T362] Workqueue: events_unbound nsim_dev_trap_report_work [ 57.996951][ T362] Call Trace: [ 57.996958][ T362] [ 57.996965][ T362] dump_stack_lvl+0x100/0x190 [ 57.996989][ T362] should_fail_ex.cold+0x5/0xa [ 57.997013][ T362] should_failslab+0xc2/0x120 [ 57.997051][ T362] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 57.997075][ T362] ? __alloc_skb+0x140/0x710 [ 57.997100][ T362] __alloc_skb+0x140/0x710 [ 57.997119][ T362] ? __alloc_skb+0x5b7/0x710 [ 57.997139][ T362] ? __pfx___alloc_skb+0x10/0x10 [ 57.997162][ T362] ? kfree_skbmem+0x19f/0x210 [ 57.997191][ T362] nsim_dev_trap_report_work+0x2af/0xd20 [ 57.997225][ T362] process_one_work+0xa23/0x1940 [ 57.997256][ T362] ? __pfx_process_one_work+0x10/0x10 [ 57.997283][ T362] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 57.997308][ T362] worker_thread+0x5ef/0xe50 [ 57.997336][ T362] ? kthread+0x13a/0x450 [ 57.997352][ T362] ? __pfx_worker_thread+0x10/0x10 [ 57.997371][ T362] kthread+0x370/0x450 [ 57.997387][ T362] ? __pfx_kthread+0x10/0x10 [ 57.997407][ T362] ret_from_fork+0x72b/0xd50 [ 57.997434][ T362] ? __pfx_ret_from_fork+0x10/0x10 [ 57.997460][ T362] ? __switch_to+0x800/0x10f0 [ 57.997479][ T362] ? __pfx_kthread+0x10/0x10 [ 57.997498][ T362] ret_from_fork_asm+0x1a/0x30 [ 57.997536][ T362] [ 58.025195][ T13] FAULT_INJECTION: forcing a failure. [ 58.025195][ T13] name failslab, interval 1, probability 1, space 0, times 957 [ 58.030149][ T5919] kernel_init+0x1f/0x1e0 [ 58.030184][ T5919] ret_from_fork+0x72b/0xd50 [ 58.030201][ T5919] ret_from_fork_asm+0x1a/0x30 [ 58.030218][ T5919] page last free pid 1 tgid 1 stack trace: [ 58.030226][ T5919] free_pages_prepare+0x586/0xd80 [ 58.030244][ T5919] __free_contig_range_common+0x14f/0x250 [ 58.033456][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.033480][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.033492][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 58.033519][ T13] Call Trace: [ 58.033527][ T13] [ 58.033536][ T13] dump_stack_lvl+0x100/0x190 [ 58.033560][ T13] should_fail_ex.cold+0x5/0xa [ 58.033583][ T13] should_failslab+0xc2/0x120 [ 58.033608][ T13] __kmalloc_noprof+0xfc/0x820 [ 58.033628][ T13] ? __lock_acquire+0x49f/0x1a40 [ 58.033650][ T13] ? nsim_fib_event_nb+0x64c/0xe40 [ 58.033680][ T13] nsim_fib_event_nb+0x64c/0xe40 [ 58.033706][ T13] ? lock_acquire+0x1b9/0x370 [ 58.033730][ T13] notifier_call_chain+0x99/0x3f0 [ 58.033753][ T13] atomic_notifier_call_chain+0x71/0x1c0 [ 58.033772][ T13] call_fib_notifiers+0x33/0x70 [ 58.033798][ T13] fib6_add_rt2node+0x14e3/0x3df0 [ 58.033837][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 58.033869][ T13] ? fib6_add+0x60e/0x1d30 [ 58.033887][ T13] fib6_add+0x60e/0x1d30 [ 58.033910][ T13] ? do_raw_spin_lock+0x128/0x260 [ 58.033935][ T13] ? __pfx_fib6_add+0x10/0x10 [ 58.033951][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.033981][ T13] ip6_ins_rt+0xb5/0x110 [ 58.034000][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 58.034021][ T13] ? nlmsg_notify+0xbf/0x290 [ 58.034038][ T13] ? nlmsg_notify+0xdc/0x290 [ 58.034054][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.034076][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 58.034106][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 58.034129][ T13] ? __cancel_work+0x2b5/0x340 [ 58.034151][ T13] ? __cancel_work+0x245/0x340 [ 58.034172][ T13] ? __pfx___cancel_work+0x10/0x10 [ 58.034193][ T13] ? __lock_acquire+0x49f/0x1a40 [ 58.034218][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 58.034239][ T13] addrconf_dad_completed+0x195/0xff0 [ 58.034266][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 58.034296][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 58.034316][ T13] addrconf_dad_work+0x83c/0x1360 [ 58.034340][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.034365][ T13] ? rcu_is_watching+0x12/0xc0 [ 58.034396][ T13] process_one_work+0xa23/0x1940 [ 58.034426][ T13] ? __pfx_process_one_work+0x10/0x10 [ 58.034453][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.034476][ T13] worker_thread+0x5ef/0xe50 [ 58.034505][ T13] ? kthread+0x13a/0x450 [ 58.034521][ T13] ? __pfx_worker_thread+0x10/0x10 [ 58.034539][ T13] kthread+0x370/0x450 [ 58.034556][ T13] ? __pfx_kthread+0x10/0x10 [ 58.034575][ T13] ret_from_fork+0x72b/0xd50 [ 58.034602][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 58.034627][ T13] ? __switch_to+0x800/0x10f0 [ 58.034647][ T13] ? __pfx_kthread+0x10/0x10 [ 58.034665][ T13] ret_from_fork_asm+0x1a/0x30 [ 58.034703][ T13] [ 58.035534][ T13] FAULT_INJECTION: forcing a failure. [ 58.035534][ T13] name failslab, interval 1, probability 1, space 0, times 956 [ 58.036460][ T5919] free_pages_bulk+0x12a/0x200 [ 58.036483][ T5919] vm_area_free_pages+0xad/0x2b0 [ 58.036496][ T5919] vfree+0x107/0x750 [ 58.036509][ T5919] tpg_free+0x12e/0x490 [ 58.039786][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.039812][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.039829][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 58.039855][ T13] Call Trace: [ 58.039862][ T13] [ 58.039870][ T13] dump_stack_lvl+0x100/0x190 [ 58.039895][ T13] should_fail_ex.cold+0x5/0xa [ 58.039919][ T13] should_failslab+0xc2/0x120 [ 58.039943][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 58.039973][ T13] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 58.039998][ T13] dst_cow_metrics_generic+0x4c/0x1e0 [ 58.040019][ T13] icmp6_dst_alloc+0x418/0x4f0 [ 58.040044][ T13] ndisc_send_skb+0x133f/0x1bf0 [ 58.040072][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 58.040096][ T13] ? kmalloc_reserve+0xf9/0x350 [ 58.040131][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 58.040154][ T13] ? __asan_memcpy+0x3c/0x60 [ 58.040175][ T13] ndisc_send_rs+0x129/0x680 [ 58.040202][ T13] addrconf_dad_completed+0x47f/0xff0 [ 58.040227][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 58.040255][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 58.040274][ T13] addrconf_dad_work+0x83c/0x1360 [ 58.040299][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.040324][ T13] ? rcu_is_watching+0x12/0xc0 [ 58.040356][ T13] process_one_work+0xa23/0x1940 [ 58.040387][ T13] ? __pfx_process_one_work+0x10/0x10 [ 58.040414][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.040438][ T13] worker_thread+0x5ef/0xe50 [ 58.040468][ T13] ? kthread+0x13a/0x450 [ 58.040484][ T13] ? __pfx_worker_thread+0x10/0x10 [ 58.040502][ T13] kthread+0x370/0x450 [ 58.040518][ T13] ? __pfx_kthread+0x10/0x10 [ 58.040538][ T13] ret_from_fork+0x72b/0xd50 [ 58.040564][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 58.040590][ T13] ? __switch_to+0x800/0x10f0 [ 58.040608][ T13] ? __pfx_kthread+0x10/0x10 [ 58.040628][ T13] ret_from_fork_asm+0x1a/0x30 [ 58.040667][ T13] [ 58.089650][ T107] FAULT_INJECTION: forcing a failure. [ 58.089650][ T107] name failslab, interval 1, probability 1, space 0, times 954 [ 58.090710][ T5919] vivid_dev_release+0xd0/0x160 [ 58.092456][ T107] CPU: 0 UID: 0 PID: 107 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 58.092473][ T107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.092481][ T107] Workqueue: events_unbound nsim_dev_trap_report_work [ 58.092501][ T107] Call Trace: [ 58.092506][ T107] [ 58.092511][ T107] dump_stack_lvl+0x100/0x190 [ 58.092527][ T107] should_fail_ex.cold+0x5/0xa [ 58.092542][ T107] should_failslab+0xc2/0x120 [ 58.092558][ T107] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 58.092574][ T107] ? __alloc_skb+0x140/0x710 [ 58.092589][ T107] __alloc_skb+0x140/0x710 [ 58.092601][ T107] ? __alloc_skb+0x5b7/0x710 [ 58.092613][ T107] ? __pfx___alloc_skb+0x10/0x10 [ 58.092626][ T107] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.092643][ T107] ? __pfx___might_resched+0x10/0x10 [ 58.092660][ T107] nsim_dev_trap_report_work+0x2af/0xd20 [ 58.092680][ T107] process_one_work+0xa23/0x1940 [ 58.092698][ T107] ? __pfx_process_one_work+0x10/0x10 [ 58.092714][ T107] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 58.092730][ T107] worker_thread+0x5ef/0xe50 [ 58.092746][ T107] ? kthread+0x13a/0x450 [ 58.092757][ T107] ? __pfx_worker_thread+0x10/0x10 [ 58.092768][ T107] kthread+0x370/0x450 [ 58.092779][ T107] ? __pfx_kthread+0x10/0x10 [ 58.092790][ T107] ret_from_fork+0x72b/0xd50 [ 58.092809][ T107] ? __pfx_ret_from_fork+0x10/0x10 [ 58.092826][ T107] ? __switch_to+0x800/0x10f0 [ 58.092838][ T107] ? __pfx_kthread+0x10/0x10 [ 58.092849][ T107] ret_from_fork_asm+0x1a/0x30 [ 58.092872][ T107] [ 58.099240][ C1] FAULT_INJECTION: forcing a failure. [ 58.099240][ C1] name failslab, interval 1, probability 1, space 0, times 953 [ 58.100320][ T5919] v4l2_device_put+0xa3/0xd0 [ 58.100340][ T5919] vivid_probe.cold+0xf88/0x921e [ 58.102788][ C1] CPU: 1 UID: 0 PID: 1170 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 58.102813][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.102830][ T13] FAULT_INJECTION: forcing a failure. [ 58.102830][ T13] name failslab, interval 1, probability 1, space 0, times 953 [ 58.102826][ C1] Workqueue: events_unbound toggle_allocation_gate [ 58.102854][ C1] Call Trace: [ 58.102862][ C1] [ 58.102869][ C1] dump_stack_lvl+0x100/0x190 [ 58.102893][ C1] should_fail_ex.cold+0x5/0xa [ 58.102916][ C1] should_failslab+0xc2/0x120 [ 58.102941][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 58.102963][ C1] ? __alloc_skb+0x140/0x710 [ 58.102990][ C1] __alloc_skb+0x140/0x710 [ 58.103009][ C1] ? __alloc_skb+0x5b7/0x710 [ 58.103030][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 58.103053][ C1] ? lock_acquire+0x1b9/0x370 [ 58.103079][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 58.103106][ C1] wg_packet_send_keepalive+0x7a/0x300 [ 58.103167][ C1] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 58.103194][ C1] call_timer_fn+0x19a/0x610 [ 58.103215][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 58.103241][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 58.103269][ C1] ? mark_held_locks+0x40/0x70 [ 58.103291][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 58.103318][ C1] __run_timers+0x757/0xb00 [ 58.103346][ C1] ? __pfx___run_timers+0x10/0x10 [ 58.103377][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 58.103410][ C1] run_timer_base+0x114/0x190 [ 58.103432][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 58.103456][ C1] run_timer_softirq+0x1a/0x50 [ 58.103477][ C1] handle_softirqs+0x1ea/0x9b0 [ 58.103506][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 58.103530][ C1] ? _raw_spin_unlock+0x28/0x50 [ 58.103556][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 58.103578][ C1] __irq_exit_rcu+0x162/0x210 [ 58.103601][ C1] irq_exit_rcu+0x9/0x30 [ 58.103624][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 58.103645][ C1] [ 58.103650][ C1] [ 58.103657][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 58.103679][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 58.103704][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 58.103721][ C1] RSP: 0018:ffffc900064ff858 EFLAGS: 00000293 [ 58.103737][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81fdc702 [ 58.103750][ C1] RDX: ffff88802b200000 RSI: ffffffff81fdc6dc RDI: ffff88802b200000 [ 58.103762][ C1] RBP: ffff88806a743520 R08: 0000000000000005 R09: 0000000000000000 [ 58.103772][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 58.103789][ C1] R13: ffffed100d4e86a5 R14: 0000000000000001 R15: ffff88806a53c880 [ 58.103807][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 58.103831][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 58.103856][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 58.103881][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 58.103919][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 58.103941][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 58.103973][ C1] ? __pfx___text_poke+0x10/0x10 [ 58.103992][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 58.104021][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 58.104044][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 58.104067][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 58.104089][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 58.104112][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 58.104135][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 58.104158][ C1] ? find_held_lock+0x2b/0x80 [ 58.104191][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 58.104213][ C1] jump_label_update+0x37a/0x550 [ 58.104240][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 58.104263][ C1] static_key_enable+0x1a/0x20 [ 58.104284][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 58.104307][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 58.104333][ C1] ? rcu_is_watching+0x12/0xc0 [ 58.104365][ C1] process_one_work+0xa23/0x1940 [ 58.104396][ C1] ? __pfx_process_one_work+0x10/0x10 [ 58.104422][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 58.104447][ C1] worker_thread+0x5ef/0xe50 [ 58.104475][ C1] ? kthread+0x13a/0x450 [ 58.104487][ T5919] platform_probe+0x106/0x1d0 [ 58.104493][ C1] ? __pfx_worker_thread+0x10/0x10 [ 58.104502][ T5919] really_probe+0x241/0xa60 [ 58.104510][ C1] kthread+0x370/0x450 [ 58.104514][ T5919] __driver_probe_device+0x20e/0x450 [ 58.104527][ T5919] driver_probe_device+0x4a/0x140 [ 58.104530][ C1] ? __pfx_kthread+0x10/0x10 [ 58.104540][ T5919] __driver_attach+0x21f/0x5b0 [ 58.104550][ C1] ret_from_fork+0x72b/0xd50 [ 58.104576][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 58.104603][ C1] ? __switch_to+0x800/0x10f0 [ 58.104621][ C1] ? __pfx_kthread+0x10/0x10 [ 58.104642][ C1] ret_from_fork_asm+0x1a/0x30 [ 58.104677][ C1] [ 58.106438][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.106453][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.106460][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 58.106478][ T13] Call Trace: [ 58.106482][ T13] [ 58.106487][ T13] dump_stack_lvl+0x100/0x190 [ 58.106503][ T13] should_fail_ex.cold+0x5/0xa [ 58.106517][ T13] should_failslab+0xc2/0x120 [ 58.106533][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 58.106547][ T13] ? dst_alloc+0x99/0x1a0 [ 58.106560][ T13] ? __pfx_ip6_dst_gc+0x10/0x10 [ 58.106577][ T13] dst_alloc+0x99/0x1a0 [ 58.106591][ T13] icmp6_dst_alloc+0x79/0x4f0 [ 58.106607][ T13] mld_sendpack+0x5ae/0xec0 [ 58.106624][ T13] ? __pfx_mld_sendpack+0x10/0x10 [ 58.106646][ T13] mld_send_initial_cr+0x219/0x320 [ 58.106663][ T13] ipv6_mc_dad_complete+0xa7/0x1d0 [ 58.106681][ T13] addrconf_dad_completed+0xd91/0xff0 [ 58.106710][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 58.106730][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 58.106742][ T13] addrconf_dad_work+0x83c/0x1360 [ 58.106757][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.106773][ T13] ? rcu_is_watching+0x12/0xc0 [ 58.106792][ T13] process_one_work+0xa23/0x1940 [ 58.106811][ T13] ? __pfx_process_one_work+0x10/0x10 [ 58.106827][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.106842][ T13] worker_thread+0x5ef/0xe50 [ 58.106859][ T13] ? kthread+0x13a/0x450 [ 58.106869][ T13] ? __pfx_worker_thread+0x10/0x10 [ 58.106881][ T13] kthread+0x370/0x450 [ 58.106891][ T13] ? __pfx_kthread+0x10/0x10 [ 58.106902][ T13] ret_from_fork+0x72b/0xd50 [ 58.106919][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 58.106936][ T13] ? __switch_to+0x800/0x10f0 [ 58.106948][ T13] ? __pfx_kthread+0x10/0x10 [ 58.106960][ T13] ret_from_fork_asm+0x1a/0x30 [ 58.106983][ T13] [ 58.110499][ T13] FAULT_INJECTION: forcing a failure. [ 58.110499][ T13] name failslab, interval 1, probability 1, space 0, times 951 [ 58.111289][ T5919] bus_for_each_dev+0x13e/0x1d0 [ 58.111303][ T5919] bus_add_driver+0x305/0x5b0 [ 58.111315][ T5919] [ 58.111318][ T5919] Memory state around the buggy address: [ 58.112899][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.112915][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.112922][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 58.112939][ T13] Call Trace: [ 58.112944][ T13] [ 58.112948][ T13] dump_stack_lvl+0x100/0x190 [ 58.112964][ T13] should_fail_ex.cold+0x5/0xa [ 58.112979][ T13] should_failslab+0xc2/0x120 [ 58.112995][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 58.113015][ T13] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 58.113031][ T13] dst_cow_metrics_generic+0x4c/0x1e0 [ 58.113045][ T13] icmp6_dst_alloc+0x418/0x4f0 [ 58.113061][ T13] ndisc_send_skb+0x133f/0x1bf0 [ 58.113078][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 58.113094][ T13] ? kmalloc_reserve+0xf9/0x350 [ 58.113116][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 58.113131][ T13] ? __asan_memcpy+0x3c/0x60 [ 58.113144][ T13] ndisc_send_rs+0x129/0x680 [ 58.113161][ T13] addrconf_dad_completed+0x47f/0xff0 [ 58.113178][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 58.113196][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 58.113208][ T13] addrconf_dad_work+0x83c/0x1360 [ 58.113223][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.113239][ T13] ? rcu_is_watching+0x12/0xc0 [ 58.113259][ T13] process_one_work+0xa23/0x1940 [ 58.113278][ T13] ? __pfx_process_one_work+0x10/0x10 [ 58.113294][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.113330][ T13] worker_thread+0x5ef/0xe50 [ 58.113347][ T13] ? kthread+0x13a/0x450 [ 58.113358][ T13] ? __pfx_worker_thread+0x10/0x10 [ 58.113373][ T13] kthread+0x370/0x450 [ 58.113383][ T13] ? __pfx_kthread+0x10/0x10 [ 58.113395][ T13] ret_from_fork+0x72b/0xd50 [ 58.113412][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 58.113430][ T13] ? __switch_to+0x800/0x10f0 [ 58.113442][ T13] ? __pfx_kthread+0x10/0x10 [ 58.113454][ T13] ret_from_fork_asm+0x1a/0x30 [ 58.113477][ T13] [ 58.169568][ T5752] Bluetooth: hci2: command tx timeout [ 58.170482][ T13] FAULT_INJECTION: forcing a failure. [ 58.170482][ T13] name failslab, interval 1, probability 1, space 0, times 948 [ 58.170515][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.170536][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.170548][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 58.170577][ T13] Call Trace: [ 58.170584][ T13] [ 58.170592][ T13] dump_stack_lvl+0x100/0x190 [ 58.170619][ T13] should_fail_ex.cold+0x5/0xa [ 58.170644][ T13] should_failslab+0xc2/0x120 [ 58.170661][ T5919] ffff888034983200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.170671][ T5919] ffff888034983280: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 58.170667][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 58.170679][ T5919] >ffff888034983300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.170685][ T5919] ^ [ 58.170691][ T5919] ffff888034983380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 58.170699][ T5919] ffff888034983400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.170705][ T5919] ================================================================== [ 58.170699][ T13] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 58.170724][ T13] dst_cow_metrics_generic+0x4c/0x1e0 [ 58.170747][ T13] icmp6_dst_alloc+0x418/0x4f0 [ 58.170773][ T13] ndisc_send_skb+0x133f/0x1bf0 [ 58.170803][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 58.170829][ T13] ? kmalloc_reserve+0xf9/0x350 [ 58.170865][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 58.170888][ T13] ? __asan_memcpy+0x3c/0x60 [ 58.170909][ T13] ndisc_send_rs+0x129/0x680 [ 58.170936][ T13] addrconf_dad_completed+0x47f/0xff0 [ 58.170962][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 58.170999][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 58.171021][ T13] addrconf_dad_work+0x83c/0x1360 [ 58.171045][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.171066][ T13] ? rcu_is_watching+0x12/0xc0 [ 58.171099][ T13] process_one_work+0xa23/0x1940 [ 58.171129][ T13] ? __pfx_process_one_work+0x10/0x10 [ 58.171173][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 58.171187][ T13] worker_thread+0x5ef/0xe50 [ 58.171205][ T13] ? kthread+0x13a/0x450 [ 58.171215][ T13] ? __pfx_worker_thread+0x10/0x10 [ 58.171227][ T13] kthread+0x370/0x450 [ 58.171237][ T13] ? __pfx_kthread+0x10/0x10 [ 58.171249][ T13] ret_from_fork+0x72b/0xd50 [ 58.171267][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 58.171284][ T13] ? __switch_to+0x800/0x10f0 [ 58.171307][ T13] ? __pfx_kthread+0x10/0x10 [ 58.171320][ T13] ret_from_fork_asm+0x1a/0x30 [ 58.171344][ T13] [ 58.172799][ T41] FAULT_INJECTION: forcing a failure. [ 58.172799][ T41] name failslab, interval 1, probability 1, space 0, times 947 [ 58.175257][ T5750] Bluetooth: hci3: command tx timeout [ 58.176963][ T41] CPU: 3 UID: 0 PID: 41 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 58.176979][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.176998][ T41] Workqueue: mld mld_dad_work [ 58.177019][ T41] Call Trace: [ 58.177023][ T41] [ 58.177029][ T41] dump_stack_lvl+0x100/0x190 [ 58.177059][ T41] should_fail_ex.cold+0x5/0xa [ 58.177075][ T41] should_failslab+0xc2/0x120 [ 58.177090][ T41] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 58.177105][ T41] ? __alloc_skb+0x140/0x710 [ 58.177121][ T41] __alloc_skb+0x140/0x710 [ 58.177133][ T41] ? __alloc_skb+0x5b7/0x710 [ 58.177145][ T41] ? __pfx___alloc_skb+0x10/0x10 [ 58.177159][ T41] ? __lock_acquire+0x49f/0x1a40 [ 58.177173][ T41] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 58.177190][ T41] mld_newpack.isra.0+0x18e/0xa20 [ 58.177207][ T41] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 58.177224][ T41] ? rcu_is_watching+0x12/0xc0 [ 58.177244][ T41] ? add_grhead+0x299/0x340 [ 58.177257][ T41] add_grhead+0x299/0x340 [ 58.177272][ T41] add_grec+0x1389/0x1930 [ 58.177287][ T41] ? __pfx___mutex_lock+0x10/0x10 [ 58.177304][ T41] ? __pfx_add_grec+0x10/0x10 [ 58.177322][ T41] mld_send_initial_cr+0x156/0x320 [ 58.177344][ T41] mld_dad_work+0x32/0x1f0 [ 58.177366][ T41] process_one_work+0xa23/0x1940 [ 58.177402][ T41] ? __pfx_process_one_work+0x10/0x10 [ 58.177427][ T41] ? __pfx_mld_dad_work+0x10/0x10 [ 58.177451][ T41] worker_thread+0x5ef/0xe50 [ 58.177480][ T41] ? kthread+0x13a/0x450 [ 58.177496][ T41] ? __pfx_worker_thread+0x10/0x10 [ 58.177514][ T41] kthread+0x370/0x450 [ 58.177530][ T41] ? __pfx_kthread+0x10/0x10 [ 58.177548][ T41] ret_from_fork+0x72b/0xd50 [ 58.177574][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 58.177599][ T41] ? __switch_to+0x800/0x10f0 [ 58.177618][ T41] ? __pfx_kthread+0x10/0x10 [ 58.177636][ T41] ret_from_fork_asm+0x1a/0x30 [ 58.177675][ T41] [ 58.178241][ T5743] Bluetooth: hci0: command tx timeout [ 58.184544][ T5149] FAULT_INJECTION: forcing a failure. [ 58.184544][ T5149] name failslab, interval 1, probability 1, space 0, times 945 [ 58.185950][ T5919] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.185962][ T5919] CPU: 3 UID: 0 PID: 5919 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 58.185976][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.185984][ T5919] Call Trace: [ 58.185988][ T5919] [ 58.185993][ T5919] dump_stack_lvl+0x100/0x190 [ 58.186012][ T5919] vpanic+0x552/0x970 [ 58.186023][ T5919] ? __pfx_vpanic+0x10/0x10 [ 58.186034][ T5919] ? mark_held_locks+0x40/0x70 [ 58.186050][ T5919] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 58.186066][ T5919] panic+0xd1/0xe0 [ 58.186076][ T5919] ? __pfx_panic+0x10/0x10 [ 58.186087][ T5919] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 58.186101][ T5919] ? preempt_schedule_common+0x42/0xc0 [ 58.186116][ T5919] check_panic_on_warn.cold+0x19/0x34 [ 58.186128][ T5919] end_report.part.0+0x3a/0x90 [ 58.186145][ T5919] kasan_report.cold+0xe/0x18 [ 58.186161][ T5919] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 58.186177][ T5919] ? __pfx_uvcg_extension_drop+0x10/0x10 [ 58.186191][ T5919] __list_del_entry_valid_or_report+0x18a/0x1d0 [ 58.186206][ T5919] ? __pfx_uvcg_extension_drop+0x10/0x10 [ 58.186219][ T5919] uvcg_extension_drop+0x88/0x290 [ 58.186232][ T5919] ? __pfx_uvcg_extension_drop+0x10/0x10 [ 58.186245][ T5919] client_drop_item+0xa6/0x100 [ 58.186260][ T5919] configfs_mkdir+0x712/0xb70 [ 58.186277][ T5919] ? __pfx_configfs_mkdir+0x10/0x10 [ 58.186293][ T5919] ? inode_permission+0x374/0x620 [ 58.186311][ T5919] vfs_mkdir+0x361/0x850 [ 58.186327][ T5919] filename_mkdirat+0x48b/0x5e0 [ 58.186341][ T5919] ? __pfx_filename_mkdirat+0x10/0x10 [ 58.186353][ T5919] ? strncpy_from_user+0x19d/0x2d0 [ 58.186368][ T5919] ? do_getname+0x191/0x390 [ 58.186387][ T5919] __x64_sys_mkdir+0x6b/0x90 [ 58.186400][ T5919] do_syscall_64+0x115/0x870 [ 58.186416][ T5919] ? clear_bhb_loop+0x40/0x90 [ 58.186435][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.186452][ T5919] RIP: 0033:0x7fe1d5d9de99 [ 58.186464][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.186481][ T5919] RSP: 002b:00007fe1d6c7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 58.186501][ T5919] RAX: ffffffffffffffda RBX: 00007fe1d6025fa0 RCX: 00007fe1d5d9de99 [ 58.186513][ T5919] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000500 [ 58.186524][ T5919] RBP: 00007fe1d5e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 58.186537][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.186547][ T5919] R13: 00007fe1d6026038 R14: 00007fe1d6025fa0 R15: 00007ffe8ba27028 [ 58.186559][ T5919] [ 58.187875][ T5919] Kernel Offset: disabled VM DIAGNOSIS: 20:33:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae07c3 RDX=ffff888027844a80 RSI=ffffffff81ae080b RDI=ffffffff94695e00 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff28d2bc0 R10=ffffffff94695e07 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae080c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe1d5deb580 CR3=0000000058419000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030727368 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca7e11ff6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca7e11ff6 00007ffca7e11ffc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe41434492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe414344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe41434636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe414344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe415f0600 00007efe415f05e0 00007efe415f05e8 00007efe415f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe415f05f8 00007efe415f05c8 00007efe415f0600 00007efe415f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 00000000000004b4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ae07c3 RDX=ffff8880274b4a80 RSI=ffffffff81ae080b RDI=ffffffff94695e00 RBP=0000000000000000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff28d2bc0 R10=ffffffff94695e07 R11=ffffc900006a0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae080c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555917a7500 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c363375 CR3=000000005844f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030727368 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca7e11ff6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca7e11ff6 00007ffca7e11ffc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe41434492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe414344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe41434636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe414344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe415f0600 00007efe415f05e0 00007efe415f05e8 00007efe415f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe415f05f8 00007efe415f05c8 00007efe415f0600 00007efe415f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 00000000000004b4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ae07c3 RDX=ffff88802bed0000 RSI=ffffffff81ae080b RDI=ffffffff94695e00 RBP=0000000000000000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff28d2bc0 R10=ffffffff94695e07 R11=ffffc90000648ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae080c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8533df9880 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe1d6c5bd58 CR3=000000002e5d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0ffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556d15f876f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556d15f767b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85337f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8533752c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323a31696368 2f316963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d697377685f3131 32303863616d2f6c 6175747269762f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc90004c47670 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031393554 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b6fa1e0 R15=0000000000000000 RIP=ffffffff85a38b8f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe1d6c7c6c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2fa652 CR3=0000000036180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8ba27516 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8ba27516 00007ffe8ba2751c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1d5e34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1d5e344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1d5e34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1d5e344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1d5ff05f8 00007fe1d5ff05c8 00007fe1d5ff0600 00007fe1d5ff05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098 0000000000000002 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000