last executing test programs: 28.452379894s ago: executing program 2 (id=55): pipe(&(0x7f0000000040)={0x0, 0x0}) 28.452078354s ago: executing program 2 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r3, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r3) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r5, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000b00)='\n\x00', 0x1) close(r6) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 27.839606126s ago: executing program 2 (id=63): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000600)='\n03U', 0x4, 0xc120) pwrite64(r2, &(0x7f0000000700)='\b\x00\x00\x00', 0x4, 0xc14c) pwrite64(r2, &(0x7f0000000800)='\x00\x00\x00\x00', 0x4, 0xc140) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='dwc3-haps', 0x9) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000c00)='0000:00:02.0', 0xc) close(r4) 27.741545485s ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 27.648266498s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 21.001584165s ago: executing program 2 (id=79): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000200, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x1048, 0x42}, 0x8, 0x9028, 0xddd, 0x0, 0x0, 0x20000, 0x0}) 20.958002014s ago: executing program 32 (id=79): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000000200, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x1048, 0x42}, 0x8, 0x9028, 0xddd, 0x0, 0x0, 0x20000, 0x0}) 11.342256227s ago: executing program 4 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x900, 0xda) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r4, 0x6, 0x0, @void}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x65, 0x0, 0x0) 11.212901146s ago: executing program 4 (id=149): setns(0xc9, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) 11.21272048s ago: executing program 4 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x345, 0x0, 0x7fc}]}) 11.132889936s ago: executing program 4 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x0) write(r3, &(0x7f0000000700)='+ 0 0 0 1 ', 0xa) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000900), 0x0) write(r3, &(0x7f0000000a00)='- 1 0 1\n\x00', 0x8) 10.829604317s ago: executing program 4 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) close(0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x40, 0x1, 0x3ff, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048bcc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2001005b", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000a00)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002580), 0x0, 0x8004}], 0x2, 0x40800) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 10.772924284s ago: executing program 4 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 5.522422171s ago: executing program 1 (id=176): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb9d3d93f9dc2b88a84d008100d4ff86dd6d002000009c11ab8c60"], 0xda) 5.249963987s ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000100), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) (async) syz_usb_control_io(r1, &(0x7f0000000140), &(0x7f0000000180)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280), &(0x7f0000000340)={0x84, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000480), &(0x7f0000000540)={0x84, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000680), &(0x7f0000000740)={0x84, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000880), &(0x7f00000008c0)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.210237286s ago: executing program 1 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x17d78400}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="0705810240000007058102000200", 0xe) write(r1, &(0x7f0000000800)='AAAA', 0x4) 1.110033678s ago: executing program 3 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/n_gsm/parameters/debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='255\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) ioctl(r1, 0x40204706, &(0x7f0000000200)="0100"/32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000243)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000245)=0xf9) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 710.586461ms ago: executing program 1 (id=190): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) 509.927775ms ago: executing program 1 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="9c32bf460d396dedb68c1f432469cbbd195c5e7869d909414be982aee41d4502", 0x20) 452.775274ms ago: executing program 1 (id=193): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x280, 0x280, 0x0, 0x3, 0x0, 0x1, 0x3f}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000e000a000100030108004000400000000000"], 0x13) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c800190015000100050211004000000000000409033f01d007e02ea002"], 0x1e) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c80017001300010004030f00400000000409033f01d007e02ea002"], 0x1c) write(r0, &(0x7f0000000300)="00112233445566778899", 0xa) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8000600020040000d00"], 0xb) 392.822267ms ago: executing program 0 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400"/32], 0x20}}, 0x0) 327.68134ms ago: executing program 3 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48a1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x80) syz_emit_ethernet(0x76, &(0x7f0000000540)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xfd, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0xff, @loopback={0x2b00}, @private2={0xfc, 0x2, '\x00', 0x1}, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) 313.878919ms ago: executing program 0 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000140)="1359050000007f8d", 0x8}], 0x2}, 0x5) 271.812427ms ago: executing program 3 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) 142.623421ms ago: executing program 0 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf3f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50d0}, 0x40) 142.352166ms ago: executing program 0 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x7f, 0x6d, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) 79.122706ms ago: executing program 3 (id=200): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0xa8, 0x10000) ptrace(0x11, r0) sched_yield() nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) 519.446µs ago: executing program 3 (id=201): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 315.584µs ago: executing program 0 (id=202): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x63}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000006c0)="83d2", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x200a, 0xd}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 109.027µs ago: executing program 3 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 0 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello world\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello again\n', 0xc) close(r2) kernel console output (not intermixed with test programs): ] [ 74.034752][ T61] FAULT_INJECTION: forcing a failure. [ 74.034752][ T61] name failslab, interval 1, probability 10, space 0, times 69 [ 74.037872][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(full) [ 74.037894][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.037904][ T6688] Call Trace: [ 74.037910][ T6688] [ 74.037916][ T6688] dump_stack_lvl+0x100/0x190 [ 74.037939][ T6688] should_fail_ex.cold+0x5/0xa [ 74.037958][ T6688] should_failslab+0xc2/0x120 [ 74.037982][ T6688] __kmalloc_node_noprof+0x101/0x830 [ 74.038003][ T6688] ? __get_vm_area_node+0x1dc/0x330 [ 74.038028][ T6688] ? __get_vm_area_node+0x208/0x330 [ 74.038051][ T6688] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 74.038083][ T6688] __vmalloc_node_range_noprof+0x409/0x1630 [ 74.038118][ T6688] ? kernel_clone+0x176/0x9d0 [ 74.038144][ T6688] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 74.038172][ T6688] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.038204][ T6688] ? trace_kmem_cache_alloc+0xdd/0x100 [ 74.038234][ T6688] ? kernel_clone+0x176/0x9d0 [ 74.038254][ T6688] __vmalloc_node_noprof+0xad/0xf0 [ 74.038280][ T6688] ? kernel_clone+0x176/0x9d0 [ 74.038302][ T6688] copy_process+0x7fb/0x8030 [ 74.038325][ T6688] ? page_table_check_set+0x4f7/0x930 [ 74.038357][ T6688] ? __pfx_copy_process+0x10/0x10 [ 74.038383][ T6688] ? _copy_from_user+0x59/0xd0 [ 74.038414][ T6688] kernel_clone+0x176/0x9d0 [ 74.038437][ T6688] ? __pfx_kernel_clone+0x10/0x10 [ 74.038472][ T6688] __do_sys_clone3+0x214/0x290 [ 74.038492][ T6688] ? __pfx___do_sys_clone3+0x10/0x10 [ 74.038513][ T6688] ? __might_fault+0xc5/0x140 [ 74.038543][ T6688] ? __ia32_compat_sys_rt_sigprocmask+0x1aa/0x460 [ 74.038581][ T6688] do_int80_emulation+0x14b/0x720 [ 74.038607][ T6688] asm_int80_emulation+0x1a/0x20 [ 74.038625][ T6688] RIP: 0023:0xf71aa6d0 [ 74.038639][ T6688] Code: 4c 24 04 85 c9 0f 84 ef dc 00 00 8b 54 24 0c 85 d2 0f 84 e3 dc 00 00 53 56 8b 74 24 18 89 cb 8b 4c 24 10 b8 b3 01 00 00 cd 80 <85> c0 74 09 5e 5b 0f 8c c4 dc 00 00 c3 31 ed 83 e4 f0 83 ec 0c 56 [ 74.038648][ T6242] FAULT_INJECTION: forcing a failure. [ 74.038648][ T6242] name failslab, interval 1, probability 10, space 0, times 65 [ 74.038656][ T6688] RSP: 002b:00000000ffec1aa4 EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 74.038673][ T6688] RAX: ffffffffffffffda RBX: 00000000ffec1b30 RCX: 0000000000000058 [ 74.038684][ T6688] RDX: 00000000f7172cc0 RSI: 00000000f5415b40 RDI: 00000000fffffff0 [ 74.038695][ T6688] RBP: 000000000000006e R08: 0000000000000000 R09: 0000000000000000 [ 74.038705][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.038715][ T6688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.038738][ T6688] [ 74.038747][ T6688] warn_alloc: 2 callbacks suppressed [ 74.038757][ T6688] syz.3.164: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 74.038819][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(full) [ 74.038845][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.038855][ T6688] Call Trace: [ 74.038860][ T6688] [ 74.038866][ T6688] dump_stack_lvl+0x100/0x190 [ 74.038887][ T6688] warn_alloc.cold+0x94/0xa8 [ 74.038919][ T6688] ? __pfx_warn_alloc+0x10/0x10 [ 74.038937][ T6688] ? dump_stack_lvl+0x17c/0x190 [ 74.038957][ T6688] ? rcu_is_watching+0x12/0xc0 [ 74.038980][ T6688] ? __kasan_kmalloc+0x8a/0xb0 [ 74.039003][ T6688] ? __kmalloc_node_noprof+0x357/0x830 [ 74.039024][ T6688] ? __get_vm_area_node+0x1dc/0x330 [ 74.039048][ T6688] ? __get_vm_area_node+0x208/0x330 [ 74.039072][ T6688] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 74.039103][ T6688] __vmalloc_node_range_noprof+0x1394/0x1630 [ 74.039138][ T6688] ? kernel_clone+0x176/0x9d0 [ 74.039166][ T6688] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 74.039194][ T6688] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.039208][ T6229] FAULT_INJECTION: forcing a failure. [ 74.039208][ T6229] name failslab, interval 1, probability 10, space 0, times 64 [ 74.039227][ T6688] ? trace_kmem_cache_alloc+0xdd/0x100 [ 74.039255][ T6688] ? kernel_clone+0x176/0x9d0 [ 74.039275][ T6688] __vmalloc_node_noprof+0xad/0xf0 [ 74.039301][ T6688] ? kernel_clone+0x176/0x9d0 [ 74.039325][ T6688] copy_process+0x7fb/0x8030 [ 74.039346][ T6688] ? page_table_check_set+0x4f7/0x930 [ 74.039379][ T6688] ? __pfx_copy_process+0x10/0x10 [ 74.039406][ T6688] ? _copy_from_user+0x59/0xd0 [ 74.039436][ T6688] kernel_clone+0x176/0x9d0 [ 74.039459][ T6688] ? __pfx_kernel_clone+0x10/0x10 [ 74.039493][ T6688] __do_sys_clone3+0x214/0x290 [ 74.039516][ T6688] ? __pfx___do_sys_clone3+0x10/0x10 [ 74.039537][ T6688] ? __might_fault+0xc5/0x140 [ 74.039586][ T6688] ? __ia32_compat_sys_rt_sigprocmask+0x1aa/0x460 [ 74.039620][ T6688] do_int80_emulation+0x14b/0x720 [ 74.039646][ T6688] asm_int80_emulation+0x1a/0x20 [ 74.039664][ T6688] RIP: 0023:0xf71aa6d0 [ 74.039678][ T6688] Code: 4c 24 04 85 c9 0f 84 ef dc 00 00 8b 54 24 0c 85 d2 0f 84 e3 dc 00 00 53 56 8b 74 24 18 89 cb 8b 4c 24 10 b8 b3 01 00 00 cd 80 <85> c0 74 09 5e 5b 0f 8c c4 dc 00 00 c3 31 ed 83 e4 f0 83 ec 0c 56 [ 74.039693][ T6688] RSP: 002b:00000000ffec1aa4 EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 74.039709][ T6688] RAX: ffffffffffffffda RBX: 00000000ffec1b30 RCX: 0000000000000058 [ 74.039720][ T6688] RDX: 00000000f7172cc0 RSI: 00000000f5415b40 RDI: 00000000fffffff0 [ 74.039731][ T6688] RBP: 000000000000006e R08: 0000000000000000 R09: 0000000000000000 [ 74.039741][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.039751][ T6688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.039774][ T6688] [ 74.039783][ T61] CPU: 2 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.039796][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.039803][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.039819][ T61] Call Trace: [ 74.039823][ T61] [ 74.039827][ T61] dump_stack_lvl+0x100/0x190 [ 74.039839][ T61] should_fail_ex.cold+0x5/0xa [ 74.039851][ T61] should_failslab+0xc2/0x120 [ 74.039866][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.039880][ T61] ? __alloc_skb+0x140/0x710 [ 74.039895][ T61] __alloc_skb+0x140/0x710 [ 74.039910][ T6688] Mem-Info: [ 74.039907][ T61] ? __alloc_skb+0x5b7/0x710 [ 74.039921][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 74.039935][ T61] ? kfree_skbmem+0x19f/0x210 [ 74.039947][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.039967][ T61] process_one_work+0xa23/0x1940 [ 74.039987][ T61] ? __pfx_process_one_work+0x10/0x10 [ 74.040006][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.040022][ T61] worker_thread+0x5ef/0xe50 [ 74.040040][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.040055][ T61] ? kthread+0x13a/0x450 [ 74.040068][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.040082][ T61] kthread+0x370/0x450 [ 74.040095][ T61] ? __pfx_kthread+0x10/0x10 [ 74.040110][ T61] ret_from_fork+0x72b/0xd50 [ 74.040123][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 74.040136][ T61] ? __switch_to+0x800/0x10f0 [ 74.040153][ T61] ? __pfx_kthread+0x10/0x10 [ 74.040167][ T61] ret_from_fork_asm+0x1a/0x30 [ 74.040187][ T61] [ 74.040193][ T61] FAULT_INJECTION: forcing a failure. [ 74.040193][ T61] name failslab, interval 1, probability 10, space 0, times 63 [ 74.040194][ T6229] CPU: 3 UID: 0 PID: 6229 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.040208][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.040214][ T6229] Call Trace: [ 74.040218][ T6229] [ 74.040222][ T6229] dump_stack_lvl+0x100/0x190 [ 74.040235][ T6229] should_fail_ex.cold+0x5/0xa [ 74.040247][ T6229] should_failslab+0xc2/0x120 [ 74.040261][ T6229] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.040275][ T6229] ? __alloc_skb+0x140/0x710 [ 74.040291][ T6229] __alloc_skb+0x140/0x710 [ 74.040303][ T6229] ? __alloc_skb+0x5b7/0x710 [ 74.040316][ T6229] ? __pfx___alloc_skb+0x10/0x10 [ 74.040333][ T6229] ? netlink_has_listeners+0x21b/0x430 [ 74.040344][ T6229] ? netlink_has_listeners+0x21b/0x430 [ 74.040357][ T6229] alloc_uevent_skb+0x7d/0x210 [ 74.040369][ T6229] kobject_uevent_env+0xd2d/0x18b0 [ 74.040381][ T6229] ? bus_to_subsys+0x114/0x150 [ 74.040394][ T6229] device_del+0x605/0x9b0 [ 74.040410][ T6229] ? __pfx_device_del+0x10/0x10 [ 74.040423][ T6229] ? _raw_read_unlock+0x28/0x50 [ 74.040434][ T6229] ? hci_sock_dev_event+0xb6/0x630 [ 74.040451][ T6229] rfkill_unregister+0xde/0x2c0 [ 74.040462][ T6229] hci_unregister_dev+0x34f/0x690 [ 74.040478][ T6229] vhci_release+0x17d/0x230 [ 74.040490][ T6229] ? __pfx_vhci_release+0x10/0x10 [ 74.040502][ T6229] __fput+0x3ff/0xb50 [ 74.040518][ T6229] task_work_run+0x150/0x240 [ 74.040535][ T6229] ? __pfx_task_work_run+0x10/0x10 [ 74.040554][ T6229] do_exit+0x951/0x2ae0 [ 74.040572][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 74.040584][ T6229] ? __pfx_do_exit+0x10/0x10 [ 74.040597][ T6229] ? do_group_exit+0x1bd/0x2a0 [ 74.040612][ T6229] ? rcu_is_watching+0x12/0xc0 [ 74.040626][ T6229] do_group_exit+0xd5/0x2a0 [ 74.040642][ T6229] __ia32_sys_exit_group+0x3e/0x50 [ 74.040656][ T6229] ia32_sys_call+0x19ea/0x19f0 [ 74.040671][ T6229] __do_fast_syscall_32+0xe7/0x970 [ 74.040684][ T6229] ? lockdep_hardirqs_on+0x78/0x100 [ 74.040698][ T6229] do_fast_syscall_32+0x32/0x70 [ 74.040712][ T6229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.040725][ T6229] RIP: 0023:0xf703efec [ 74.040733][ T6229] Code: Unable to access opcode bytes at 0xf703efc2. [ 74.040738][ T6229] RSP: 002b:00000000ffce0c2c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 74.040748][ T6229] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 74.040755][ T6229] RDX: 00000000f7165037 RSI: 00000000f740d300 RDI: 00000000f72414d9 [ 74.040762][ T6229] RBP: 00000000ffce0c88 R08: 0000000000000000 R09: 0000000000000000 [ 74.040768][ T6229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.040774][ T6229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.040786][ T6229] [ 74.040791][ T61] CPU: 2 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.040803][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.040809][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.040824][ T61] Call Trace: [ 74.040827][ T61] [ 74.040830][ T61] dump_stack_lvl+0x100/0x190 [ 74.040842][ T61] should_fail_ex.cold+0x5/0xa [ 74.040853][ T61] should_failslab+0xc2/0x120 [ 74.040867][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.040881][ T61] ? __alloc_skb+0x140/0x710 [ 74.040896][ T61] __alloc_skb+0x140/0x710 [ 74.040909][ T61] ? __alloc_skb+0x5b7/0x710 [ 74.040922][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 74.040936][ T61] ? kfree_skbmem+0x19f/0x210 [ 74.040948][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.040968][ T61] process_one_work+0xa23/0x1940 [ 74.040988][ T61] ? __pfx_process_one_work+0x10/0x10 [ 74.041025][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.041042][ T61] worker_thread+0x5ef/0xe50 [ 74.041060][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.041076][ T61] ? kthread+0x13a/0x450 [ 74.041088][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.041102][ T61] kthread+0x370/0x450 [ 74.041115][ T61] ? __pfx_kthread+0x10/0x10 [ 74.041130][ T61] ret_from_fork+0x72b/0xd50 [ 74.041143][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 74.041156][ T61] ? __switch_to+0x800/0x10f0 [ 74.041172][ T61] ? __pfx_kthread+0x10/0x10 [ 74.041186][ T61] ret_from_fork_asm+0x1a/0x30 [ 74.041206][ T61] [ 74.041214][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.041234][ T6242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.041258][ T6242] Call Trace: [ 74.041263][ T6242] [ 74.041269][ T6242] dump_stack_lvl+0x100/0x190 [ 74.041289][ T6242] should_fail_ex.cold+0x5/0xa [ 74.041306][ T6242] should_failslab+0xc2/0x120 [ 74.041328][ T6242] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.041340][ T61] FAULT_INJECTION: forcing a failure. [ 74.041340][ T61] name failslab, interval 1, probability 10, space 0, times 61 [ 74.041349][ T6242] ? do_getname+0x35/0x390 [ 74.041371][ T6242] do_getname+0x35/0x390 [ 74.041392][ T6242] user_path_at+0x26/0x60 [ 74.041416][ T6242] __ia32_sys_umount+0x109/0x190 [ 74.041433][ T6242] ? __pfx___ia32_sys_umount+0x10/0x10 [ 74.041456][ T6242] __do_fast_syscall_32+0xe7/0x970 [ 74.041476][ T6242] ? lockdep_hardirqs_on+0x78/0x100 [ 74.041496][ T6242] do_fast_syscall_32+0x32/0x70 [ 74.041516][ T6242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.041536][ T6242] RIP: 0023:0xf704efec [ 74.041548][ T6242] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.041563][ T6242] RSP: 002b:00000000ffa03778 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 74.041578][ T6242] RAX: ffffffffffffffda RBX: 00000000ffa048b4 RCX: 0000000000000009 [ 74.041587][ T6242] RDX: 00000000f7416ff4 RSI: 00000000f72514fe RDI: 00000000ffa048b4 [ 74.041597][ T6242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.041606][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.041616][ T6242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.041636][ T6242] [ 74.041782][ T6242] FAULT_INJECTION: forcing a failure. [ 74.041782][ T6242] name failslab, interval 1, probability 10, space 0, times 60 [ 74.041802][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.041819][ T6242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.041828][ T6242] Call Trace: [ 74.041833][ T6242] [ 74.041838][ T6242] dump_stack_lvl+0x100/0x190 [ 74.041856][ T6242] should_fail_ex.cold+0x5/0xa [ 74.041873][ T6242] should_failslab+0xc2/0x120 [ 74.041895][ T6242] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.041913][ T6242] ? __might_fault+0xc5/0x140 [ 74.041930][ T6242] ? do_getname+0x35/0x390 [ 74.041953][ T6242] do_getname+0x35/0x390 [ 74.041974][ T6242] user_path_at+0x26/0x60 [ 74.041999][ T6242] __ia32_sys_umount+0x109/0x190 [ 74.042016][ T6242] ? __pfx___ia32_sys_umount+0x10/0x10 [ 74.042038][ T6242] __do_fast_syscall_32+0xe7/0x970 [ 74.042061][ T6242] do_fast_syscall_32+0x32/0x70 [ 74.042081][ T6242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.042100][ T6242] RIP: 0023:0xf704efec [ 74.042112][ T6242] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.042127][ T6242] RSP: 002b:00000000ffa03778 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 74.042141][ T6242] RAX: ffffffffffffffda RBX: 00000000ffa03820 RCX: 0000000000000009 [ 74.042151][ T6242] RDX: 00000000f7416ff4 RSI: 00000000f72514fe RDI: 00000000ffa048b4 [ 74.042161][ T6242] RBP: 00000000ffa03820 R08: 0000000000000000 R09: 0000000000000000 [ 74.042170][ T6242] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000 [ 74.042185][ T6242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.042205][ T6242] [ 74.042596][ T6242] FAULT_INJECTION: forcing a failure. [ 74.042596][ T6242] name failslab, interval 1, probability 10, space 0, times 59 [ 74.042616][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.042634][ T6242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.042643][ T6242] Call Trace: [ 74.042648][ T6242] [ 74.042653][ T6242] dump_stack_lvl+0x100/0x190 [ 74.042671][ T6242] should_fail_ex.cold+0x5/0xa [ 74.042689][ T6242] should_failslab+0xc2/0x120 [ 74.042708][ T6242] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.042728][ T6242] ? do_getname+0x35/0x390 [ 74.042752][ T6242] do_getname+0x35/0x390 [ 74.042774][ T6242] __ia32_sys_mkdirat+0x77/0xc0 [ 74.042792][ T6242] __do_fast_syscall_32+0xe7/0x970 [ 74.042815][ T6242] do_fast_syscall_32+0x32/0x70 [ 74.042835][ T6242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.042854][ T6242] RIP: 0023:0xf704efec [ 74.042865][ T6242] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.042881][ T6242] RSP: 002b:00000000ffa04818 EFLAGS: 00000286 ORIG_RAX: 0000000000000128 [ 74.042896][ T6242] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffa048b4 [ 74.042905][ T6242] RDX: 00000000000001ff RSI: 0000000000003a98 RDI: 00000000ffa048b4 [ 74.042915][ T6242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.042924][ T6242] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 74.042934][ T6242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.042974][ T6242] [ 74.045966][ C2] FAULT_INJECTION: forcing a failure. [ 74.045966][ C2] name failslab, interval 1, probability 10, space 0, times 55 [ 74.045976][ T6688] active_anon:6816 inactive_anon:72 isolated_anon:0 [ 74.045976][ T6688] active_file:95 inactive_file:57508 isolated_file:0 [ 74.045976][ T6688] unevictable:1768 dirty:214 writeback:0 [ 74.045976][ T6688] slab_reclaimable:6295 slab_unreclaimable:55269 [ 74.045976][ T6688] mapped:23891 shmem:2295 pagetables:1241 [ 74.045976][ T6688] sec_pagetables:294 bounce:0 [ 74.045976][ T6688] kernel_misc_reclaimable:0 [ 74.045976][ T6688] free:26916 free_pcp:19341 free_cma:0 [ 74.046016][ C2] CPU: 2 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.046030][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.046024][ T6688] Node 0 active_anon:2040kB inactive_anon:16kB active_file:380kB inactive_file:0kB unevictable:2156kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:2164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:1300kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.046037][ C2] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.046052][ C2] [ 74.046055][ C2] Call Trace: [ 74.046059][ C2] [ 74.046063][ C2] dump_stack_lvl+0x100/0x190 [ 74.046076][ C2] should_fail_ex.cold+0x5/0xa [ 74.046073][ T6688] Node 1 active_anon:25224kB inactive_anon:272kB active_file:0kB inactive_file:230032kB unevictable:4916kB isolated(anon):0kB isolated(file):0kB mapped:95536kB dirty:844kB writeback:0kB shmem:7016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4868kB pagetables:3664kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.046088][ C2] should_failslab+0xc2/0x120 [ 74.046103][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.046120][ T6688] Node 0 [ 74.046117][ C2] ? __alloc_skb+0x140/0x710 [ 74.046134][ C2] __alloc_skb+0x140/0x710 [ 74.046126][ T6688] DMA free:2052kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:540kB local_pcp:124kB free_cma:0kB [ 74.046147][ C2] ? __alloc_skb+0x5b7/0x710 [ 74.046160][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 74.046170][ T6688] lowmem_reserve[]: 0 [ 74.046174][ C2] ? do_raw_spin_lock+0x128/0x260 [ 74.046180][ T6688] 280 280 280 [ 74.046189][ C2] skb_copy+0x1ca/0x3a0 [ 74.046196][ T6688] 280 [ 74.046207][ T6688] Node 0 [ 74.046205][ C2] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 74.046225][ C2] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 74.046212][ T6688] DMA32 free:15880kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1956kB inactive_anon:16kB active_file:260kB inactive_file:0kB unevictable:2156kB writepending:12kB zspages:0kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:12696kB local_pcp:3332kB free_cma:0kB [ 74.046240][ C2] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 74.046259][ T6688] lowmem_reserve[]: [ 74.046256][ C2] ? __lock_acquire+0x49f/0x1a40 [ 74.046264][ T6688] 0 0 0 0 [ 74.046276][ C2] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 74.046285][ T6688] 0 [ 74.046296][ T6688] Node 1 [ 74.046293][ C2] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 74.046310][ C2] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 74.046301][ T6688] DMA32 free:89732kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25224kB inactive_anon:272kB active_file:0kB inactive_file:230032kB unevictable:4916kB writepending:844kB zspages:1656kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:64128kB local_pcp:13220kB free_cma:0kB [ 74.046329][ C2] __iterate_interfaces+0x2e6/0x650 [ 74.046346][ T6688] lowmem_reserve[]: [ 74.046342][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 74.046350][ T6688] 0 0 0 [ 74.046360][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 74.046366][ T6688] 0 [ 74.046371][ T6688] 0 [ 74.046377][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 74.046382][ T6688] Node 0 DMA: [ 74.046393][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 74.046396][ T6688] 133*4kB (UM) [ 74.046406][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 74.046412][ T6688] 14*8kB (UM) [ 74.046419][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 74.046424][ T6688] 4*16kB (U) 14*32kB [ 74.046438][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 74.046443][ T6688] (UM) 2*64kB (U) [ 74.046454][ C2] handle_softirqs+0x1ea/0x9b0 [ 74.046463][ T6688] 0*128kB [ 74.046468][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 74.046471][ T6688] 1*256kB (M) [ 74.046481][ C2] ? _raw_spin_unlock+0x28/0x50 [ 74.046484][ T6688] 1*512kB [ 74.046491][ T6688] (M) [ 74.046493][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 74.046498][ T6688] 0*1024kB 0*2048kB [ 74.046509][ C2] __irq_exit_rcu+0x162/0x210 [ 74.046512][ T6688] 0*4096kB = 2052kB [ 74.046521][ C2] irq_exit_rcu+0x9/0x30 [ 74.046527][ T6688] Node 0 DMA32: [ 74.046533][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.046539][ T6688] 68*4kB [ 74.046546][ C2] [ 74.046546][ T6688] (UME) [ 74.046550][ C2] [ 74.046552][ T6688] 77*8kB [ 74.046555][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.046559][ T6688] (UME) 27*16kB (UME) [ 74.046568][ C2] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 74.046577][ T6688] 75*32kB (UME) [ 74.046583][ C2] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 93 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 96 8d 21 00 48 85 ed 0f 85 27 01 00 00 e8 92 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 74.046590][ T6688] 36*64kB [ 74.046594][ C2] RSP: 0018:ffffc900007cf890 EFLAGS: 00000293 [ 74.046598][ T6688] (UME) [ 74.046600][ C2] [ 74.046603][ C2] RAX: 0000000000000000 RBX: 0000000000000060 RCX: ffffffff81e81a8a [ 74.046606][ T6688] 29*128kB [ 74.046610][ C2] RDX: ffff888021532540 RSI: ffffffff81e81a94 RDI: ffff888021532540 [ 74.046615][ T6688] (UME) [ 74.046617][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 74.046621][ T6688] 4*256kB [ 74.046624][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000f9f14 [ 74.046628][ T6688] (M) [ 74.046631][ C2] R13: 0000000000000200 R14: ffff8880268cca80 R15: ffffc900007cf958 [ 74.046634][ T6688] 4*512kB (UME) [ 74.046641][ C2] ? vprintk_emit+0x66a/0x6b0 [ 74.046647][ T6688] 3*1024kB (UM) [ 74.046655][ C2] ? vprintk_emit+0x674/0x6b0 [ 74.046659][ T6688] 0*2048kB 0*4096kB = 15880kB [ 74.046671][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 74.046680][ T6688] Node 1 DMA32: [ 74.046685][ C2] ? mark_held_locks+0x40/0x70 [ 74.046693][ T6688] 343*4kB (ME) 278*8kB [ 74.046708][ C2] _printk+0xcf/0x110 [ 74.046713][ T6688] (UME) 184*16kB [ 74.046720][ C2] ? __pfx__printk+0x10/0x10 [ 74.046726][ T6688] (UME) 316*32kB [ 74.046732][ C2] ? trace_sched_exit_tp+0x120/0x160 [ 74.046738][ T6688] (UME) 108*64kB [ 74.046747][ C2] ? __schedule+0x126e/0x6730 [ 74.046751][ T6688] (UME) 34*128kB [ 74.046759][ C2] ? __pfx____ratelimit+0x10/0x10 [ 74.046764][ T6688] (UME) 11*256kB (UME) [ 74.046775][ C2] should_fail_ex+0x4e4/0x640 [ 74.046781][ T6688] 5*512kB (UM) 7*1024kB [ 74.046795][ C2] should_failslab+0xc2/0x120 [ 74.046803][ T6688] (UM) 4*2048kB [ 74.046810][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.046815][ T6688] (ME) 10*4096kB [ 74.046825][ C2] ? __alloc_skb+0x140/0x710 [ 74.046835][ T6688] (M) = 89612kB [ 74.046841][ C2] __alloc_skb+0x140/0x710 [ 74.046848][ T6688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.046854][ C2] ? __alloc_skb+0x5b7/0x710 [ 74.046863][ T6688] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.046867][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 74.046878][ T6688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.046880][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.046892][ T6688] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.046893][ C2] ? __pfx___might_resched+0x10/0x10 [ 74.046906][ T6688] 60031 total pagecache pages [ 74.046913][ T6688] 112 pages in swap cache [ 74.046913][ C2] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.046920][ T6688] Free swap = 123220kB [ 74.046927][ T6688] Total swap = 124996kB [ 74.046936][ T6688] 524155 pages RAM [ 74.046933][ C2] process_one_work+0xa23/0x1940 [ 74.046943][ T6688] 0 pages HighMem/MovableOnly [ 74.046949][ T6688] 211525 pages reserved [ 74.046956][ T6688] 0 pages cma reserved [ 74.046959][ C2] ? __pfx_process_one_work+0x10/0x10 [ 74.046987][ C2] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.047011][ C2] worker_thread+0x5ef/0xe50 [ 74.047039][ C2] ? __pfx_worker_thread+0x10/0x10 [ 74.047066][ C2] ? kthread+0x13a/0x450 [ 74.047086][ C2] ? __pfx_worker_thread+0x10/0x10 [ 74.047106][ C2] kthread+0x370/0x450 [ 74.047126][ C2] ? __pfx_kthread+0x10/0x10 [ 74.047150][ C2] ret_from_fork+0x72b/0xd50 [ 74.047171][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 74.047194][ C2] ? __switch_to+0x800/0x10f0 [ 74.047218][ C2] ? __pfx_kthread+0x10/0x10 [ 74.047232][ C2] ret_from_fork_asm+0x1a/0x30 [ 74.047253][ C2] [ 74.050359][ T89] FAULT_INJECTION: forcing a failure. [ 74.050359][ T89] name failslab, interval 1, probability 10, space 0, times 54 [ 74.051965][ T5150] udevd[5150]: worker [6558] did not accept message -105 (No buffer space available), kill it [ 74.051980][ T221] FAULT_INJECTION: forcing a failure. [ 74.051980][ T221] name failslab, interval 1, probability 10, space 0, times 53 [ 74.052006][ T221] CPU: 0 UID: 0 PID: 221 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 74.052026][ T221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.052038][ T221] Workqueue: events_unbound cfg80211_wiphy_work [ 74.052065][ T221] Call Trace: [ 74.052072][ T221] [ 74.052079][ T221] dump_stack_lvl+0x100/0x190 [ 74.052099][ T221] should_fail_ex.cold+0x5/0xa [ 74.052117][ T221] ? process_one_work+0xa23/0x1940 [ 74.052144][ T221] should_failslab+0xc2/0x120 [ 74.052168][ T221] __kmalloc_noprof+0xfc/0x820 [ 74.052191][ T221] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.052224][ T221] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.052265][ T221] ? mark_held_locks+0x40/0x70 [ 74.052292][ T221] ? find_held_lock+0x2b/0x80 [ 74.052313][ T221] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.052335][ T221] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.052356][ T221] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.052393][ T221] ? kvfree_call_rcu+0x1be/0x4f0 [ 74.052414][ T221] ? __asan_memcpy+0x3c/0x60 [ 74.052436][ T221] ieee80211_inform_bss+0x159/0x1170 [ 74.052468][ T221] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.052501][ T221] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.052528][ T221] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.052554][ T221] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.052577][ T221] ? unwind_next_frame+0x3be/0x2090 [ 74.052606][ T221] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.052631][ T221] ? ret_from_fork_asm+0x1a/0x30 [ 74.052671][ T221] ? stack_trace_save+0x8e/0xc0 [ 74.052696][ T221] ? __pfx_stack_trace_save+0x10/0x10 [ 74.052725][ T221] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.052749][ T221] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.052775][ T221] ? __kmalloc_noprof+0x322/0x820 [ 74.052794][ T221] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.052828][ T221] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.052853][ T221] ? process_one_work+0xa23/0x1940 [ 74.052877][ T221] ? worker_thread+0x5ef/0xe50 [ 74.052900][ T221] ? kthread+0x370/0x450 [ 74.052921][ T221] ? ret_from_fork+0x72b/0xd50 [ 74.052956][ T221] ? ret_from_fork_asm+0x1a/0x30 [ 74.052988][ T221] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.053043][ T221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.053071][ T221] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.053104][ T221] ? __lock_acquire+0x49f/0x1a40 [ 74.053130][ T221] ? __lock_acquire+0x49f/0x1a40 [ 74.053167][ T221] ? __lock_acquire+0x49f/0x1a40 [ 74.053194][ T221] ? find_held_lock+0x2b/0x80 [ 74.053215][ T221] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.053241][ T221] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.053276][ T221] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.053309][ T221] ieee80211_bss_info_update+0x310/0xab0 [ 74.053337][ T221] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.053372][ T221] ? rcu_is_watching+0x12/0xc0 [ 74.053393][ T221] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.053418][ T221] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.053449][ T221] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.053487][ T221] ieee80211_iface_work+0xa9a/0x1070 [ 74.053521][ T221] cfg80211_wiphy_work+0x2b7/0x550 [ 74.053550][ T221] process_one_work+0xa23/0x1940 [ 74.053586][ T221] ? __pfx_process_one_work+0x10/0x10 [ 74.053618][ T221] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.053646][ T221] worker_thread+0x5ef/0xe50 [ 74.053678][ T221] ? __pfx_worker_thread+0x10/0x10 [ 74.053705][ T221] ? kthread+0x13a/0x450 [ 74.053726][ T221] ? __pfx_worker_thread+0x10/0x10 [ 74.053749][ T221] kthread+0x370/0x450 [ 74.053772][ T221] ? __pfx_kthread+0x10/0x10 [ 74.053796][ T221] ret_from_fork+0x72b/0xd50 [ 74.053818][ T221] ? __pfx_ret_from_fork+0x10/0x10 [ 74.053845][ T221] ? __switch_to+0x800/0x10f0 [ 74.053872][ T221] ? __pfx_kthread+0x10/0x10 [ 74.053896][ T221] ret_from_fork_asm+0x1a/0x30 [ 74.053933][ T221] [ 74.053942][ T61] CPU: 2 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.053955][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.053963][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.053979][ T61] Call Trace: [ 74.053982][ T61] [ 74.053986][ T61] dump_stack_lvl+0x100/0x190 [ 74.053999][ T61] should_fail_ex.cold+0x5/0xa [ 74.054010][ T61] should_failslab+0xc2/0x120 [ 74.054024][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.054039][ T61] ? __alloc_skb+0x140/0x710 [ 74.054054][ T61] __alloc_skb+0x140/0x710 [ 74.054067][ T61] ? __alloc_skb+0x5b7/0x710 [ 74.054079][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 74.054092][ T61] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.054104][ T61] ? __pfx___might_resched+0x10/0x10 [ 74.054124][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.054145][ T61] process_one_work+0xa23/0x1940 [ 74.054165][ T61] ? __pfx_process_one_work+0x10/0x10 [ 74.054184][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.054200][ T61] worker_thread+0x5ef/0xe50 [ 74.054218][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.054234][ T61] ? kthread+0x13a/0x450 [ 74.054247][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.054261][ T61] kthread+0x370/0x450 [ 74.054274][ T61] ? __pfx_kthread+0x10/0x10 [ 74.054289][ T61] ret_from_fork+0x72b/0xd50 [ 74.054302][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 74.054315][ T61] ? __switch_to+0x800/0x10f0 [ 74.054331][ T61] ? __pfx_kthread+0x10/0x10 [ 74.054346][ T61] ret_from_fork_asm+0x1a/0x30 [ 74.054366][ T61] [ 74.062478][ T5150] udevd[5150]: worker [6558] terminated by signal 9 (Killed) [ 74.063208][ T89] CPU: 1 UID: 0 PID: 89 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.063229][ T89] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.063240][ T89] Workqueue: events_unbound cfg80211_wiphy_work [ 74.063267][ T89] Call Trace: [ 74.063273][ T89] [ 74.063279][ T89] dump_stack_lvl+0x100/0x190 [ 74.063299][ T89] should_fail_ex.cold+0x5/0xa [ 74.063317][ T89] should_failslab+0xc2/0x120 [ 74.063339][ T89] __kmalloc_noprof+0xfc/0x820 [ 74.063359][ T89] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.063380][ T89] ? ieee80211_bss_info_update+0x310/0xab0 [ 74.063403][ T89] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.063427][ T89] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.063456][ T89] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.063484][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.063518][ T89] ? do_raw_spin_lock+0x128/0x260 [ 74.063535][ T89] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.063560][ T89] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.063584][ T89] ? mark_held_locks+0x40/0x70 [ 74.063607][ T89] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.063625][ T89] ? __asan_memcpy+0x3c/0x60 [ 74.063645][ T89] ieee80211_inform_bss+0x159/0x1170 [ 74.063673][ T89] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.063701][ T89] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.063725][ T89] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.063748][ T89] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.063771][ T89] ? unwind_next_frame+0x3be/0x2090 [ 74.063799][ T89] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.063821][ T89] ? ret_from_fork_asm+0x1a/0x30 [ 74.063857][ T89] ? stack_trace_save+0x8e/0xc0 [ 74.063880][ T89] ? __pfx_stack_trace_save+0x10/0x10 [ 74.063903][ T89] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.063925][ T89] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.063947][ T89] ? __kmalloc_noprof+0x322/0x820 [ 74.063965][ T89] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.063990][ T89] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.064011][ T89] ? process_one_work+0xa23/0x1940 [ 74.064033][ T89] ? worker_thread+0x5ef/0xe50 [ 74.064053][ T89] ? kthread+0x370/0x450 [ 74.064073][ T89] ? ret_from_fork+0x72b/0xd50 [ 74.064091][ T89] ? ret_from_fork_asm+0x1a/0x30 [ 74.064117][ T89] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.064144][ T89] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.064169][ T89] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.064204][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.064227][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.064259][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.064282][ T89] ? find_held_lock+0x2b/0x80 [ 74.064300][ T89] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.064322][ T89] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.064353][ T89] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.064381][ T89] ieee80211_bss_info_update+0x310/0xab0 [ 74.064407][ T89] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.064438][ T89] ? rcu_is_watching+0x12/0xc0 [ 74.064456][ T89] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.064478][ T89] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.064506][ T89] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.064540][ T89] ieee80211_iface_work+0xa9a/0x1070 [ 74.064570][ T89] cfg80211_wiphy_work+0x2b7/0x550 [ 74.064596][ T89] process_one_work+0xa23/0x1940 [ 74.064628][ T89] ? __pfx_process_one_work+0x10/0x10 [ 74.064657][ T89] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.064683][ T89] worker_thread+0x5ef/0xe50 [ 74.064713][ T89] ? kthread+0x13a/0x450 [ 74.064733][ T89] ? __pfx_worker_thread+0x10/0x10 [ 74.064754][ T89] kthread+0x370/0x450 [ 74.064774][ T89] ? __pfx_kthread+0x10/0x10 [ 74.064796][ T89] ret_from_fork+0x72b/0xd50 [ 74.064816][ T89] ? __pfx_ret_from_fork+0x10/0x10 [ 74.064836][ T89] ? __switch_to+0x800/0x10f0 [ 74.064861][ T89] ? __pfx_kthread+0x10/0x10 [ 74.064883][ T89] ret_from_fork_asm+0x1a/0x30 [ 74.064915][ T89] [ 74.065307][ T6566] FAULT_INJECTION: forcing a failure. [ 74.065307][ T6566] name failslab, interval 1, probability 10, space 0, times 33 [ 74.071735][ T5720] FAULT_INJECTION: forcing a failure. [ 74.071735][ T5720] name failslab, interval 1, probability 10, space 0, times 33 [ 74.073671][ T6239] FAULT_INJECTION: forcing a failure. [ 74.073671][ T6239] name failslab, interval 1, probability 10, space 0, times 29 [ 74.073990][ T5150] FAULT_INJECTION: forcing a failure. [ 74.073990][ T5150] name failslab, interval 1, probability 10, space 0, times 29 [ 74.074008][ T5150] CPU: 3 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 74.074020][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.074027][ T5150] Call Trace: [ 74.074031][ T5150] [ 74.074035][ T5150] dump_stack_lvl+0x100/0x190 [ 74.074051][ T5150] should_fail_ex.cold+0x5/0xa [ 74.074063][ T5150] should_failslab+0xc2/0x120 [ 74.074079][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.074093][ T5150] ? do_getname+0x35/0x390 [ 74.074109][ T5150] do_getname+0x35/0x390 [ 74.074124][ T5150] do_readlinkat+0xa9/0x370 [ 74.074137][ T5150] ? __pfx_do_readlinkat+0x10/0x10 [ 74.074148][ T5150] ? ksys_read+0x1ac/0x250 [ 74.074158][ T5150] ? __pfx_ksys_read+0x10/0x10 [ 74.074170][ T5150] __x64_sys_readlink+0x78/0xc0 [ 74.074183][ T5150] ? lockdep_hardirqs_on+0x78/0x100 [ 74.074196][ T5150] do_syscall_64+0x115/0x840 [ 74.074208][ T5150] ? clear_bhb_loop+0x40/0x90 [ 74.074222][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.074233][ T5150] RIP: 0033:0x7f41de1153a7 [ 74.074243][ T5150] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 74.074254][ T5150] RSP: 002b:00007ffe10173308 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 74.074265][ T5150] RAX: ffffffffffffffda RBX: 00007ffe10173510 RCX: 00007f41de1153a7 [ 74.074272][ T5150] RDX: 0000000000000200 RSI: 00007ffe10173310 RDI: 00007ffe10173510 [ 74.074278][ T5150] RBP: 000055f86356d910 R08: 0000000000000064 R09: 0000000000000000 [ 74.074284][ T5150] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe10173310 [ 74.074290][ T5150] R13: 000055f843694100 R14: 0000000000000074 R15: 00007ffe10173b30 [ 74.074303][ T5150] [ 74.074599][ T6229] FAULT_INJECTION: forcing a failure. [ 74.074599][ T6229] name failslab, interval 1, probability 10, space 0, times 28 [ 74.074637][ T6229] CPU: 3 UID: 0 PID: 6229 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.074648][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.074654][ T6229] Call Trace: [ 74.074658][ T6229] [ 74.074661][ T6229] dump_stack_lvl+0x100/0x190 [ 74.074674][ T6229] should_fail_ex.cold+0x5/0xa [ 74.074685][ T6229] should_failslab+0xc2/0x120 [ 74.074700][ T6229] __kmalloc_noprof+0xfc/0x820 [ 74.074712][ T6229] ? __lock_acquire+0x49f/0x1a40 [ 74.074729][ T6229] ? nsim_fib_event_nb+0x64c/0xe40 [ 74.074748][ T6229] nsim_fib_event_nb+0x64c/0xe40 [ 74.074766][ T6229] ? lock_acquire+0x1b9/0x370 [ 74.074783][ T6229] notifier_call_chain+0x99/0x3f0 [ 74.074800][ T6229] atomic_notifier_call_chain+0x71/0x1c0 [ 74.074816][ T6229] call_fib_notifiers+0x33/0x70 [ 74.074832][ T6229] fib6_del+0xbc3/0x1790 [ 74.074848][ T6229] ? __pfx_fib6_del+0x10/0x10 [ 74.074861][ T6229] ? fib6_ifdown+0xcd/0x7e0 [ 74.074878][ T6229] fib6_clean_node+0x424/0x5d0 [ 74.074891][ T6229] ? __pfx_fib6_clean_node+0x10/0x10 [ 74.074907][ T6229] fib6_walk_continue+0x451/0x8d0 [ 74.074926][ T6229] fib6_walk+0x182/0x370 [ 74.074937][ T6229] fib6_clean_tree+0xdc/0x120 [ 74.074947][ T6229] ? __pfx_fib6_ifdown+0x10/0x10 [ 74.074962][ T6229] ? __pfx_fib6_clean_tree+0x10/0x10 [ 74.074972][ T6229] ? __css_rstat_updated+0x1ce/0x5a0 [ 74.074991][ T6229] ? __pfx_fib6_clean_node+0x10/0x10 [ 74.075002][ T6229] ? __pfx_fib6_ifdown+0x10/0x10 [ 74.075021][ T6229] ? __pfx_fib6_ifdown+0x10/0x10 [ 74.075036][ T6229] __fib6_clean_all+0x107/0x2d0 [ 74.075049][ T6229] rt6_disable_ip+0x2a6/0x980 [ 74.075067][ T6229] ? __pfx_rt6_disable_ip+0x10/0x10 [ 74.075086][ T6229] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 74.075098][ T6229] ? trace_contention_end+0x126/0x160 [ 74.075109][ T6229] ? __mutex_lock+0x26d/0x1bd0 [ 74.075122][ T6229] ? tee_netdev_event+0x8a/0x3d0 [ 74.075138][ T6229] ? find_held_lock+0x2b/0x80 [ 74.075171][ T6229] ? tee_netdev_event+0x300/0x3d0 [ 74.075187][ T6229] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 74.075204][ T6229] addrconf_notify+0x4a3/0x1ba0 [ 74.075220][ T6229] ? __pfx_tls_dev_event+0x10/0x10 [ 74.075237][ T6229] ? __pfx_addrconf_notify+0x10/0x10 [ 74.075252][ T6229] ? ip6mr_device_event+0x1c4/0x230 [ 74.075268][ T6229] notifier_call_chain+0x99/0x3f0 [ 74.075284][ T6229] call_netdevice_notifiers_info+0xbe/0x110 [ 74.075302][ T6229] netif_close_many+0x319/0x630 [ 74.075326][ T6229] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 74.075344][ T6229] ? __pfx_netif_close_many+0x10/0x10 [ 74.075355][ T6229] ? netif_close_many_and_unlock+0x1af/0x270 [ 74.075368][ T6229] unregister_netdevice_many_notify+0x840/0x2140 [ 74.075384][ T6229] ? ref_tracker_alloc+0x190/0x590 [ 74.075398][ T6229] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 74.075414][ T6229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 74.075430][ T6229] unregister_netdevice_queue+0x30b/0x3c0 [ 74.075446][ T6229] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 74.075461][ T6229] ? linkwatch_schedule_work+0x16f/0x1a0 [ 74.075472][ T6229] ? linkwatch_fire_event+0x74/0x270 [ 74.075485][ T6229] __tun_detach+0x1371/0x16e0 [ 74.075499][ T6229] ? __pfx_tun_chr_close+0x10/0x10 [ 74.075510][ T6229] tun_chr_close+0xc2/0x220 [ 74.075520][ T6229] ? __pfx_tun_chr_close+0x10/0x10 [ 74.075530][ T6229] __fput+0x3ff/0xb50 [ 74.075545][ T6229] task_work_run+0x150/0x240 [ 74.075562][ T6229] ? __pfx_task_work_run+0x10/0x10 [ 74.075580][ T6229] do_exit+0x951/0x2ae0 [ 74.075596][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 74.075608][ T6229] ? __pfx_do_exit+0x10/0x10 [ 74.075621][ T6229] ? do_group_exit+0x1bd/0x2a0 [ 74.075636][ T6229] ? rcu_is_watching+0x12/0xc0 [ 74.075650][ T6229] do_group_exit+0xd5/0x2a0 [ 74.075666][ T6229] __ia32_sys_exit_group+0x3e/0x50 [ 74.075680][ T6229] ia32_sys_call+0x19ea/0x19f0 [ 74.075696][ T6229] __do_fast_syscall_32+0xe7/0x970 [ 74.075709][ T6229] ? lockdep_hardirqs_on+0x78/0x100 [ 74.075722][ T6229] do_fast_syscall_32+0x32/0x70 [ 74.075736][ T6229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.075749][ T6229] RIP: 0023:0xf703efec [ 74.075757][ T6229] Code: Unable to access opcode bytes at 0xf703efc2. [ 74.075762][ T6229] RSP: 002b:00000000ffce0c2c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 74.075772][ T6229] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 74.075778][ T6229] RDX: 00000000f7165037 RSI: 00000000f740d300 RDI: 00000000f72414d9 [ 74.075785][ T6229] RBP: 00000000ffce0c88 R08: 0000000000000000 R09: 0000000000000000 [ 74.075791][ T6229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.075797][ T6229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.075810][ T6229] [ 74.075818][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 74.075838][ T6566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.075847][ T6566] Call Trace: [ 74.075853][ T6566] [ 74.075859][ T6566] dump_stack_lvl+0x100/0x190 [ 74.075880][ T6566] should_fail_ex.cold+0x5/0xa [ 74.075899][ T6566] should_failslab+0xc2/0x120 [ 74.075920][ T6566] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.075941][ T6566] ? do_getname+0x35/0x390 [ 74.075964][ T6566] do_getname+0x35/0x390 [ 74.075983][ T6566] do_sys_openat2+0xc7/0x1e0 [ 74.076005][ T6566] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.076030][ T6566] ? __x64_sys_recvmsg+0x1b9/0x260 [ 74.076055][ T6566] __x64_sys_openat+0x12d/0x210 [ 74.076076][ T6566] ? __pfx___x64_sys_openat+0x10/0x10 [ 74.076105][ T6566] do_syscall_64+0x115/0x840 [ 74.076124][ T6566] ? clear_bhb_loop+0x40/0x90 [ 74.076144][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.076160][ T6566] RIP: 0033:0x7f41de0a7407 [ 74.076174][ T6566] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 74.076195][ T6566] RSP: 002b:00007ffe1016f140 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 74.076211][ T6566] RAX: ffffffffffffffda RBX: 00007f41de797880 RCX: 00007f41de0a7407 [ 74.076222][ T6566] RDX: 0000000000080000 RSI: 00007ffe1016f2b0 RDI: ffffffffffffff9c [ 74.076232][ T6566] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 74.076242][ T6566] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f8436797f5 [ 74.076251][ T6566] R13: 000055f8436797f5 R14: 0000000000000001 R15: 000055f843694140 [ 74.076272][ T6566] [ 74.076281][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 74.076301][ T5720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.076310][ T5720] Call Trace: [ 74.076316][ T5720] [ 74.076322][ T5720] dump_stack_lvl+0x100/0x190 [ 74.076343][ T5720] should_fail_ex.cold+0x5/0xa [ 74.076360][ T5720] should_failslab+0xc2/0x120 [ 74.076382][ T5720] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.076402][ T6566] FAULT_INJECTION: forcing a failure. [ 74.076402][ T6566] name failslab, interval 1, probability 10, space 0, times 26 [ 74.076403][ T5720] ? __alloc_skb+0x140/0x710 [ 74.076427][ T5720] __alloc_skb+0x140/0x710 [ 74.076447][ T5720] ? __pfx___alloc_skb+0x10/0x10 [ 74.076473][ T5720] tcp_stream_alloc_skb+0x34/0x660 [ 74.076498][ T5720] tcp_sendmsg_locked+0x13b2/0x44d0 [ 74.076526][ T5720] ? __lock_acquire+0x49f/0x1a40 [ 74.076551][ T5720] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 74.076576][ T5720] ? do_raw_spin_lock+0x128/0x260 [ 74.076593][ T5720] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.076617][ T5720] ? __local_bh_enable_ip+0x9e/0x120 [ 74.076638][ T5720] tcp_sendmsg+0x2e/0x50 [ 74.076659][ T5720] ? __pfx_tcp_sendmsg+0x10/0x10 [ 74.076680][ T5720] inet_sendmsg+0xb9/0x140 [ 74.076702][ T5720] sock_write_iter+0x4ea/0x5b0 [ 74.076717][ T5720] ? __pfx_inet_sendmsg+0x10/0x10 [ 74.076738][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 74.076760][ T5720] ? bpf_lsm_file_permission+0x9/0x10 [ 74.076776][ T5720] ? security_file_permission+0x76/0x210 [ 74.076798][ T5720] ? rw_verify_area+0xce/0x6d0 [ 74.076828][ T5720] vfs_write+0x6ac/0x1050 [ 74.076861][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 74.076878][ T5720] ? __pfx_vfs_write+0x10/0x10 [ 74.076895][ T5720] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 74.076916][ T5720] ? lockdep_hardirqs_on+0x78/0x100 [ 74.076935][ T5720] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.076951][ T5720] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 74.076971][ T5720] ksys_write+0x1f8/0x250 [ 74.076985][ T5720] ? __pfx_ksys_write+0x10/0x10 [ 74.077030][ T5720] do_syscall_64+0x115/0x840 [ 74.077035][ T6229] FAULT_INJECTION: forcing a failure. [ 74.077035][ T6229] name failslab, interval 1, probability 10, space 0, times 26 [ 74.077049][ T5720] ? clear_bhb_loop+0x40/0x90 [ 74.077069][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.077085][ T5720] RIP: 0033:0x7fdc884a7407 [ 74.077099][ T5720] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 74.077114][ T5720] RSP: 002b:00007ffd9505f820 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 74.077130][ T5720] RAX: ffffffffffffffda RBX: 00007fdc88b78300 RCX: 00007fdc884a7407 [ 74.077140][ T5720] RDX: 0000000000000164 RSI: 00007fdc883b8010 RDI: 0000000000000004 [ 74.077162][ T5720] RBP: 000055ab9d39c050 R08: 0000000000000000 R09: 0000000000000000 [ 74.077170][ T5720] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 74.077176][ T5720] R13: 00007ffd9505f970 R14: 0000000000000000 R15: 0000000000000004 [ 74.077192][ T5720] [ 74.077202][ T6239] CPU: 2 UID: 0 PID: 6239 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.077221][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.077230][ T6239] Call Trace: [ 74.077237][ T6239] [ 74.077244][ T6239] dump_stack_lvl+0x100/0x190 [ 74.077264][ T6239] should_fail_ex.cold+0x5/0xa [ 74.077283][ T6239] should_failslab+0xc2/0x120 [ 74.077306][ T6239] __kmalloc_noprof+0xfc/0x820 [ 74.077326][ T6239] ? trace_kmem_cache_alloc+0xdd/0x100 [ 74.077350][ T6239] ? lsm_blob_alloc+0x68/0x90 [ 74.077376][ T5720] FAULT_INJECTION: forcing a failure. [ 74.077376][ T5720] name failslab, interval 1, probability 10, space 0, times 25 [ 74.077381][ T6239] lsm_blob_alloc+0x68/0x90 [ 74.077407][ T6239] security_sk_alloc+0x2d/0x290 [ 74.077428][ T6239] sk_prot_alloc+0x1d1/0x2a0 [ 74.077447][ T6239] sk_alloc+0x36/0xe80 [ 74.077470][ T6239] inet_create+0x3a0/0x1060 [ 74.077493][ T6239] ? inet_create+0x94/0x1060 [ 74.077518][ T6239] __sock_create+0x339/0x860 [ 74.077540][ T6239] __sys_socket+0x14d/0x260 [ 74.077558][ T6239] ? __pfx___sys_socket+0x10/0x10 [ 74.077584][ T6239] __ia32_compat_sys_socketcall+0x65b/0x770 [ 74.077610][ T6239] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 74.077632][ T6239] ? __pfx_fput_close_sync+0x10/0x10 [ 74.077649][ T6239] __do_fast_syscall_32+0xe7/0x970 [ 74.077662][ T6239] ? lockdep_hardirqs_on+0x78/0x100 [ 74.077676][ T6239] do_fast_syscall_32+0x32/0x70 [ 74.077690][ T6239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.077708][ T6239] RIP: 0023:0xf7f78fec [ 74.077717][ T6239] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 74.077728][ T6239] RSP: 002b:00000000ffec18b0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 74.077738][ T6239] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffec18c0 [ 74.077745][ T6239] RDX: 00000000f7406ff4 RSI: 00000000f74072f4 RDI: 00000000ffec2044 [ 74.077751][ T6239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.077758][ T6239] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.077764][ T6239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.077776][ T6239] [ 74.077782][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 74.077799][ T5720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.077808][ T5720] Call Trace: [ 74.077813][ T5720] [ 74.077819][ T5720] dump_stack_lvl+0x100/0x190 [ 74.077843][ T5720] should_fail_ex.cold+0x5/0xa [ 74.077861][ T5720] should_failslab+0xc2/0x120 [ 74.077900][ T5720] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.077920][ T5720] ? __alloc_skb+0x140/0x710 [ 74.077945][ T5720] __alloc_skb+0x140/0x710 [ 74.077964][ T5720] ? __pfx___alloc_skb+0x10/0x10 [ 74.077990][ T5720] tcp_stream_alloc_skb+0x34/0x660 [ 74.078012][ T5720] tcp_sendmsg_locked+0x13b2/0x44d0 [ 74.078039][ T5720] ? __lock_acquire+0x49f/0x1a40 [ 74.078070][ T5720] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 74.078095][ T5720] ? do_raw_spin_lock+0x128/0x260 [ 74.078113][ T5720] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.078150][ T5720] ? __local_bh_enable_ip+0x9e/0x120 [ 74.078170][ T5720] tcp_sendmsg+0x2e/0x50 [ 74.078192][ T5720] ? __pfx_tcp_sendmsg+0x10/0x10 [ 74.078214][ T5720] inet_sendmsg+0xb9/0x140 [ 74.078236][ T5720] sock_write_iter+0x4ea/0x5b0 [ 74.078251][ T5720] ? __pfx_inet_sendmsg+0x10/0x10 [ 74.078272][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 74.078294][ T5720] ? bpf_lsm_file_permission+0x9/0x10 [ 74.078309][ T5720] ? security_file_permission+0x76/0x210 [ 74.078331][ T5720] ? rw_verify_area+0xce/0x6d0 [ 74.078355][ T5720] vfs_write+0x6ac/0x1050 [ 74.078371][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 74.078389][ T5720] ? __pfx_vfs_write+0x10/0x10 [ 74.078406][ T5720] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 74.078426][ T5720] ? lockdep_hardirqs_on+0x78/0x100 [ 74.078445][ T5720] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.078461][ T5720] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 74.078481][ T5720] ksys_write+0x1f8/0x250 [ 74.078496][ T5720] ? __pfx_ksys_write+0x10/0x10 [ 74.078515][ T5720] do_syscall_64+0x115/0x840 [ 74.078527][ T5720] ? clear_bhb_loop+0x40/0x90 [ 74.078552][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.078565][ T5720] RIP: 0033:0x7fdc884a7407 [ 74.078573][ T5720] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 74.078583][ T5720] RSP: 002b:00007ffd9505f820 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 74.078593][ T5720] RAX: ffffffffffffffda RBX: 00007fdc88b78300 RCX: 00007fdc884a7407 [ 74.078599][ T5720] RDX: 0000000000000164 RSI: 00007fdc883b8010 RDI: 0000000000000004 [ 74.078606][ T5720] RBP: 000055ab9d39c050 R08: 0000000000000000 R09: 0000000000000000 [ 74.078612][ T5720] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 74.078618][ T5720] R13: 00007ffd9505f970 R14: 0000000000000000 R15: 0000000000000004 [ 74.078631][ T5720] [ 74.078721][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 74.078734][ T6566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.078740][ T6566] Call Trace: [ 74.078744][ T6566] [ 74.078748][ T6566] dump_stack_lvl+0x100/0x190 [ 74.078761][ T6566] should_fail_ex.cold+0x5/0xa [ 74.078772][ T6566] should_failslab+0xc2/0x120 [ 74.078786][ T6566] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.078800][ T6566] ? skb_clone+0x190/0x400 [ 74.078816][ T6566] skb_clone+0x190/0x400 [ 74.078831][ T6566] netlink_broadcast_filtered+0xb22/0xf20 [ 74.078848][ T6566] netlink_sendmsg+0xa16/0xda0 [ 74.078862][ T6566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.078876][ T6566] ? apparmor_socket_sendmsg+0x15b/0x270 [ 74.078890][ T6566] ____sys_sendmsg+0xa4d/0xbe0 [ 74.078911][ T6566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.078924][ T6566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.078936][ T6566] ? stack_trace_save+0x8e/0xc0 [ 74.078951][ T6566] ? __pfx_stack_trace_save+0x10/0x10 [ 74.078965][ T6566] ? stack_depot_save_flags+0x27/0x9d0 [ 74.078984][ T6566] ___sys_sendmsg+0x190/0x1e0 [ 74.078996][ T6566] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.079006][ T6566] ? kmem_cache_free+0x127/0x6b0 [ 74.079016][ T6566] ? __x64_sys_unlink+0x50/0x70 [ 74.079028][ T6566] ? do_syscall_64+0x115/0x840 [ 74.079039][ T6566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.079064][ T6566] __sys_sendmsg+0x160/0x210 [ 74.079079][ T6566] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.079092][ T6566] ? lockdep_hardirqs_on+0x78/0x100 [ 74.079111][ T6566] do_syscall_64+0x115/0x840 [ 74.079123][ T6566] ? clear_bhb_loop+0x40/0x90 [ 74.079135][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.079146][ T6566] RIP: 0033:0x7f41de0a7407 [ 74.079154][ T6566] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 74.079165][ T6566] RSP: 002b:00007ffe10173660 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 74.079175][ T6566] RAX: ffffffffffffffda RBX: 00007f41de797880 RCX: 00007f41de0a7407 [ 74.079185][ T6566] RDX: 0000000000000000 RSI: 00007ffe101736c0 RDI: 000000000000000c [ 74.079191][ T6566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.079200][ T6566] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000007c [ 74.079209][ T6566] R13: 000055f8635c5ab0 R14: 0000000000000000 R15: 0000000000000000 [ 74.079228][ T6566] [ 74.079400][ T6566] udevd[6566]: failed to send result of seq 12934 to main daemon: No buffer space available [ 74.080282][ T6229] CPU: 3 UID: 0 PID: 6229 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.080298][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.080304][ T6229] Call Trace: [ 74.080308][ T6229] [ 74.080312][ T6229] dump_stack_lvl+0x100/0x190 [ 74.080325][ T6229] should_fail_ex.cold+0x5/0xa [ 74.080339][ T6229] ? find_held_lock+0x2b/0x80 [ 74.080354][ T6229] should_failslab+0xc2/0x120 [ 74.080368][ T6229] __kmalloc_cache_noprof+0x91/0x6c0 [ 74.080380][ T6229] ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 74.080400][ T6229] nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 74.080417][ T6229] ? __pfx_inet_cmp+0x10/0x10 [ 74.080434][ T6229] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 74.080452][ T6229] ? addr_event.isra.0+0x396/0x560 [ 74.080472][ T6229] masq_inet6_event+0x205/0x250 [ 74.080488][ T6229] ? __pfx_masq_inet6_event+0x10/0x10 [ 74.080506][ T6229] ? ieee80211_ifa6_changed+0xe9/0x440 [ 74.080522][ T6229] notifier_call_chain+0x99/0x3f0 [ 74.080539][ T6229] atomic_notifier_call_chain+0x71/0x1c0 [ 74.080555][ T6229] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 74.080570][ T6229] ? trace_contention_end+0x126/0x160 [ 74.080584][ T6229] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 74.080602][ T6229] addrconf_notify+0x4a3/0x1ba0 [ 74.080618][ T6229] ? __pfx_tls_dev_event+0x10/0x10 [ 74.080634][ T6229] ? __pfx_addrconf_notify+0x10/0x10 [ 74.080648][ T6229] ? ip6mr_device_event+0x1c4/0x230 [ 74.080664][ T6229] notifier_call_chain+0x99/0x3f0 [ 74.080681][ T6229] call_netdevice_notifiers_info+0xbe/0x110 [ 74.080699][ T6229] netif_close_many+0x319/0x630 [ 74.080710][ T6229] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 74.080722][ T6229] ? __pfx_netif_close_many+0x10/0x10 [ 74.080733][ T6229] ? netif_close_many_and_unlock+0x1af/0x270 [ 74.080746][ T6229] unregister_netdevice_many_notify+0x840/0x2140 [ 74.080762][ T6229] ? ref_tracker_alloc+0x190/0x590 [ 74.080776][ T6229] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 74.080792][ T6229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 74.080808][ T6229] unregister_netdevice_queue+0x30b/0x3c0 [ 74.080824][ T6229] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 74.080843][ T6229] ? linkwatch_schedule_work+0x16f/0x1a0 [ 74.080861][ T6229] ? linkwatch_fire_event+0x74/0x270 [ 74.080881][ T6229] __tun_detach+0x1371/0x16e0 [ 74.080905][ T6229] ? __pfx_tun_chr_close+0x10/0x10 [ 74.080920][ T6229] tun_chr_close+0xc2/0x220 [ 74.080936][ T6229] ? __pfx_tun_chr_close+0x10/0x10 [ 74.080953][ T6229] __fput+0x3ff/0xb50 [ 74.080977][ T6229] task_work_run+0x150/0x240 [ 74.081014][ T6229] ? __pfx_task_work_run+0x10/0x10 [ 74.081035][ T6229] do_exit+0x951/0x2ae0 [ 74.081051][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 74.081063][ T6229] ? __pfx_do_exit+0x10/0x10 [ 74.081076][ T6229] ? do_group_exit+0x1bd/0x2a0 [ 74.081091][ T6229] ? rcu_is_watching+0x12/0xc0 [ 74.081106][ T6229] do_group_exit+0xd5/0x2a0 [ 74.081122][ T6229] __ia32_sys_exit_group+0x3e/0x50 [ 74.081137][ T6229] ia32_sys_call+0x19ea/0x19f0 [ 74.081153][ T6229] __do_fast_syscall_32+0xe7/0x970 [ 74.081166][ T6229] ? lockdep_hardirqs_on+0x78/0x100 [ 74.081179][ T6229] do_fast_syscall_32+0x32/0x70 [ 74.081193][ T6229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.081207][ T6229] RIP: 0023:0xf703efec [ 74.081215][ T6229] Code: Unable to access opcode bytes at 0xf703efc2. [ 74.081220][ T6229] RSP: 002b:00000000ffce0c2c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 74.081230][ T6229] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 74.081236][ T6229] RDX: 00000000f7165037 RSI: 00000000f740d300 RDI: 00000000f72414d9 [ 74.081242][ T6229] RBP: 00000000ffce0c88 R08: 0000000000000000 R09: 0000000000000000 [ 74.081248][ T6229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.081254][ T6229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.081267][ T6229] [ 74.081321][ T6229] FAULT_INJECTION: forcing a failure. [ 74.081321][ T6229] name failslab, interval 1, probability 10, space 0, times 20 [ 74.083098][ C1] FAULT_INJECTION: forcing a failure. [ 74.083098][ C1] name failslab, interval 1, probability 10, space 0, times 20 [ 74.084346][ T6229] CPU: 3 UID: 0 PID: 6229 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.084360][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.084367][ T6229] Call Trace: [ 74.084371][ T6229] [ 74.084375][ T6229] dump_stack_lvl+0x100/0x190 [ 74.084388][ T6229] should_fail_ex.cold+0x5/0xa [ 74.084399][ T6229] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 74.084414][ T6229] should_failslab+0xc2/0x120 [ 74.084429][ T6229] __kmalloc_noprof+0xfc/0x820 [ 74.084442][ T6229] ? switchdev_deferred_enqueue+0x3e/0x2d0 [ 74.084456][ T6229] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 74.084470][ T6229] switchdev_deferred_enqueue+0x3e/0x2d0 [ 74.084484][ T6229] switchdev_port_attr_set+0xb5/0x100 [ 74.084498][ T6229] br_set_state+0x243/0x620 [ 74.084516][ T6229] ? __pfx_br_set_state+0x10/0x10 [ 74.084534][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 74.084546][ T6229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.084559][ T6229] br_stp_disable_port+0x65/0x1e0 [ 74.084571][ T6229] br_device_event+0x8d3/0xa00 [ 74.084581][ T6229] ? __pfx_br_device_event+0x10/0x10 [ 74.084593][ T6229] ? lockdep_rtnl_is_held+0x26/0x40 [ 74.084607][ T6229] notifier_call_chain+0x99/0x3f0 [ 74.084623][ T6229] call_netdevice_notifiers_info+0xbe/0x110 [ 74.084641][ T6229] netif_close_many+0x319/0x630 [ 74.084666][ T6229] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 74.084679][ T6229] ? __pfx_netif_close_many+0x10/0x10 [ 74.084690][ T6229] ? netif_close_many_and_unlock+0x1af/0x270 [ 74.084703][ T6229] unregister_netdevice_many_notify+0x840/0x2140 [ 74.084720][ T6229] ? ref_tracker_alloc+0x190/0x590 [ 74.084733][ T6229] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 74.084749][ T6229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 74.084765][ T6229] unregister_netdevice_queue+0x30b/0x3c0 [ 74.084781][ T6229] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 74.084796][ T6229] ? linkwatch_schedule_work+0x16f/0x1a0 [ 74.084808][ T6229] ? linkwatch_fire_event+0x74/0x270 [ 74.084821][ T6229] __tun_detach+0x1371/0x16e0 [ 74.084834][ T6229] ? __pfx_tun_chr_close+0x10/0x10 [ 74.084845][ T6229] tun_chr_close+0xc2/0x220 [ 74.084855][ T6229] ? __pfx_tun_chr_close+0x10/0x10 [ 74.084865][ T6229] __fput+0x3ff/0xb50 [ 74.084880][ T6229] task_work_run+0x150/0x240 [ 74.084895][ T6229] ? __pfx_task_work_run+0x10/0x10 [ 74.084921][ T6229] do_exit+0x951/0x2ae0 [ 74.084942][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 74.084956][ T6229] ? __pfx_do_exit+0x10/0x10 [ 74.084973][ T6229] ? do_group_exit+0x1bd/0x2a0 [ 74.085014][ T6229] ? rcu_is_watching+0x12/0xc0 [ 74.085030][ T6229] do_group_exit+0xd5/0x2a0 [ 74.085046][ T6229] __ia32_sys_exit_group+0x3e/0x50 [ 74.085060][ T6229] ia32_sys_call+0x19ea/0x19f0 [ 74.085076][ T6229] __do_fast_syscall_32+0xe7/0x970 [ 74.085090][ T6229] ? lockdep_hardirqs_on+0x78/0x100 [ 74.085104][ T6229] do_fast_syscall_32+0x32/0x70 [ 74.085118][ T6229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.085131][ T6229] RIP: 0023:0xf703efec [ 74.085140][ T6229] Code: Unable to access opcode bytes at 0xf703efc2. [ 74.085145][ T6229] RSP: 002b:00000000ffce0c2c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 74.085156][ T6229] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 74.085163][ T6229] RDX: 00000000f7165037 RSI: 00000000f740d300 RDI: 00000000f72414d9 [ 74.085170][ T6229] RBP: 00000000ffce0c88 R08: 0000000000000000 R09: 0000000000000000 [ 74.085176][ T6229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.085182][ T6229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.085195][ T6229] [ 74.085227][ T6229] bridge0: error setting offload STP state on port 3(syz_tun) [ 74.085683][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 74.085705][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.085715][ C1] Call Trace: [ 74.085721][ C1] [ 74.085728][ C1] dump_stack_lvl+0x100/0x190 [ 74.085750][ C1] should_fail_ex.cold+0x5/0xa [ 74.085770][ C1] should_failslab+0xc2/0x120 [ 74.085793][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.085816][ C1] ? __alloc_skb+0x140/0x710 [ 74.085841][ C1] __alloc_skb+0x140/0x710 [ 74.085861][ C1] ? __alloc_skb+0x5b7/0x710 [ 74.085883][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 74.085906][ C1] ? lock_acquire+0x1b9/0x370 [ 74.085934][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 74.085962][ C1] wg_packet_send_keepalive+0x7a/0x300 [ 74.085983][ C1] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 74.086010][ C1] call_timer_fn+0x19a/0x610 [ 74.086035][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 74.086061][ C1] ? __run_timers+0x747/0xb00 [ 74.086087][ C1] ? rcu_is_watching+0x12/0xc0 [ 74.086110][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 74.086137][ C1] __run_timers+0x757/0xb00 [ 74.086166][ C1] ? __pfx___run_timers+0x10/0x10 [ 74.086204][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 74.086226][ C1] run_timer_base+0x114/0x190 [ 74.086251][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 74.086279][ C1] run_timer_softirq+0x1a/0x50 [ 74.086303][ C1] handle_softirqs+0x1ea/0x9b0 [ 74.086327][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 74.086346][ C1] ? _raw_spin_unlock+0x28/0x50 [ 74.086362][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 74.086387][ C1] __irq_exit_rcu+0x162/0x210 [ 74.086406][ C1] irq_exit_rcu+0x9/0x30 [ 74.086422][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.086442][ C1] [ 74.086448][ C1] [ 74.086455][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.086474][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 74.086495][ C1] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 74.086512][ C1] RSP: 0018:ffffc9000046fe00 EFLAGS: 00000206 [ 74.086527][ C1] RAX: 0000000000067ed7 RBX: ffff88801c742540 RCX: ffffffff8bb872d5 [ 74.086539][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 74.086551][ C1] RBP: ffffed10038e84a8 R08: 0000000000000001 R09: ffffed100566678d [ 74.086562][ C1] R10: ffff88802b333c6b R11: 0000000000000000 R12: 0000000000000000 [ 74.086573][ C1] R13: 0000000000000000 R14: 1ffff9200008dfc4 R15: dffffc0000000000 [ 74.086590][ C1] ? ct_kernel_exit+0x125/0x180 [ 74.086615][ C1] default_idle+0x9/0x10 [ 74.086636][ C1] default_idle_call+0x6c/0xb0 [ 74.086658][ C1] do_idle+0x3a7/0x5b0 [ 74.086677][ C1] ? __pfx_do_idle+0x10/0x10 [ 74.086695][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 74.086721][ C1] cpu_startup_entry+0x4f/0x60 [ 74.086741][ C1] start_secondary+0x21d/0x2d0 [ 74.086762][ C1] ? __pfx_start_secondary+0x10/0x10 [ 74.086785][ C1] common_startup_64+0x13e/0x158 [ 74.086822][ C1] [ 74.086927][ T6301] FAULT_INJECTION: forcing a failure. [ 74.086927][ T6301] name failslab, interval 1, probability 10, space 0, times 18 [ 74.123094][ T5821] FAULT_INJECTION: forcing a failure. [ 74.123094][ T5821] name failslab, interval 1, probability 10, space 0, times 13 [ 74.123683][ T6301] CPU: 1 UID: 0 PID: 6301 Comm: kworker/u32:5 Not tainted syzkaller #0 PREEMPT(full) [ 74.123707][ T6301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.123720][ T6301] Workqueue: bat_events batadv_mcast_mla_update [ 74.123754][ T6301] Call Trace: [ 74.123763][ T6301] [ 74.123770][ T6301] dump_stack_lvl+0x100/0x190 [ 74.123794][ T6301] should_fail_ex.cold+0x5/0xa [ 74.123816][ T6301] should_failslab+0xc2/0x120 [ 74.123843][ T6301] __kmalloc_cache_noprof+0x91/0x6c0 [ 74.123865][ T6301] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 74.123898][ T6301] batadv_mcast_mla_update+0x19ae/0x3200 [ 74.123932][ T6301] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 74.123963][ T6301] ? debug_object_deactivate+0x2e4/0x3b0 [ 74.124001][ T6301] ? rcu_is_watching+0x12/0xc0 [ 74.124028][ T6301] process_one_work+0xa23/0x1940 [ 74.124066][ T6301] ? __pfx_process_one_work+0x10/0x10 [ 74.124100][ T6301] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 74.124130][ T6301] worker_thread+0x5ef/0xe50 [ 74.124162][ T6301] ? __pfx_worker_thread+0x10/0x10 [ 74.124195][ T6301] ? kthread+0x13a/0x450 [ 74.124219][ T6301] ? __pfx_worker_thread+0x10/0x10 [ 74.124243][ T6301] kthread+0x370/0x450 [ 74.124262][ T6301] ? __pfx_kthread+0x10/0x10 [ 74.124286][ T6301] ret_from_fork+0x72b/0xd50 [ 74.124311][ T6301] ? __pfx_ret_from_fork+0x10/0x10 [ 74.124335][ T6301] ? __switch_to+0x800/0x10f0 [ 74.124364][ T6301] ? __pfx_kthread+0x10/0x10 [ 74.124391][ T6301] ret_from_fork_asm+0x1a/0x30 [ 74.124430][ T6301] [ 74.135499][ T61] FAULT_INJECTION: forcing a failure. [ 74.135499][ T61] name failslab, interval 1, probability 10, space 0, times 11 [ 74.140178][ T1162] FAULT_INJECTION: forcing a failure. [ 74.140178][ T1162] name failslab, interval 1, probability 10, space 0, times 10 [ 74.150174][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.150195][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.150204][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.150225][ T61] Call Trace: [ 74.150230][ T61] [ 74.150235][ T61] dump_stack_lvl+0x100/0x190 [ 74.150250][ T61] should_fail_ex.cold+0x5/0xa [ 74.150263][ T61] should_failslab+0xc2/0x120 [ 74.150279][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.150294][ T61] ? __alloc_skb+0x140/0x710 [ 74.150311][ T61] __alloc_skb+0x140/0x710 [ 74.150323][ T61] ? __alloc_skb+0x5b7/0x710 [ 74.150336][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 74.150352][ T61] ? kfree_skbmem+0x19f/0x210 [ 74.150364][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.150384][ T61] process_one_work+0xa23/0x1940 [ 74.150406][ T61] ? __pfx_process_one_work+0x10/0x10 [ 74.150425][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.150441][ T61] worker_thread+0x5ef/0xe50 [ 74.150460][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.150476][ T61] ? kthread+0x13a/0x450 [ 74.150490][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.150504][ T61] kthread+0x370/0x450 [ 74.150518][ T61] ? __pfx_kthread+0x10/0x10 [ 74.150533][ T61] ret_from_fork+0x72b/0xd50 [ 74.150547][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 74.150563][ T61] ? __switch_to+0x800/0x10f0 [ 74.150580][ T61] ? __pfx_kthread+0x10/0x10 [ 74.150595][ T61] ret_from_fork_asm+0x1a/0x30 [ 74.150616][ T61] [ 74.150897][ T61] FAULT_INJECTION: forcing a failure. [ 74.150897][ T61] name failslab, interval 1, probability 10, space 0, times 7 [ 74.154626][ T89] FAULT_INJECTION: forcing a failure. [ 74.154626][ T89] name failslab, interval 1, probability 10, space 0, times 6 [ 74.155086][ T1162] CPU: 3 UID: 0 PID: 1162 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 74.155110][ T1162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.155122][ T1162] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.155148][ T1162] Call Trace: [ 74.155154][ T1162] [ 74.155161][ T1162] dump_stack_lvl+0x100/0x190 [ 74.155181][ T1162] should_fail_ex.cold+0x5/0xa [ 74.155200][ T1162] should_failslab+0xc2/0x120 [ 74.155226][ T1162] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.155253][ T1162] ? __alloc_skb+0x140/0x710 [ 74.155279][ T1162] __alloc_skb+0x140/0x710 [ 74.155297][ T1162] ? __alloc_skb+0x5b7/0x710 [ 74.155317][ T1162] ? __pfx___alloc_skb+0x10/0x10 [ 74.155345][ T1162] ? kfree_skbmem+0x19f/0x210 [ 74.155365][ T1162] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.155405][ T1162] process_one_work+0xa23/0x1940 [ 74.155441][ T1162] ? __pfx_process_one_work+0x10/0x10 [ 74.155472][ T1162] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.155497][ T1162] worker_thread+0x5ef/0xe50 [ 74.155531][ T1162] ? kthread+0x13a/0x450 [ 74.155556][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 74.155578][ T1162] kthread+0x370/0x450 [ 74.155598][ T1162] ? __pfx_kthread+0x10/0x10 [ 74.155621][ T1162] ret_from_fork+0x72b/0xd50 [ 74.155642][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 74.155662][ T1162] ? __switch_to+0x800/0x10f0 [ 74.155690][ T1162] ? __pfx_kthread+0x10/0x10 [ 74.155717][ T1162] ret_from_fork_asm+0x1a/0x30 [ 74.155752][ T1162] [ 74.157095][ T5821] CPU: 3 UID: 0 PID: 5821 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 74.157115][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.157125][ T5821] Workqueue: events nsim_fib_event_work [ 74.157142][ T5821] Call Trace: [ 74.157147][ T5821] [ 74.157153][ T5821] dump_stack_lvl+0x100/0x190 [ 74.157172][ T5821] should_fail_ex.cold+0x5/0xa [ 74.157191][ T5821] should_failslab+0xc2/0x120 [ 74.157214][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 74.157234][ T5821] ? __kasan_kmalloc+0xaa/0xb0 [ 74.157256][ T5821] ? nsim_fib6_rt_nh_add+0x4a/0x290 [ 74.157285][ T5821] nsim_fib6_rt_nh_add+0x4a/0x290 [ 74.157312][ T5821] nsim_fib_event_work+0x16ed/0x6310 [ 74.157341][ T5821] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.157360][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 74.157391][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 74.157416][ T5821] ? rcu_is_watching+0x12/0xc0 [ 74.157439][ T5821] process_one_work+0xa23/0x1940 [ 74.157472][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 74.157502][ T5821] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 74.157522][ T5821] worker_thread+0x5ef/0xe50 [ 74.157557][ T5821] ? kthread+0x13a/0x450 [ 74.157577][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 74.157598][ T5821] kthread+0x370/0x450 [ 74.157618][ T5821] ? __pfx_kthread+0x10/0x10 [ 74.157640][ T5821] ret_from_fork+0x72b/0xd50 [ 74.157660][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 74.157679][ T5821] ? __switch_to+0x800/0x10f0 [ 74.157706][ T5821] ? __pfx_kthread+0x10/0x10 [ 74.157731][ T5821] ret_from_fork_asm+0x1a/0x30 [ 74.157766][ T5821] [ 74.157776][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.157791][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.157798][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.157815][ T61] Call Trace: [ 74.157819][ T61] [ 74.157823][ T61] dump_stack_lvl+0x100/0x190 [ 74.157836][ T61] should_fail_ex.cold+0x5/0xa [ 74.157849][ T61] should_failslab+0xc2/0x120 [ 74.157864][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.157879][ T61] ? __alloc_skb+0x140/0x710 [ 74.157895][ T61] __alloc_skb+0x140/0x710 [ 74.157909][ T61] ? __alloc_skb+0x5b7/0x710 [ 74.157922][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 74.157937][ T61] ? kfree_skbmem+0x19f/0x210 [ 74.157949][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.157970][ T61] process_one_work+0xa23/0x1940 [ 74.157991][ T61] ? __pfx_process_one_work+0x10/0x10 [ 74.158010][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.158026][ T61] worker_thread+0x5ef/0xe50 [ 74.158045][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.158061][ T61] ? kthread+0x13a/0x450 [ 74.158074][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.158088][ T61] kthread+0x370/0x450 [ 74.158102][ T61] ? __pfx_kthread+0x10/0x10 [ 74.158117][ T61] ret_from_fork+0x72b/0xd50 [ 74.158130][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 74.158144][ T61] ? __switch_to+0x800/0x10f0 [ 74.158160][ T61] ? __pfx_kthread+0x10/0x10 [ 74.158175][ T61] ret_from_fork_asm+0x1a/0x30 [ 74.158201][ T61] [ 74.158223][ T61] FAULT_INJECTION: forcing a failure. [ 74.158223][ T61] name failslab, interval 1, probability 10, space 0, times 2 [ 74.158690][ T89] CPU: 2 UID: 0 PID: 89 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.158717][ T89] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.158729][ T89] Workqueue: events_unbound cfg80211_wiphy_work [ 74.158757][ T89] Call Trace: [ 74.158764][ T89] [ 74.158772][ T89] dump_stack_lvl+0x100/0x190 [ 74.158794][ T89] should_fail_ex.cold+0x5/0xa [ 74.158814][ T89] should_failslab+0xc2/0x120 [ 74.158839][ T89] __kmalloc_noprof+0xfc/0x820 [ 74.158860][ T89] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.158882][ T89] ? ieee80211_bss_info_update+0x310/0xab0 [ 74.158917][ T89] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.158941][ T89] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.158970][ T89] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.158999][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.159037][ T89] ? do_raw_spin_lock+0x128/0x260 [ 74.159048][ T48] FAULT_INJECTION: forcing a failure. [ 74.159048][ T48] name failslab, interval 1, probability 10, space 0, times 2 [ 74.159057][ T89] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.159085][ T89] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.159113][ T89] ? mark_held_locks+0x40/0x70 [ 74.159139][ T89] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.159160][ T89] ? __asan_memcpy+0x3c/0x60 [ 74.159182][ T89] ieee80211_inform_bss+0x159/0x1170 [ 74.159213][ T89] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.159246][ T89] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.159274][ T89] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.159302][ T89] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.159328][ T89] ? unwind_next_frame+0x3be/0x2090 [ 74.159361][ T89] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.159387][ T89] ? ret_from_fork_asm+0x1a/0x30 [ 74.159428][ T89] ? stack_trace_save+0x8e/0xc0 [ 74.159451][ T89] ? __pfx_stack_trace_save+0x10/0x10 [ 74.159477][ T89] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.159500][ T89] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.159523][ T89] ? __kmalloc_noprof+0x322/0x820 [ 74.159535][ T89] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.159553][ T89] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.159574][ T89] ? process_one_work+0xa23/0x1940 [ 74.159596][ T89] ? worker_thread+0x5ef/0xe50 [ 74.159618][ T89] ? kthread+0x370/0x450 [ 74.159639][ T89] ? ret_from_fork+0x72b/0xd50 [ 74.159659][ T89] ? ret_from_fork_asm+0x1a/0x30 [ 74.159688][ T89] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.159725][ T89] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.159753][ T89] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.159786][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.159814][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.159851][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.159878][ T89] ? find_held_lock+0x2b/0x80 [ 74.159899][ T89] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.159926][ T89] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.159961][ T89] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.159995][ T89] ieee80211_bss_info_update+0x310/0xab0 [ 74.160026][ T89] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.160061][ T89] ? rcu_is_watching+0x12/0xc0 [ 74.160083][ T89] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.160108][ T89] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.160138][ T89] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.160173][ T89] ieee80211_iface_work+0xa9a/0x1070 [ 74.160204][ T89] cfg80211_wiphy_work+0x2b7/0x550 [ 74.160231][ T89] process_one_work+0xa23/0x1940 [ 74.160252][ T89] ? __pfx_process_one_work+0x10/0x10 [ 74.160271][ T89] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.160288][ T89] worker_thread+0x5ef/0xe50 [ 74.160308][ T89] ? kthread+0x13a/0x450 [ 74.160321][ T89] ? __pfx_worker_thread+0x10/0x10 [ 74.160335][ T89] kthread+0x370/0x450 [ 74.160349][ T89] ? __pfx_kthread+0x10/0x10 [ 74.160364][ T89] ret_from_fork+0x72b/0xd50 [ 74.160377][ T89] ? __pfx_ret_from_fork+0x10/0x10 [ 74.160391][ T89] ? __switch_to+0x800/0x10f0 [ 74.160407][ T89] ? __pfx_kthread+0x10/0x10 [ 74.160422][ T89] ret_from_fork_asm+0x1a/0x30 [ 74.160442][ T89] [ 74.160448][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 74.160461][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.160468][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.160484][ T61] Call Trace: [ 74.160488][ T61] [ 74.160488][ T89] FAULT_INJECTION: forcing a failure. [ 74.160488][ T89] name failslab, interval 1, probability 10, space 0, times 1 [ 74.160492][ T61] dump_stack_lvl+0x100/0x190 [ 74.160504][ T61] should_fail_ex.cold+0x5/0xa [ 74.160516][ T61] should_failslab+0xc2/0x120 [ 74.160531][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.160545][ T61] ? __alloc_skb+0x140/0x710 [ 74.160563][ T61] __alloc_skb+0x140/0x710 [ 74.160576][ T61] ? __alloc_skb+0x5b7/0x710 [ 74.160590][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 74.160603][ T61] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.160615][ T61] ? __pfx___might_resched+0x10/0x10 [ 74.160635][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.160656][ T61] process_one_work+0xa23/0x1940 [ 74.160676][ T61] ? __pfx_process_one_work+0x10/0x10 [ 74.160695][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.160711][ T61] worker_thread+0x5ef/0xe50 [ 74.160730][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.160746][ T61] ? kthread+0x13a/0x450 [ 74.160759][ T61] ? __pfx_worker_thread+0x10/0x10 [ 74.160773][ T61] kthread+0x370/0x450 [ 74.160786][ T61] ? __pfx_kthread+0x10/0x10 [ 74.160801][ T61] ret_from_fork+0x72b/0xd50 [ 74.160815][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 74.160829][ T61] ? __switch_to+0x800/0x10f0 [ 74.160845][ T61] ? __pfx_kthread+0x10/0x10 [ 74.160860][ T61] ret_from_fork_asm+0x1a/0x30 [ 74.160880][ T61] [ 74.161457][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 74.161476][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.161487][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 74.161512][ T48] Call Trace: [ 74.161518][ T48] [ 74.161525][ T48] dump_stack_lvl+0x100/0x190 [ 74.161548][ T48] should_fail_ex.cold+0x5/0xa [ 74.161571][ T48] should_failslab+0xc2/0x120 [ 74.161593][ T48] __kmalloc_noprof+0xfc/0x820 [ 74.161610][ T48] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.161633][ T48] ? ieee80211_bss_info_update+0x310/0xab0 [ 74.161656][ T48] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.161681][ T48] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.161716][ T48] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.161746][ T48] ? __lock_acquire+0x49f/0x1a40 [ 74.161781][ T48] ? do_raw_spin_lock+0x128/0x260 [ 74.161798][ T48] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.161823][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.161850][ T48] ? mark_held_locks+0x40/0x70 [ 74.161890][ T48] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.161911][ T48] ? __asan_memcpy+0x3c/0x60 [ 74.161930][ T48] ieee80211_inform_bss+0x159/0x1170 [ 74.161958][ T48] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.161987][ T48] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.162017][ T48] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.162043][ T48] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.162066][ T48] ? unwind_next_frame+0x3be/0x2090 [ 74.162095][ T48] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.162117][ T48] ? ret_from_fork_asm+0x1a/0x30 [ 74.162155][ T48] ? stack_trace_save+0x8e/0xc0 [ 74.162180][ T48] ? __pfx_stack_trace_save+0x10/0x10 [ 74.162207][ T48] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.162229][ T48] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.162252][ T48] ? __kmalloc_noprof+0x322/0x820 [ 74.162269][ T48] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.162295][ T48] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.162322][ T48] ? process_one_work+0xa23/0x1940 [ 74.162350][ T48] ? worker_thread+0x5ef/0xe50 [ 74.162371][ T48] ? kthread+0x370/0x450 [ 74.162390][ T48] ? ret_from_fork+0x72b/0xd50 [ 74.162407][ T48] ? ret_from_fork_asm+0x1a/0x30 [ 74.162433][ T48] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.162464][ T48] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.162493][ T48] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.162523][ T48] ? __lock_acquire+0x49f/0x1a40 [ 74.162548][ T48] ? __lock_acquire+0x49f/0x1a40 [ 74.162581][ T48] ? __lock_acquire+0x49f/0x1a40 [ 74.162602][ T6229] syz_tun (unregistering): left allmulticast mode [ 74.162606][ T48] ? find_held_lock+0x2b/0x80 [ 74.162629][ T48] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.162655][ T48] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.162686][ T48] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.162716][ T48] ieee80211_bss_info_update+0x310/0xab0 [ 74.162741][ T48] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.162776][ T48] ? rcu_is_watching+0x12/0xc0 [ 74.162799][ T48] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.162821][ T48] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.162849][ T48] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.162885][ T48] ieee80211_iface_work+0xa9a/0x1070 [ 74.162916][ T48] cfg80211_wiphy_work+0x2b7/0x550 [ 74.162960][ T48] process_one_work+0xa23/0x1940 [ 74.162993][ T48] ? __pfx_process_one_work+0x10/0x10 [ 74.163023][ T48] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.163048][ T48] worker_thread+0x5ef/0xe50 [ 74.163080][ T48] ? __pfx_worker_thread+0x10/0x10 [ 74.163108][ T48] ? kthread+0x13a/0x450 [ 74.163127][ T48] ? __pfx_worker_thread+0x10/0x10 [ 74.163148][ T48] kthread+0x370/0x450 [ 74.163168][ T48] ? __pfx_kthread+0x10/0x10 [ 74.163191][ T48] ret_from_fork+0x72b/0xd50 [ 74.163211][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 74.163236][ T48] ? __switch_to+0x800/0x10f0 [ 74.163263][ T48] ? __pfx_kthread+0x10/0x10 [ 74.163286][ T48] ret_from_fork_asm+0x1a/0x30 [ 74.163318][ T48] [ 74.164862][ T89] CPU: 2 UID: 0 PID: 89 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.164884][ T89] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.164896][ T89] Workqueue: events_unbound cfg80211_wiphy_work [ 74.164922][ T89] Call Trace: [ 74.164929][ T89] [ 74.164935][ T89] dump_stack_lvl+0x100/0x190 [ 74.164957][ T89] should_fail_ex.cold+0x5/0xa [ 74.164978][ T89] should_failslab+0xc2/0x120 [ 74.165029][ T89] __kmalloc_noprof+0xfc/0x820 [ 74.165053][ T89] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.165088][ T89] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.165116][ T89] ? __mod_timer+0x40e/0xca0 [ 74.165143][ T89] ? __lock_acquire+0x49f/0x1a40 [ 74.165170][ T89] ? sta_get_last_rx_stats+0x1ad/0x3a0 [ 74.165197][ T89] ? __pfx_round_jiffies+0x10/0x10 [ 74.165227][ T89] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.165267][ T89] ? rcu_is_watching+0x12/0xc0 [ 74.165293][ T89] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 74.165322][ T89] ? do_raw_spin_lock+0x128/0x260 [ 74.165342][ T89] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.165381][ T89] ieee80211_iface_work+0xa9a/0x1070 [ 74.165413][ T89] cfg80211_wiphy_work+0x2b7/0x550 [ 74.165442][ T89] process_one_work+0xa23/0x1940 [ 74.165478][ T89] ? __pfx_process_one_work+0x10/0x10 [ 74.165511][ T89] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.165540][ T89] worker_thread+0x5ef/0xe50 [ 74.165575][ T89] ? kthread+0x13a/0x450 [ 74.165597][ T89] ? __pfx_worker_thread+0x10/0x10 [ 74.165621][ T89] kthread+0x370/0x450 [ 74.165644][ T89] ? __pfx_kthread+0x10/0x10 [ 74.165670][ T89] ret_from_fork+0x72b/0xd50 [ 74.165692][ T89] ? __pfx_ret_from_fork+0x10/0x10 [ 74.165720][ T89] ? __switch_to+0x800/0x10f0 [ 74.165746][ T89] ? __pfx_kthread+0x10/0x10 [ 74.165769][ T89] ret_from_fork_asm+0x1a/0x30 [ 74.165802][ T89] [ 74.591739][ T845] usb 6-1: USB disconnect, device number 3 [ 74.593204][ T6229] syz_tun (unregistering): left promiscuous mode [ 78.353382][ T6229] bridge0: port 3(syz_tun) entered disabled state [ 78.397895][ T6242] bridge0: port 3(syz_tun) entered disabled state [ 78.409860][ T6242] syz_tun (unregistering): left allmulticast mode [ 78.412415][ T6242] syz_tun (unregistering): left promiscuous mode [ 78.416509][ T6242] bridge0: port 3(syz_tun) entered disabled state [ 78.642095][ T6301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.758335][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.762782][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.769393][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.772671][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.775717][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.794195][ T6301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.822366][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.829400][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.832610][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.836150][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.842332][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.908252][ T6301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.006926][ T6301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.265798][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.268634][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.271095][ T6706] bridge_slave_0: entered allmulticast mode [ 79.275071][ T6706] bridge_slave_0: entered promiscuous mode [ 79.282402][ T6301] bridge_slave_1: left allmulticast mode [ 79.288550][ T6301] bridge_slave_1: left promiscuous mode [ 79.290871][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.295569][ T6301] bridge_slave_0: left allmulticast mode [ 79.296849][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 79.297317][ T6301] bridge_slave_0: left promiscuous mode [ 79.302837][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.422304][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.428125][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.432841][ T6301] bond0 (unregistering): Released all slaves [ 79.445758][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.448746][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.451863][ T6706] bridge_slave_1: entered allmulticast mode [ 79.456040][ T6706] bridge_slave_1: entered promiscuous mode [ 79.464790][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.505207][ T6706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.510238][ T6706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.530925][ T6706] team0: Port device team_slave_0 added [ 79.536819][ T6706] team0: Port device team_slave_1 added [ 79.577882][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.584310][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.594390][ T6706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.599875][ T6759] vivid-000: unregistering video7 [ 79.606455][ T6759] vivid-000: unregistering video8 [ 79.621882][ T6759] vivid-000: unregistering vbi0 [ 79.636957][ T6759] vivid-000: unregistering vbi1 [ 79.638151][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.641684][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.651521][ T6706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.654630][ T6759] vivid-000: unregistering swradio0 [ 79.669221][ T6759] vivid-000: unregistering radio0 [ 79.674605][ T6759] vivid-000: unregistering radio1 [ 79.688941][ T6759] vivid-000: unregistering video9 [ 79.697536][ T6759] vivid-000: unregistering video10 [ 79.713802][ T6759] vivid-000: unregistering v4l-touch0 [ 79.751917][ T6759] vivid-001: unregistering video11 [ 79.755426][ T6759] vivid-001: unregistering video12 [ 79.760492][ T6759] vivid-001: unregistering vbi2 [ 79.767320][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 79.775687][ T6759] vivid-001: unregistering vbi3 [ 79.789209][ T6759] vivid-001: unregistering swradio1 [ 79.806549][ T6759] vivid-001: unregistering radio2 [ 79.817396][ T6759] vivid-001: unregistering radio3 [ 79.820732][ T6759] vivid-001: unregistering video13 [ 79.823799][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.824131][ T6759] vivid-001: unregistering video14 [ 79.826199][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.830098][ T6709] bridge_slave_0: entered allmulticast mode [ 79.832616][ T6759] vivid-001: unregistering v4l-touch1 [ 79.837596][ T6709] bridge_slave_0: entered promiscuous mode [ 79.841496][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.845174][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.847509][ T6709] bridge_slave_1: entered allmulticast mode [ 79.855995][ T6709] bridge_slave_1: entered promiscuous mode [ 79.881014][ T6759] vivid-002: unregistering video15 [ 79.883364][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 79.888840][ T6759] vivid-002: unregistering video16 [ 79.894458][ T6759] vivid-002: unregistering vbi4 [ 79.908008][ T6706] hsr_slave_0: entered promiscuous mode [ 79.911200][ T6759] vivid-002: unregistering vbi5 [ 79.914795][ T6706] hsr_slave_1: entered promiscuous mode [ 79.915304][ T6759] vivid-002: unregistering swradio2 [ 79.926783][ T6759] vivid-002: unregistering radio4 [ 79.928650][ T6301] hsr_slave_0: left promiscuous mode [ 79.931949][ T6759] vivid-002: unregistering radio5 [ 79.934529][ T6301] hsr_slave_1: left promiscuous mode [ 79.937278][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.939384][ T6759] vivid-002: unregistering video17 [ 79.939612][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.943307][ T6759] vivid-002: unregistering video18 [ 79.946386][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.948098][ T6759] vivid-002: unregistering v4l-touch2 [ 79.948768][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.965882][ T6301] veth1_macvtap: left promiscuous mode [ 79.968517][ T6301] veth0_macvtap: left promiscuous mode [ 79.971039][ T6301] veth1_vlan: left promiscuous mode [ 79.973351][ T6301] veth0_vlan: left promiscuous mode [ 79.989736][ T6759] vivid-003: unregistering video19 [ 79.992686][ T6759] vivid-003: unregistering video20 [ 79.999951][ T6759] vivid-003: unregistering vbi6 [ 80.008271][ T6759] vivid-003: unregistering vbi7 [ 80.015962][ T6759] vivid-003: unregistering swradio3 [ 80.019068][ T6759] vivid-003: unregistering radio6 [ 80.024184][ T6759] vivid-003: unregistering radio7 [ 80.028854][ T6759] vivid-003: unregistering video21 [ 80.035236][ T6759] vivid-003: unregistering video22 [ 80.039026][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 80.039170][ T6759] vivid-003: unregistering v4l-touch3 [ 80.044155][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.047163][ T10] usb 6-1: Product: syz [ 80.048541][ T10] usb 6-1: Manufacturer: syz [ 80.050141][ T10] usb 6-1: SerialNumber: syz [ 80.106640][ T6759] vivid-004: unregistering video23 [ 80.110552][ T6759] vivid-004: unregistering video24 [ 80.117501][ T6759] vivid-004: unregistering vbi8 [ 80.124050][ T6759] vivid-004: unregistering vbi9 [ 80.135429][ T6759] vivid-004: unregistering swradio4 [ 80.138677][ T6759] vivid-004: unregistering radio8 [ 80.150303][ T6759] vivid-004: unregistering radio9 [ 80.160118][ T6759] vivid-004: unregistering video25 [ 80.167256][ T6759] vivid-004: unregistering video26 [ 80.178015][ T6759] vivid-004: unregistering v4l-touch4 [ 80.220358][ T6759] vivid-005: unregistering video27 [ 80.223709][ T6759] vivid-005: unregistering video28 [ 80.230570][ T6759] vivid-005: unregistering vbi10 [ 80.237688][ T6759] vivid-005: unregistering vbi11 [ 80.253373][ T6759] vivid-005: unregistering swradio5 [ 80.264668][ T6759] vivid-005: unregistering radio10 [ 80.270347][ T6759] vivid-005: unregistering radio11 [ 80.273696][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 80.282029][ T6759] vivid-005: unregistering video29 [ 80.286662][ T6759] vivid-005: unregistering video30 [ 80.288928][ T6759] vivid-005: unregistering v4l-touch5 [ 80.296763][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 80.343636][ T6759] vivid-006: unregistering video31 [ 80.347119][ T6759] vivid-006: unregistering video32 [ 80.352595][ T6759] vivid-006: unregistering vbi12 [ 80.364830][ T6759] vivid-006: unregistering vbi13 [ 80.377158][ T6759] vivid-006: unregistering swradio6 [ 80.385008][ T6759] vivid-006: unregistering radio12 [ 80.395828][ T6759] vivid-006: unregistering radio13 [ 80.400464][ T6759] vivid-006: unregistering video33 [ 80.409755][ T6759] vivid-006: unregistering video34 [ 80.413500][ T6759] vivid-006: unregistering v4l-touch6 [ 80.460126][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.467137][ T6759] vivid-007: unregistering video35 [ 80.469526][ T6759] vivid-007: unregistering video36 [ 80.475581][ T6759] vivid-007: unregistering vbi14 [ 80.479437][ T10] hackrf 6-1:1.0: Board ID: 02 [ 80.481004][ T10] hackrf 6-1:1.0: Firmware version:  [ 80.501433][ T10] hackrf 6-1:1.0: Registered as swradio0 [ 80.504747][ T6759] vivid-007: unregistering vbi15 [ 80.506384][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.514672][ T10] hackrf 6-1:1.0: Registered as swradio1 [ 80.514792][ T6759] vivid-007: unregistering swradio7 [ 80.517503][ T10] hackrf 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 80.524746][ T6759] vivid-007: unregistering radio14 [ 80.535400][ T6759] vivid-007: unregistering radio15 [ 80.541161][ T6759] vivid-007: unregistering video37 [ 80.548906][ T6759] vivid-007: unregistering video38 [ 80.556611][ T6759] vivid-007: unregistering v4l-touch7 [ 80.578997][ T6709] team0: Port device team_slave_0 added [ 80.590109][ T6759] vivid-008: unregistering video39 [ 80.592914][ T6759] vivid-008: unregistering video40 [ 80.595321][ T6759] vivid-008: unregistering vbi16 [ 80.600658][ T6759] vivid-008: unregistering vbi17 [ 80.603235][ T6759] vivid-008: unregistering swradio8 [ 80.629561][ T6759] vivid-008: unregistering radio16 [ 80.647790][ T6759] vivid-008: unregistering radio17 [ 80.652288][ T6759] vivid-008: unregistering video41 [ 80.654729][ T6759] vivid-008: unregistering video42 [ 80.657254][ T6759] vivid-008: unregistering v4l-touch8 [ 80.658744][ T6709] team0: Port device team_slave_1 added [ 80.682094][ T6759] vivid-009: unregistering video43 [ 80.684492][ T6759] vivid-009: unregistering video44 [ 80.689322][ T6759] vivid-009: unregistering vbi18 [ 80.692493][ T6759] vivid-009: unregistering vbi19 [ 80.696208][ T6759] vivid-009: unregistering swradio9 [ 80.699527][ T6759] vivid-009: unregistering radio18 [ 80.705574][ T6759] vivid-009: unregistering radio19 [ 80.710596][ T6759] vivid-009: unregistering video45 [ 80.714598][ T6759] vivid-009: unregistering video46 [ 80.718764][ T6759] vivid-009: unregistering v4l-touch9 [ 80.722435][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.726382][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.735470][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.745902][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.748149][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.749200][ T6759] vivid-010: unregistering video47 [ 80.758319][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.759705][ T6759] vivid-010: unregistering video48 [ 80.764082][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 80.764873][ T6759] vivid-010: unregistering vbi20 [ 80.770928][ T6759] vivid-010: unregistering vbi21 [ 80.774684][ T6759] vivid-010: unregistering swradio10 [ 80.783056][ T6759] vivid-010: unregistering radio20 [ 80.793088][ T5759] Bluetooth: hci0: command tx timeout [ 80.796645][ T6759] vivid-010: unregistering radio21 [ 80.806388][ T6759] vivid-010: unregistering video49 [ 80.814979][ T6759] vivid-010: unregistering video50 [ 80.828591][ T6759] vivid-010: unregistering v4l-touch10 [ 80.844574][ T6709] hsr_slave_0: entered promiscuous mode [ 80.847424][ T6709] hsr_slave_1: entered promiscuous mode [ 80.850348][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 80.852169][ T6709] Cannot create hsr debugfs directory [ 80.865783][ T6759] vivid-011: unregistering video51 [ 80.869136][ T6759] vivid-011: unregistering video52 [ 80.873478][ T5759] Bluetooth: hci1: command tx timeout [ 80.882676][ T6759] vivid-011: unregistering vbi22 [ 80.895205][ T6759] vivid-011: unregistering vbi23 [ 80.908516][ T6759] vivid-011: unregistering swradio11 [ 80.914217][ T6759] vivid-011: unregistering radio22 [ 80.918239][ T6759] vivid-011: unregistering radio23 [ 80.922929][ T6759] vivid-011: unregistering video53 [ 80.928935][ T6759] vivid-011: unregistering video54 [ 80.934804][ T6759] vivid-011: unregistering v4l-touch11 [ 80.990415][ T6759] vivid-012: unregistering video55 [ 80.999551][ T6759] vivid-012: unregistering video56 [ 81.005536][ T6759] vivid-012: unregistering vbi24 [ 81.015999][ T6759] vivid-012: unregistering vbi25 [ 81.028565][ T6759] vivid-012: unregistering swradio12 [ 81.038401][ T6759] vivid-012: unregistering radio24 [ 81.048690][ T6759] vivid-012: unregistering radio25 [ 81.051883][ T6759] vivid-012: unregistering video57 [ 81.054978][ T6759] vivid-012: unregistering video58 [ 81.059204][ T6759] vivid-012: unregistering v4l-touch12 [ 81.092783][ T6759] vivid-013: unregistering video59 [ 81.097276][ T6759] vivid-013: unregistering video60 [ 81.102231][ T6759] vivid-013: unregistering vbi26 [ 81.112859][ T6759] vivid-013: unregistering vbi27 [ 81.119134][ T6759] vivid-013: unregistering swradio13 [ 81.132160][ T6301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.135691][ T6759] vivid-013: unregistering radio26 [ 81.136759][ T1488] cfg80211: failed to load regulatory.db [ 81.136763][ T6759] vivid-013: unregistering radio27 [ 81.140467][ T6759] vivid-013: unregistering video61 [ 81.143130][ T6759] vivid-013: unregistering video62 [ 81.150611][ T6759] vivid-013: unregistering v4l-touch13 [ 81.180684][ T6759] vivid-014: unregistering video63 [ 81.188765][ T6759] vivid-014: unregistering video64 [ 81.192493][ T6759] vivid-014: unregistering vbi28 [ 81.197200][ T6759] vivid-014: unregistering vbi29 [ 81.199876][ T6759] vivid-014: unregistering swradio14 [ 81.207669][ T6759] vivid-014: unregistering radio28 [ 81.213292][ T6759] vivid-014: unregistering radio29 [ 81.216586][ T6759] vivid-014: unregistering video65 [ 81.219408][ T6759] vivid-014: unregistering video66 [ 81.222288][ T6759] vivid-014: unregistering v4l-touch14 [ 81.250592][ T6301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.256473][ T6759] vivid-015: unregistering video67 [ 81.259399][ T6759] vivid-015: unregistering video68 [ 81.263610][ T6759] vivid-015: unregistering vbi30 [ 81.276582][ T6759] vivid-015: unregistering vbi31 [ 81.282934][ T6759] vivid-015: unregistering swradio15 [ 81.289898][ T6759] vivid-015: unregistering radio30 [ 81.299446][ T6759] vivid-015: unregistering radio31 [ 81.301884][ T6759] vivid-015: unregistering video69 [ 81.304855][ T6759] vivid-015: unregistering video70 [ 81.313403][ T6759] vivid-015: unregistering v4l-touch15 [ 81.350839][ T6759] vivid-016: unregistering video71 [ 81.354249][ T6759] vivid-016: unregistering video72 [ 81.357839][ T6301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.358079][ T6759] vivid-016: unregistering vbi32 [ 81.368141][ T6759] vivid-016: unregistering vbi33 [ 81.371307][ T6759] vivid-016: unregistering swradio16 [ 81.377655][ T6759] vivid-016: unregistering radio32 [ 81.381738][ T6759] vivid-016: unregistering radio33 [ 81.388410][ T6759] vivid-016: unregistering video73 [ 81.391739][ T6759] vivid-016: unregistering video74 [ 81.395454][ T6759] vivid-016: unregistering v4l-touch16 [ 81.430125][ T6759] vivid-017: unregistering video75 [ 81.432819][ T6759] vivid-017: unregistering video76 [ 81.438427][ T6759] vivid-017: unregistering vbi34 [ 81.445264][ T6759] vivid-017: unregistering vbi35 [ 81.448114][ T6759] vivid-017: unregistering swradio17 [ 81.452601][ T6759] vivid-017: unregistering radio34 [ 81.456517][ T6759] vivid-017: unregistering radio35 [ 81.459845][ T6759] vivid-017: unregistering video77 [ 81.463053][ T6759] vivid-017: unregistering video78 [ 81.467369][ T6759] vivid-017: unregistering v4l-touch17 [ 81.489466][ T6759] vivid-018: unregistering video79 [ 81.492004][ T6759] vivid-018: unregistering video80 [ 81.495814][ T6301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.498161][ T6759] vivid-018: unregistering vbi36 [ 81.510945][ T6759] vivid-018: unregistering vbi37 [ 81.515595][ T6759] vivid-018: unregistering swradio18 [ 81.518302][ T6759] vivid-018: unregistering radio36 [ 81.521546][ T6759] vivid-018: unregistering radio37 [ 81.526657][ T6759] vivid-018: unregistering video81 [ 81.531567][ T6759] vivid-018: unregistering video82 [ 81.536203][ T6759] vivid-018: unregistering v4l-touch18 [ 81.556881][ T6759] vivid-019: unregistering video83 [ 81.564233][ T6759] vivid-019: unregistering video84 [ 81.570604][ T6759] vivid-019: unregistering vbi38 [ 81.576072][ T6759] vivid-019: unregistering vbi39 [ 81.580368][ T6759] vivid-019: unregistering swradio19 [ 81.590235][ T6759] vivid-019: unregistering radio38 [ 81.596206][ T6759] vivid-019: unregistering radio39 [ 81.600248][ T6759] vivid-019: unregistering video85 [ 81.602598][ T6759] vivid-019: unregistering video86 [ 81.614390][ T6759] vivid-019: unregistering v4l-touch19 [ 81.640768][ T6759] vivid-020: unregistering video87 [ 81.643631][ T6759] vivid-020: unregistering video88 [ 81.645575][ T6301] bridge_slave_1: left allmulticast mode [ 81.646860][ T6759] vivid-020: unregistering vbi40 [ 81.647370][ T6301] bridge_slave_1: left promiscuous mode [ 81.650892][ T6759] vivid-020: unregistering vbi41 [ 81.651450][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.653115][ T6759] vivid-020: unregistering swradio20 [ 81.657376][ T6301] bridge_slave_0: left allmulticast mode [ 81.657930][ T6759] vivid-020: unregistering radio40 [ 81.659209][ T6301] bridge_slave_0: left promiscuous mode [ 81.661420][ T6759] vivid-020: unregistering radio41 [ 81.662505][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.666751][ T6759] vivid-020: unregistering video89 [ 81.669452][ T6759] vivid-020: unregistering video90 [ 81.675225][ T6759] vivid-020: unregistering v4l-touch20 [ 81.709454][ T6759] vivid-021: unregistering video91 [ 81.711873][ T6759] vivid-021: unregistering video92 [ 81.717031][ T6759] vivid-021: unregistering vbi42 [ 81.726815][ T6759] vivid-021: unregistering vbi43 [ 81.732648][ T6759] vivid-021: unregistering swradio21 [ 81.735215][ T6759] vivid-021: unregistering radio42 [ 81.737751][ T6759] vivid-021: unregistering radio43 [ 81.740207][ T6759] vivid-021: unregistering video93 [ 81.745904][ T6759] vivid-021: unregistering video94 [ 81.749634][ T6759] vivid-021: unregistering v4l-touch21 [ 81.785023][ T6759] vivid-022: unregistering video95 [ 81.788019][ T6759] vivid-022: unregistering video96 [ 81.791666][ T6759] vivid-022: unregistering vbi44 [ 81.797513][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.797732][ T6759] vivid-022: unregistering vbi45 [ 81.804555][ T6759] vivid-022: unregistering swradio22 [ 81.807524][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.811046][ T6759] vivid-022: unregistering radio44 [ 81.811680][ T6301] bond0 (unregistering): Released all slaves [ 81.813748][ T6759] vivid-022: unregistering radio45 [ 81.817418][ T6759] vivid-022: unregistering video97 [ 81.823829][ T6759] vivid-022: unregistering video98 [ 81.826801][ T6759] vivid-022: unregistering v4l-touch22 [ 81.858651][ T6759] vivid-023: unregistering video99 [ 81.861628][ T6759] vivid-023: unregistering video100 [ 81.865099][ T6759] vivid-023: unregistering vbi46 [ 81.869584][ T6759] vivid-023: unregistering vbi47 [ 81.872421][ T6759] vivid-023: unregistering swradio23 [ 81.876096][ T6759] vivid-023: unregistering radio46 [ 81.879517][ T6759] vivid-023: unregistering radio47 [ 81.882442][ T6759] vivid-023: unregistering video101 [ 81.885397][ T6759] vivid-023: unregistering video102 [ 81.886033][ T6301] tipc: Disabling bearer [ 81.888304][ T6759] vivid-023: unregistering v4l-touch23 [ 81.895338][ T6301] tipc: Disabling bearer [ 81.900996][ T6301] tipc: Disabling bearer [ 81.903283][ T6301] tipc: Left network mode [ 82.004015][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 82.187013][ T6301] hsr_slave_0: left promiscuous mode [ 82.189519][ T6301] hsr_slave_1: left promiscuous mode [ 82.191525][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.194004][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.196664][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.198979][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.205801][ T6301] veth1_macvtap: left promiscuous mode [ 82.207574][ T6301] veth0_macvtap: left promiscuous mode [ 82.209365][ T6301] veth1_vlan: left promiscuous mode [ 82.211042][ T6301] veth0_vlan: left promiscuous mode [ 82.344011][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 82.350813][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 82.654133][ T6706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.665085][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.667831][ T6706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.671723][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.676479][ T6706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.685442][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.690143][ T6706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.694551][ T6706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.734388][ T6709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.738413][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.741774][ T6709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.745719][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.750823][ T6709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.755227][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.758559][ T6709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.762249][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.840147][ T6706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.853939][ T6706] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.859077][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.864020][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.866330][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.873210][ T5759] Bluetooth: hci0: command tx timeout [ 82.880687][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.883010][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.890610][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.897522][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.899828][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.909135][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.911396][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.953169][ T5759] Bluetooth: hci1: command tx timeout [ 83.157474][ T6706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.163465][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.192229][ T6706] veth0_vlan: entered promiscuous mode [ 83.208632][ T6706] veth1_vlan: entered promiscuous mode [ 83.212019][ T6709] veth0_vlan: entered promiscuous mode [ 83.224365][ T6709] veth1_vlan: entered promiscuous mode [ 83.240936][ T6706] veth0_macvtap: entered promiscuous mode [ 83.247122][ T6706] veth1_macvtap: entered promiscuous mode [ 83.261455][ T6709] veth0_macvtap: entered promiscuous mode [ 83.266976][ T6709] veth1_macvtap: entered promiscuous mode [ 83.271595][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.284640][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.293372][ T6301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.296329][ T6301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.300822][ T6301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.304463][ T6301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.309384][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.319081][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.335049][ T6301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.346159][ T6301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.348986][ T6301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.359685][ T6301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.388368][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.393657][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.412497][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.415942][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.430518][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.433666][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.448706][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.451597][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.544240][ T6867] bdc PNP0103:00: error -ENXIO: IRQ index 0 not found [ 83.611421][ T9] usb 6-1: USB disconnect, device number 4 [ 83.612036][ T6869] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000 [ 83.669382][ T6869] udc dummy_udc.0: failed to start g1: -19 [ 83.680546][ T6874] gadgetfs: bound to dummy_udc driver [ 83.685029][ T6869] UDC core: g1: couldn't find an available UDC or it's busy [ 83.814823][ T6885] gsmld_receive_buf: 00000000: f9 . [ 83.819310][ T6885] gsmld_receive_buf: 00000000: 03 . [ 83.827118][ T6885] gsmld_receive_buf: 00000000: 3f ? [ 83.834894][ T6885] gsmld_receive_buf: 00000000: 01 . [ 83.839133][ T6885] gsmld_receive_buf: 00000000: 1c . [ 83.844471][ T6885] gsmld_receive_buf: 00000000: f9 . [ 84.105096][ T6893] FAULT_INJECTION: forcing a failure. [ 84.105096][ T6893] name failslab, interval 1, probability 100, space 0, times 10 [ 84.110259][ T6893] CPU: 3 UID: 0 PID: 6893 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 84.110279][ T6893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.110287][ T6893] Call Trace: [ 84.110294][ T6893] [ 84.110300][ T6893] dump_stack_lvl+0x100/0x190 [ 84.110321][ T6893] should_fail_ex.cold+0x5/0xa [ 84.110335][ T6893] should_failslab+0xc2/0x120 [ 84.110354][ T6893] __kmalloc_cache_noprof+0x91/0x6c0 [ 84.110369][ T6893] ? configfs_write_iter+0x388/0x4e0 [ 84.110383][ T6893] configfs_write_iter+0x388/0x4e0 [ 84.110398][ T6893] vfs_write+0x6ac/0x1050 [ 84.110410][ T6893] ? __pfx_configfs_write_iter+0x10/0x10 [ 84.110425][ T6893] ? __pfx_vfs_write+0x10/0x10 [ 84.110435][ T6893] ? find_held_lock+0x2b/0x80 [ 84.110458][ T6893] ksys_write+0x12a/0x250 [ 84.110469][ T6893] ? __pfx_ksys_write+0x10/0x10 [ 84.110484][ T6893] __do_fast_syscall_32+0xe7/0x970 [ 84.110503][ T6893] do_fast_syscall_32+0x32/0x70 [ 84.110518][ T6893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.110533][ T6893] RIP: 0023:0xf700efec [ 84.110549][ T6893] Code: Unable to access opcode bytes at 0xf700efc2. [ 84.110555][ T6893] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 84.110567][ T6893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 84.110575][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.110581][ T6893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.110588][ T6893] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.110599][ T6893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.110612][ T6893] [ 84.112857][ T6892] FAULT_INJECTION: forcing a failure. [ 84.112857][ T6892] name failslab, interval 1, probability 100, space 0, times 7 [ 84.112919][ T6893] FAULT_INJECTION: forcing a failure. [ 84.112919][ T6893] name failslab, interval 1, probability 100, space 0, times 7 [ 84.116149][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 84.116164][ T6892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.116172][ T6892] Call Trace: [ 84.116176][ T6892] [ 84.116181][ T6892] dump_stack_lvl+0x100/0x190 [ 84.116199][ T6892] should_fail_ex.cold+0x5/0xa [ 84.116212][ T6892] should_failslab+0xc2/0x120 [ 84.116227][ T6892] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.116241][ T6892] ? __pfx_acct_collect+0x10/0x10 [ 84.116261][ T6892] ? taskstats_exit+0x6d3/0xca0 [ 84.116286][ T6892] taskstats_exit+0x6d3/0xca0 [ 84.116306][ T6892] ? __pfx_acct_update_integrals+0x10/0x10 [ 84.116328][ T6892] ? __pfx_taskstats_exit+0x10/0x10 [ 84.116344][ T6892] ? rcu_read_lock_any_held+0x6a/0xa0 [ 84.116361][ T6892] do_exit+0x65c/0x2ae0 [ 84.116377][ T6892] ? signal_wake_up_state+0x8d/0x130 [ 84.116395][ T6892] ? __pfx_do_exit+0x10/0x10 [ 84.116409][ T6892] ? do_group_exit+0x1bd/0x2a0 [ 84.116423][ T6892] ? rcu_is_watching+0x12/0xc0 [ 84.116438][ T6892] do_group_exit+0xd5/0x2a0 [ 84.116454][ T6892] __ia32_sys_exit_group+0x3e/0x50 [ 84.116469][ T6892] ia32_sys_call+0x19ea/0x19f0 [ 84.116486][ T6892] __do_fast_syscall_32+0xe7/0x970 [ 84.116502][ T6892] do_fast_syscall_32+0x32/0x70 [ 84.116516][ T6892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.116531][ T6892] RIP: 0023:0xf700efec [ 84.116545][ T6892] Code: Unable to access opcode bytes at 0xf700efc2. [ 84.116551][ T6892] RSP: 002b:00000000ffd0d3ac EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 84.116562][ T6892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 84.116569][ T6892] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f7178459 [ 84.116576][ T6892] RBP: 00000000f73d6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 84.116583][ T6892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 84.116589][ T6892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.116602][ T6892] [ 84.247226][ T6893] CPU: 2 UID: 0 PID: 6893 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 84.247251][ T6893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.247262][ T6893] Call Trace: [ 84.247268][ T6893] [ 84.247274][ T6893] dump_stack_lvl+0x100/0x190 [ 84.247300][ T6893] should_fail_ex.cold+0x5/0xa [ 84.247320][ T6893] should_failslab+0xc2/0x120 [ 84.247344][ T6893] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.247366][ T6893] ? __pfx_acct_collect+0x10/0x10 [ 84.247387][ T6893] ? taskstats_exit+0x6d3/0xca0 [ 84.247411][ T6893] taskstats_exit+0x6d3/0xca0 [ 84.247436][ T6893] ? __pfx_taskstats_exit+0x10/0x10 [ 84.247466][ T6893] do_exit+0x65c/0x2ae0 [ 84.247493][ T6893] ? __pfx_do_exit+0x10/0x10 [ 84.247511][ T6893] ? do_raw_spin_lock+0x128/0x260 [ 84.247530][ T6893] ? find_held_lock+0x2b/0x80 [ 84.247549][ T6893] ? get_signal+0x7e0/0x21e0 [ 84.247571][ T6893] do_group_exit+0xd5/0x2a0 [ 84.247596][ T6893] get_signal+0x1ec7/0x21e0 [ 84.247617][ T6893] ? __pfx_get_signal+0x10/0x10 [ 84.247637][ T6893] ? do_futex+0x190/0x440 [ 84.247657][ T6893] arch_do_signal_or_restart+0x91/0x7a0 [ 84.247685][ T6893] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 84.247717][ T6893] ? xfd_validate_state+0x129/0x190 [ 84.247743][ T6893] exit_to_user_mode_loop+0x139/0x6f0 [ 84.247761][ T6893] ? rcu_is_watching+0x12/0xc0 [ 84.247783][ T6893] __do_fast_syscall_32+0x701/0x970 [ 84.247803][ T6893] do_fast_syscall_32+0x32/0x70 [ 84.247831][ T6893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.247852][ T6893] RIP: 0023:0xf700efec [ 84.247873][ T6893] Code: Unable to access opcode bytes at 0xf700efc2. [ 84.247881][ T6893] RSP: 002b:00000000f53fd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 84.247898][ T6893] RAX: fffffffffffffe00 RBX: 00000000f7404f88 RCX: 0000000000000080 [ 84.247905][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c [ 84.247914][ T6893] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 84.247924][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.247934][ T6893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.247955][ T6893] [ 84.590799][ T6911] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.661766][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 84.878918][ T6924] ================================================================== [ 84.881537][ T6924] BUG: KASAN: slab-use-after-free in filp_flush+0x25/0x190 [ 84.883815][ T6924] Read of size 8 at addr ffff888014148318 by task syz.3.203/6924 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.887513][ T6924] [ 84.889430][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 84.889450][ T6924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.889460][ T6924] Call Trace: [ 84.889467][ T6924] [ 84.889474][ T6924] dump_stack_lvl+0x100/0x190 [ 84.889492][ T6924] print_report+0x13d/0x4b0 [ 84.889512][ T6924] ? __virt_addr_valid+0x239/0x430 [ 84.889530][ T6924] ? filp_flush+0x25/0x190 [ 84.889541][ T6924] kasan_report+0xdf/0x1c0 [ 84.889557][ T6924] ? filp_flush+0x25/0x190 [ 84.889568][ T6924] kasan_check_range+0x10f/0x1e0 [ 84.889586][ T6924] filp_flush+0x25/0x190 [ 84.889599][ T6924] filp_close+0x1c/0x30 [ 84.889611][ T6924] gaudio_cleanup+0x59/0x100 [ 84.889624][ T6924] f_audio_bind+0x56c/0x660 [ 84.889635][ T6924] ? __pfx_f_audio_bind+0x10/0x10 [ 84.889646][ T6924] ? __pfx_f_audio_bind+0x10/0x10 [ 84.889657][ T6924] usb_add_function+0x219/0x890 [ 84.889674][ T6924] configfs_composite_bind+0xd83/0x1960 [ 84.889692][ T6924] gadget_bind_driver+0x28c/0xbf0 [ 84.889706][ T6924] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 84.889726][ T6924] ? __pfx_gadget_bind_driver+0x10/0x10 [ 84.889740][ T6924] really_probe+0x241/0xa60 [ 84.889757][ T6924] __driver_probe_device+0x20e/0x450 [ 84.889772][ T6924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.889789][ T6924] driver_probe_device+0x4a/0x140 [ 84.889806][ T6924] __driver_attach+0x21f/0x5b0 [ 84.889821][ T6924] ? __pfx___driver_attach+0x10/0x10 [ 84.889836][ T6924] bus_for_each_dev+0x13e/0x1d0 [ 84.889849][ T6924] ? __pfx_bus_for_each_dev+0x10/0x10 [ 84.889860][ T6924] ? bus_add_driver+0x2b5/0x5b0 [ 84.889878][ T6924] bus_add_driver+0x305/0x5b0 [ 84.889895][ T6924] driver_register+0x1e2/0x360 [ 84.889912][ T6924] usb_gadget_register_driver_owner+0x132/0x210 [ 84.889925][ T6924] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 84.889941][ T6924] configfs_write_iter+0x302/0x4e0 [ 84.889955][ T6924] vfs_write+0x6ac/0x1050 [ 84.889967][ T6924] ? __pfx_configfs_write_iter+0x10/0x10 [ 84.889979][ T6924] ? __pfx_vfs_write+0x10/0x10 [ 84.889988][ T6924] ? find_held_lock+0x2b/0x80 [ 84.890006][ T6924] ksys_write+0x12a/0x250 [ 84.890016][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 84.890028][ T6924] __do_fast_syscall_32+0xe7/0x970 [ 84.890044][ T6924] do_fast_syscall_32+0x32/0x70 [ 84.890058][ T6924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.890072][ T6924] RIP: 0023:0xf7f85fec [ 84.890088][ T6924] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 84.890094][ T6924] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 84.890105][ T6924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 84.890113][ T6924] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 84.890120][ T6924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.890126][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.890133][ T6924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.890143][ T6924] [ 84.890147][ T6924] [ 84.982432][ T6924] Allocated by task 6869: [ 84.983829][ T6924] kasan_save_stack+0x30/0x50 [ 84.985339][ T6924] kasan_save_track+0x14/0x30 [ 84.986835][ T6924] __kasan_slab_alloc+0x89/0x90 [ 84.988378][ T6924] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 84.990097][ T6924] alloc_empty_file+0x5b/0x1c0 [ 84.991613][ T6924] path_openat+0xe7/0x4280 [ 84.993027][ T6924] do_file_open+0x20e/0x430 [ 84.994488][ T6924] file_open_name+0x1c3/0x3e0 [ 84.995976][ T6924] filp_open+0x2e/0x50 [ 84.997281][ T6924] gaudio_setup+0x127/0x1a00 [ 84.998745][ T6924] f_audio_bind+0x146/0x660 [ 85.000193][ T6924] usb_add_function+0x219/0x890 [ 85.001758][ T6924] configfs_composite_bind+0xd83/0x1960 [ 85.003499][ T6924] gadget_bind_driver+0x28c/0xbf0 [ 85.005089][ T6924] really_probe+0x241/0xa60 [ 85.006532][ T6924] __driver_probe_device+0x20e/0x450 [ 85.008221][ T6924] driver_probe_device+0x4a/0x140 [ 85.009846][ T6924] __driver_attach+0x21f/0x5b0 [ 85.011365][ T6924] bus_for_each_dev+0x13e/0x1d0 [ 85.012911][ T6924] bus_add_driver+0x305/0x5b0 [ 85.014456][ T6924] driver_register+0x1e2/0x360 [ 85.015991][ T6924] usb_gadget_register_driver_owner+0x132/0x210 [ 85.017962][ T6924] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 85.019745][ T6924] configfs_write_iter+0x302/0x4e0 [ 85.021374][ T6924] vfs_write+0x6ac/0x1050 [ 85.022748][ T6924] ksys_write+0x12a/0x250 [ 85.024134][ T6924] __do_fast_syscall_32+0xe7/0x970 [ 85.025768][ T6924] do_fast_syscall_32+0x32/0x70 [ 85.027316][ T6924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.029317][ T6924] [ 85.030087][ T6924] Freed by task 5748: [ 85.031365][ T6924] kasan_save_stack+0x30/0x50 [ 85.032854][ T6924] kasan_save_track+0x14/0x30 [ 85.034368][ T6924] kasan_save_free_info+0x3b/0x70 [ 85.035959][ T6924] __kasan_slab_free+0x5f/0x80 [ 85.037495][ T6924] slab_free_after_rcu_debug+0xdf/0x170 [ 85.039246][ T6924] rcu_core+0x5a2/0x10d0 [ 85.040600][ T6924] handle_softirqs+0x1ea/0x9b0 [ 85.042130][ T6924] __irq_exit_rcu+0x162/0x210 [ 85.043660][ T6924] irq_exit_rcu+0x9/0x30 [ 85.045049][ T6924] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 85.046819][ T6924] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.048715][ T6924] [ 85.049499][ T6924] Last potentially related work creation: [ 85.051297][ T6924] kasan_save_stack+0x30/0x50 [ 85.052789][ T6924] kasan_record_aux_stack+0xa7/0xc0 [ 85.054457][ T6924] kmem_cache_free+0x427/0x6b0 [ 85.055974][ T6924] __fput+0x68d/0xb50 [ 85.057245][ T6924] task_work_run+0x150/0x240 [ 85.058752][ T6924] exit_to_user_mode_loop+0x1d8/0x6f0 [ 85.060469][ T6924] __do_fast_syscall_32+0x701/0x970 [ 85.062122][ T6924] do_fast_syscall_32+0x32/0x70 [ 85.063669][ T6924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.065694][ T6924] [ 85.066468][ T6924] Second to last potentially related work creation: [ 85.068543][ T6924] kasan_save_stack+0x30/0x50 [ 85.070056][ T6924] kasan_record_aux_stack+0xa7/0xc0 [ 85.071697][ T6924] task_work_add+0x28b/0x3b0 [ 85.073166][ T6924] __fput_deferred+0x168/0x4a0 [ 85.074699][ T6924] fput_close+0x118/0x250 [ 85.076069][ T6924] filp_close+0x26/0x30 [ 85.077396][ T6924] gaudio_cleanup+0x59/0x100 [ 85.078928][ T6924] f_audio_bind+0x56c/0x660 [ 85.080423][ T6924] usb_add_function+0x219/0x890 [ 85.082007][ T6924] configfs_composite_bind+0xd83/0x1960 [ 85.083788][ T6924] gadget_bind_driver+0x28c/0xbf0 [ 85.085900][ T6924] really_probe+0x241/0xa60 [ 85.087802][ T6924] __driver_probe_device+0x20e/0x450 [ 85.089961][ T6924] driver_probe_device+0x4a/0x140 [ 85.091996][ T6924] __driver_attach+0x21f/0x5b0 [ 85.093721][ T6924] bus_for_each_dev+0x13e/0x1d0 [ 85.095253][ T6924] bus_add_driver+0x305/0x5b0 [ 85.096745][ T6924] driver_register+0x1e2/0x360 [ 85.098278][ T6924] usb_gadget_register_driver_owner+0x132/0x210 [ 85.100270][ T6924] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 85.102053][ T6924] configfs_write_iter+0x302/0x4e0 [ 85.103668][ T6924] vfs_write+0x6ac/0x1050 [ 85.105040][ T6924] ksys_write+0x12a/0x250 [ 85.106411][ T6924] __do_fast_syscall_32+0xe7/0x970 [ 85.108039][ T6924] do_fast_syscall_32+0x32/0x70 [ 85.109615][ T6924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.111595][ T6924] [ 85.112367][ T6924] The buggy address belongs to the object at ffff8880141481c0 [ 85.112367][ T6924] which belongs to the cache filp of size 352 [ 85.116491][ T6924] The buggy address is located 344 bytes inside of [ 85.116491][ T6924] freed 352-byte region [ffff8880141481c0, ffff888014148320) [ 85.120870][ T6924] [ 85.121650][ T6924] The buggy address belongs to the physical page: [ 85.123654][ T6924] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14148 [ 85.126387][ T6924] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.129018][ T6924] memcg:ffff888026da5801 [ 85.130350][ T6924] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 85.132685][ T6924] page_type: f5(slab) [ 85.133981][ T6924] raw: 00fff00000000040 ffff88801da89680 dead000000000100 dead000000000122 [ 85.136632][ T6924] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff888026da5801 [ 85.139352][ T6924] head: 00fff00000000040 ffff88801da89680 dead000000000100 dead000000000122 [ 85.142039][ T6924] head: 0000000000000000 0000000800120012 00000000f5000000 ffff888026da5801 [ 85.144732][ T6924] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 85.147425][ T6924] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 85.150113][ T6924] page dumped because: kasan: bad access detected [ 85.152118][ T6924] page_owner tracks the page as allocated [ 85.153922][ T6924] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5151, tgid 5151 (udevadm), ts 19384543769, free_ts 17631243769 [ 85.160274][ T6924] post_alloc_hook+0xfd/0x120 [ 85.161764][ T6924] get_page_from_freelist+0xf48/0x3530 [ 85.163471][ T6924] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 85.165334][ T6924] new_slab+0xa2/0x640 [ 85.166624][ T6924] refill_objects+0xe3/0x410 [ 85.168086][ T6924] __pcs_replace_empty_main+0x376/0x680 [ 85.169823][ T6924] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 85.171535][ T6924] alloc_empty_file+0x5b/0x1c0 [ 85.173055][ T6924] path_openat+0xe7/0x4280 [ 85.174485][ T6924] do_file_open+0x20e/0x430 [ 85.175917][ T6924] do_sys_openat2+0x10f/0x1e0 [ 85.177414][ T6924] __x64_sys_openat+0x12d/0x210 [ 85.178956][ T6924] do_syscall_64+0x115/0x840 [ 85.180417][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.182280][ T6924] page last free pid 1 tgid 1 stack trace: [ 85.184021][ T6924] __free_frozen_pages+0x79f/0x1090 [ 85.185662][ T6924] free_reserved_page+0xc9/0x120 [ 85.187218][ T6924] __free_reserved_area+0x107/0x1c0 [ 85.189004][ T6924] free_reserved_area+0x129/0x1b0 [ 85.190597][ T6924] free_init_pages+0x96/0xe0 [ 85.192059][ T6924] free_kernel_image_pages+0x24/0x50 [ 85.193737][ T6924] kernel_init+0x33/0x1e0 [ 85.195116][ T6924] ret_from_fork+0x72b/0xd50 [ 85.196574][ T6924] ret_from_fork_asm+0x1a/0x30 [ 85.198099][ T6924] [ 85.198912][ T6924] Memory state around the buggy address: [ 85.200667][ T6924] ffff888014148200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.203158][ T6924] ffff888014148280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.205558][ T6924] >ffff888014148300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 85.207721][ T6924] ^ [ 85.209309][ T6924] ffff888014148380: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.211905][ T6924] ffff888014148400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.214408][ T6924] ================================================================== [ 85.217161][ T5759] Bluetooth: hci0: command tx timeout [ 85.218901][ T5759] Bluetooth: hci1: command tx timeout [ 85.234424][ T6924] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.236623][ T6924] CPU: 2 UID: 0 PID: 6924 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 85.239394][ T6924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.242501][ T6924] Call Trace: [ 85.243560][ T6924] [ 85.244513][ T6924] dump_stack_lvl+0x100/0x190 [ 85.246043][ T6924] vpanic+0x552/0x970 [ 85.247308][ T6924] ? __pfx_vpanic+0x10/0x10 [ 85.248736][ T6924] ? mark_held_locks+0x40/0x70 [ 85.250268][ T6924] ? filp_flush+0x25/0x190 [ 85.251674][ T6924] panic+0xd1/0xe0 [ 85.252862][ T6924] ? __pfx_panic+0x10/0x10 [ 85.254312][ T6924] ? filp_flush+0x25/0x190 [ 85.255831][ T6924] ? preempt_schedule_common+0x42/0xc0 [ 85.257626][ T6924] check_panic_on_warn.cold+0x19/0x34 [ 85.259385][ T6924] end_report.part.0+0x3a/0x90 [ 85.260889][ T6924] kasan_report.cold+0xe/0x18 [ 85.262383][ T6924] ? filp_flush+0x25/0x190 [ 85.263891][ T6924] kasan_check_range+0x10f/0x1e0 [ 85.265492][ T6924] filp_flush+0x25/0x190 [ 85.266819][ T6924] filp_close+0x1c/0x30 [ 85.268122][ T6924] gaudio_cleanup+0x59/0x100 [ 85.269586][ T6924] f_audio_bind+0x56c/0x660 [ 85.271010][ T6924] ? __pfx_f_audio_bind+0x10/0x10 [ 85.272583][ T6924] ? __pfx_f_audio_bind+0x10/0x10 [ 85.274189][ T6924] usb_add_function+0x219/0x890 [ 85.275721][ T6924] configfs_composite_bind+0xd83/0x1960 [ 85.277463][ T6924] gadget_bind_driver+0x28c/0xbf0 [ 85.279054][ T6924] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 85.280808][ T6924] ? __pfx_gadget_bind_driver+0x10/0x10 [ 85.282537][ T6924] really_probe+0x241/0xa60 [ 85.283979][ T6924] __driver_probe_device+0x20e/0x450 [ 85.285643][ T6924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.287491][ T6924] driver_probe_device+0x4a/0x140 [ 85.289097][ T6924] __driver_attach+0x21f/0x5b0 [ 85.290603][ T6924] ? __pfx___driver_attach+0x10/0x10 [ 85.292254][ T6924] bus_for_each_dev+0x13e/0x1d0 [ 85.293815][ T6924] ? __pfx_bus_for_each_dev+0x10/0x10 [ 85.295512][ T6924] ? bus_add_driver+0x2b5/0x5b0 [ 85.297049][ T6924] bus_add_driver+0x305/0x5b0 [ 85.298531][ T6924] driver_register+0x1e2/0x360 [ 85.300051][ T6924] usb_gadget_register_driver_owner+0x132/0x210 [ 85.302005][ T6924] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 85.303783][ T6924] configfs_write_iter+0x302/0x4e0 [ 85.305401][ T6924] vfs_write+0x6ac/0x1050 [ 85.306763][ T6924] ? __pfx_configfs_write_iter+0x10/0x10 [ 85.308511][ T6924] ? __pfx_vfs_write+0x10/0x10 [ 85.310111][ T6924] ? find_held_lock+0x2b/0x80 [ 85.311597][ T6924] ksys_write+0x12a/0x250 [ 85.312963][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 85.314504][ T6924] __do_fast_syscall_32+0xe7/0x970 [ 85.316085][ T6924] do_fast_syscall_32+0x32/0x70 [ 85.317534][ T6924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.319534][ T6924] RIP: 0023:0xf7f85fec [ 85.320740][ T6924] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 85.322714][ T6924] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 85.325237][ T6924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 85.327662][ T6924] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 85.330095][ T6924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.332517][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.334950][ T6924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.337385][ T6924] [ 85.338962][ T6924] Kernel Offset: disabled [ 85.340304][ T6924] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:18:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a129e5 RDI=ffffffff9b9f31a0 RBP=ffffffff9b9f3160 RSP=ffffc90003867210 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b6f3224 R15=ffffffff85a12980 RIP=ffffffff85a12a0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096be3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002ff22ff8 CR3=000000004c73e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f8635ef150 000055f8635ef150 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f8635828f8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f8636daf28 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41de1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19694645585e4445 4905194e584b4905 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e445f4559051a04 5e4f4d4e4b4d051a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000077753 RBX=ffff88801c742540 RCX=ffffffff8bb872d5 RDX=0000000000000000 RSI=ffffffff8e1a87c3 RDI=ffffffff8c400a80 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8589f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f726e860 CR3=000000004c5c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015800000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000060235 RBX=0000000000000000 RCX=ffffc90009c17000 RDX=0000000000080000 RSI=ffffffff81fd1c6c RDI=ffff8880217d0000 RBP=ffff88802b243360 RSP=ffffc900039c74b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100564866d R14=0000000000000001 R15=ffff88802b43c9c0 RIP=ffffffff81fd1c6e RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f86361d090 CR3=000000007252b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea000138d880 RCX=ffffffff824b3b9f RDX=ffff8880227d0000 RSI=ffffffff824b3bad RDI=ffff8880227d0000 RBP=ffff888040448048 RSP=ffffc90003c27268 R8 =0000000000000004 R9 =0000000000000002 R10=0000000000000003 R11=0000000000000000 R12=ffffea000138d888 R13=0000000000000003 R14=0000000000000003 R15=0000000000000002 RIP=ffffffff824b3bad RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f36ec0 CR3=000000001e859000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000