last executing test programs: 11m19.680451107s ago: executing program 2 (id=650): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) 11m18.608254462s ago: executing program 2 (id=653): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 11m17.511115019s ago: executing program 2 (id=657): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) umount2(&(0x7f0000000240)='./config\x00', 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f043059e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) setxattr(&(0x7f0000000000)='./config/cluster/mycluster/node/mynode/local\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="6f73782e2b2800ae85db246985a320639c8e9fccefadba1afc4e687b9659bfbdb3687db47c5de4db6df86c98c28fb692e3e6d47a465cfe3330a05b5836bf1d9b61d159668b00f50b6372e77716349ac9f1d4083806ccec50421513e0cf6de64340de973f328f7cc96ca5f9f91a639ef20ca7c208037aa850d5bbe70f3a25667167955a09d080e30d40e68474a569d1c7"], &(0x7f0000000140)=')[\x00', 0x3, 0x1) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$dir(0xffffff9c, &(0x7f0000000180)='./config/cluster/mycluster/node/mynode/local\x00', 0x4, 0x0) openat(r3, &(0x7f00000001c0)='./config\x00', 0x0, 0x180) 11m17.17794599s ago: executing program 2 (id=659): syz_open_dev$tty1(0xc, 0x4, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) flock(r1, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x401, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x3, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@obj_user={'obj_user', 0x3d, 'lowerdir'}}, {@uid_eq}, {@uid_lt}, {@appraise}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mountinfo\x00'}}, {@euid_lt}, {@subj_type}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 11m15.419896825s ago: executing program 2 (id=666): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x144) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa4002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x800048, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x4, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x2ffc, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7fbffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000041) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0xd1, 0x6, 0xffffffff, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x41}, 0x10, 0x8000, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='exofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x9, 0x6, 0x3) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) 11m14.593679621s ago: executing program 2 (id=671): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000003000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 11m13.768027402s ago: executing program 32 (id=671): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000003000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 8.023063423s ago: executing program 3 (id=3239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000005c80)=ANY=[@ANYBLOB="040e0c050110"], 0xf) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x40000, 0x200000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) socket(0x2b, 0x80801, 0x1) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0xe403, r8, 0x0, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc000) r10 = socket(0x3, 0xa, 0xffffeffd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) 6.868606152s ago: executing program 3 (id=3244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) 6.845657268s ago: executing program 3 (id=3246): r0 = syz_io_uring_setup(0x8a4, &(0x7f0000000000)={0x0, 0x7cb8, 0x1000, 0x2, 0x2aa}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x1741, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000340)={{@align=0x748, {0x0, 0x7, 0xb, 0x9}}, {{[0x9, 0xa, 0xfb, 0xa]}, 0x0, 0x1, 0x2, 0x0, &(0x7f0000000280)=[{{@_ha_fsid={[0x369e5fb2, 0xffff1ffc]}, {0xa, 0x8, 0x9b, 0x7}}, 0x7, 0x0, '\x00'}, {{@align=0x8, {0x2, 0x9, 0x40, 0x1}}, 0xa1f, 0x0, '}\x00'}, {{@align=0x5, {0x5, 0x7, 0x4, 0x9}}, 0x1, 0x0, '\x00'}, {{@_ha_fsid={[0xb, 0xffffff54]}, {0x1, 0x1000, 0x8, 0x1}}, 0x401, 0x0, '\x00'}, {{@align=0x40, {0x1990, 0x6, 0x100, 0x8}}, 0x6, 0x0, '[!@@#}$\'\x00'}]}}) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/12, 0xc}], 0x2, &(0x7f0000000600)}, 0x100) mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x10, 0x8010, r1, 0x8000000) socket$can_j1939(0x1d, 0x2, 0x7) accept4$llc(0xffffffffffffffff, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000740)=0x10, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000780), 0x414500, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000007c0)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000900)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sync() io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000b00)="161fdf446a780e2879728ce30fa8873f9a00b369f33003eed83604bb52d48a79a2868ce34be4be5ea24ef2f65376baf1516917e61d28ab2c3bd1c3cc126935e86b695667b60bb7e8a00327f1de1d3e91ac2b5f06add49325cf18556056930431", 0x60) 6.455908362s ago: executing program 3 (id=3250): gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595d, 0x4000, 0x0, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mmap$IORING_OFF_SQ_RING(0x0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) syz_clone3(0x0, 0x0) r8 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b9b5cc30c177e449879fa1500a1e9617"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 6.383256902s ago: executing program 3 (id=3251): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000180)="c6c6d959db4c85bedb376fca2a0352303bfd419ba56ad399bba3127b4044fbf816a44bcfd94fbb2f3bcc032e22205c3d735c8e63b0a2f2ac7618e0000000000008000000000000ea4085b40d3c2db5696fecff276b85ff3d76a2e6094347f0a05ba29498ad50d06b1be71280937b4ba6bfcd13f95b8f4acec19e4c3c523c21dbcf3fe8d6817a22637ddd79c1e2c308c23df267e75e24122d1b0dd98092794cb2e0862310bf8159005392", 0xdbf74bf072716649}) 5.774268426s ago: executing program 3 (id=3253): r0 = socket(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x200400d1) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 5.679962707s ago: executing program 33 (id=3253): r0 = socket(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x200400d1) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 3.939443108s ago: executing program 1 (id=3261): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000017000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) 3.898414216s ago: executing program 1 (id=3262): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) io_uring_enter(r4, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'}) connect$inet(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002c00)=ANY=[@ANYBLOB="d0000000d0c6436f90e10e29eea078510d73461cef6dd65b20f230921735abf5c5dd0703d5d4f9d2c76ce814e1d772f33e3bf4d2bfb6e5e26cb8aea747bad4b734abc1dd2eefd0286c418292e86f23facd79ad6ff9e113758a2c28d43ab154f209429c1c9cfb5242be29da7cec40e794f5ed4c9e0bcfd5c23d7e17c4c1136a5b2a", @ANYRES16=0x0, @ANYBLOB="000127fd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400cc0a000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006864000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400070000000800070000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="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", 0x11b}], 0x1}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000cde5ec75022f9be36e95be35f6795cb50a06518d3a86ad27a59a12e030b34a"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000002b80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @loopback, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x18}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002780)="af1ca48d5841e6296bfc6203d2", 0xd}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x6, @private1, 0xa36}, 0x1c, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000002540)="38e02d7fb5648243a885ff31df22502d", 0x10}, {&(0x7f0000002580)="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", 0xfc}, {&(0x7f0000002680)="3a588b130d734e92ea0deb298b1a81eb838721410cf5cea9ae5d6daddcacb6c3867eb072", 0x24}], 0x4}}, {{&(0x7f0000002700)={0xa, 0x4e21, 0x0, @remote, 0x82}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000002740)="dfeb045fe8b7cef715853152148b4962e0750c903f5c42ec75ec9a7d6ad959c5a059e70460fc", 0x26}, {&(0x7f0000002780)}, {&(0x7f0000002800)="23111cd4e0555eb6e0cb167ef2995ab9ec30040000000000000065f84d6af7", 0x1f}, {&(0x7f0000002840)="4609c43d3925ea97b9993947aefc00c1c4ed33f417178a55b78dfa4fa7358efe453d5041a131dc520898a3176c6519803568f5cff221e17f83785047cc255a33a9845c9e4640e84ace8767035819d12876755065b5ca8c1a27af41add69979946b56070c6bb9c36bfb777d15b7107564b981e6dc5eecc70afe9ab1a9344e809f634a27023f095cf02c2d38d6ec11", 0x8e}, {&(0x7f0000002a00)="b499bbf1d4ff8a8e7bc27b4164f6cd", 0xf}, {&(0x7f0000002a40)="0a6822a339007e3a6c69637f2dd400cc435f07a1fc5d4b1a0eae80f07b9df5dc9edd63d33f259556ca8ca010e1035fd4737dc57c7ee66f5da474441d670b6b1b8cfec4eb1bb4763f191f", 0x4a}], 0x6, &(0x7f0000002900)=ANY=[@ANYRES64=r5], 0x44}}], 0x4, 0x44804) 3.497734722s ago: executing program 4 (id=3264): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x80000) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000500)={{0x0, 0x8, 0x8, 0x10002, 0x597cabfa}, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xdf94, 0x10000, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) getpgrp(0x0) 2.379075556s ago: executing program 1 (id=3268): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x3, &(0x7f0000000200)={0x4ae58138, 0xced}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090527bd7000000000000f00230073797a6b616c6c65723100009d0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b2337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2828"], 0xe0}], 0x1}, 0x40040) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)={@val={0x800e, 0x8100}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@lsrr={0x83, 0x3, 0x3a}, @timestamp={0x44, 0x4, 0xa5, 0x0, 0x1}]}}, {0x4e24, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}}}}}}}}, 0x3e) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r4, &(0x7f0000000100), 0x4003) socketpair$unix(0x1, 0x3, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) 2.194239954s ago: executing program 4 (id=3269): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x2, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (fail_nth: 2) 2.021141137s ago: executing program 4 (id=3270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x500}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004) 1.989831958s ago: executing program 4 (id=3271): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000080)={0x0, 0x1, 0x80, 0x20002, 0x3a7}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008003a800400070008001b"], 0x30}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000340)={{0x5, 0xfcd}, {0xc}, 0x7, 0x1}) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xffffffff, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x4, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0x2, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x1000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r11, &(0x7f0000005140)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r11, 0x0, r12, 0x0, 0x7c1c, 0x8) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f4aaf604d02fd00665330000003291740000000000bce4bec1c78c"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r13, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a50000009580000000000000c7e242529273a36dca90af686742198ea8c14ab4dee46b15acaa69d2b6e0e3ae490e1109e7eab8e8f825ea2ffaf728156c9b18634c81e5e77d0cba019e7703c863943185fc3217625384"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, r15, 0x4}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x2e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x50}}}, &(0x7f0000000440)) 1.277565547s ago: executing program 1 (id=3274): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$netlink(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141701, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141701, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x11f6ec5d9745acea, 0x0, @ioapic={0x2, 0x7, 0x400, 0x531, 0x0, [{0x9, 0x5, 0x2, '\x00', 0x83}, {0x8, 0x67, 0x56, '\x00', 0x80}, {0x8d, 0x9, 0x5, '\x00', 0x7}, {0xe, 0x8, 0xd, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x1}, {0x5, 0x81, 0x7, '\x00', 0x9}, {0x0, 0x4, 0x6, '\x00', 0x5}, {0x28, 0x4, 0x8, '\x00', 0x2}, {0x7, 0x4, 0xe, '\x00', 0xff}, {0xf9, 0xfe, 0x3, '\x00', 0x63}, {0xd, 0x6, 0x3, '\x00', 0x6}, {0x7, 0x4, 0xe8, '\x00', 0x60}, {0x3, 0x6, 0x6, '\x00', 0x6}, {0x9, 0x80, 0x9, '\x00', 0x55}, {0x0, 0x7, 0x7a, '\x00', 0x80}, {0xff, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x1, 0x8, '\x00', 0x1}, {0xef, 0x9, 0xc0, '\x00', 0xf}, {0x3, 0x4, 0x6, '\x00', 0x9}, {0x5, 0x0, 0x3, '\x00', 0x5}, {0xc1, 0x1, 0x8, '\x00', 0x7}, {0x8, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x6, 0xff, '\x00', 0xd}, {0x5, 0x18, 0x1}]}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1.218682907s ago: executing program 4 (id=3275): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) io_setup(0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="cf", 0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000), 0xfffb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x800) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r9 = eventfd2(0xc, 0x800) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r9}]) r10 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x1802, 0x0, 0x0) 1.100659764s ago: executing program 0 (id=3276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) 1.038741365s ago: executing program 0 (id=3277): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x6c, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x2d5, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x35e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x4, 0x0, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x5, 0xdfffffff, 0x0, r5}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r6}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@mcast1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x400000}, {0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}}, 0xe4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x10}}, 0x4010) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a09000200000026bd7000ffdbff25"], 0x10}}, 0x4000804) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xeefc6001}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 937.323748ms ago: executing program 0 (id=3278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x2, 0x7, 0x4, 0x7fffffff, 0x4e38}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000004c0)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x3f}}, {"d07ee51100"}}) 827.240917ms ago: executing program 0 (id=3279): r0 = syz_io_uring_setup(0x8a4, &(0x7f0000000000)={0x0, 0x7cb8, 0x1000, 0x2, 0x2aa}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x1741, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000340)={{@align=0x748, {0x0, 0x7, 0xb, 0x9}}, {{[0x9, 0xa, 0xfb, 0xa]}, 0x0, 0x1, 0x2, 0x0, &(0x7f0000000280)=[{{@_ha_fsid={[0x369e5fb2, 0xffff1ffc]}, {0xa, 0x8, 0x9b, 0x7}}, 0x7, 0x0, '\x00'}, {{@align=0x8, {0x2, 0x9, 0x40, 0x1}}, 0xa1f, 0x0, '}\x00'}, {{@align=0x5, {0x5, 0x7, 0x4, 0x9}}, 0x1, 0x0, '\x00'}, {{@_ha_fsid={[0xb, 0xffffff54]}, {0x1, 0x1000, 0x8, 0x1}}, 0x401, 0x0, '\x00'}, {{@align=0x40, {0x1990, 0x6, 0x100, 0x8}}, 0x6, 0x0, '[!@@#}$\'\x00'}]}}) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/12, 0xc}], 0x2, &(0x7f0000000600)}, 0x100) mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x10, 0x8010, r1, 0x8000000) socket$can_j1939(0x1d, 0x2, 0x7) accept4$llc(0xffffffffffffffff, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000740)=0x10, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000780), 0x414500, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000007c0)=0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000900)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sync() io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000b00)="161fdf446a780e2879728ce30fa8873f9a00b369f33003eed83604bb52d48a79a2868ce34be4be5ea24ef2f65376baf1516917e61d28ab2c3bd1c3cc126935e86b695667b60bb7e8a00327f1de1d3e91ac2b5f06add49325cf18556056930431", 0x60) 769.556126ms ago: executing program 0 (id=3280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x5c, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0xfc}]}]}}}}}, 0x0) r1 = openat2$dir(0xffffff9c, &(0x7f0000000300)='./dev\x00', &(0x7f0000000840)={0x212042, 0x8e}, 0x18) name_to_handle_at(r1, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0xc, 0x8000000000000004, 0x4, 0x7, 0x9}}, &(0x7f0000000900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25250000000a0001007770616e300000000600060003000000d0820257b086ee322265dc567282dc9a2631164451ff53aafd4c57d1857fedeeb37af283"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000800)="89", 0x1, 0x4044880, 0x0, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x56841) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1000, @none, 0x0, 0x2}, 0xe) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a00)={'tunl0\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0xffffffff, 0x8, {{0x7, 0x4, 0x3, 0x3f, 0x1c, 0x68, 0x0, 0xd, 0x4, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x7, 0x2a, [@multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x10c0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="680200000005010400000000000000000a00000a540201000000000007000000070104000000020073797a3000000000000000000000000000000000000000000000000000000000523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db040b0600b1639cd090c6000000000000000000000000000020000016000000000004000900010000000f000000000807"], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47dcce0f105d66df00"}, 0xfc, 0x4}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000440), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7f, 0x8}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffff00], 'veth0_to_team\x00', 'sit0\x00', {0xff}, {0xff}, 0x3c, 0xff, 0x2, 0x44}, 0x0, 0xec, 0x148, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x3}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xffffff00, 0xff, 0x0, 0xffffff00], 0x4e24, 0x4e22, 0x4e21, 0x4e24, 0x4, 0x2, 0x9, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) 412.956441ms ago: executing program 0 (id=3281): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x141140, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x3, 0x6, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r3 = socket(0x6, 0x6, 0xb) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe64, 0x7, @empty, 0x1}, 0x1c) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xce20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 201.890173ms ago: executing program 1 (id=3282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x2, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (fail_nth: 2) 132.363812ms ago: executing program 4 (id=3283): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r7}}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) close(r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) (async) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r7}}) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) (async) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) (async) close(r2) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) 0s ago: executing program 1 (id=3284): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1ff) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x0, 0x1, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"863094aeb0b2561800", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x81, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/probability\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='100\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='100\x00', 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1000}}]}}) write$P9_RVERSION(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="1300000065ffff001000000600395132303030"], 0x13) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) getrlimit(0x8, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x797) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000140)={{0x6000, 0x58000, 0xf000, 0x4, 0x7f, 0xe7, 0x81, 0x8, 0x0, 0x84, 0x39, 0xb}, {0xd000, 0x30000, 0xb, 0x3, 0xfe, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0xe}, {0xe000, 0x40000, 0x4, 0x4, 0x11, 0x81, 0xfc, 0x5, 0x5, 0x4, 0x92, 0xc1}, {0x3000, 0x8000000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xb, 0x29, 0x9, 0x9}, {0x4, 0x7000, 0xf, 0x9, 0x1, 0x2, 0x7, 0xd, 0x2, 0x48, 0x0, 0x8}, {0x4000, 0x3000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x1, 0x1, 0xe, 0x9, 0xa}, {0x10000, 0x4000, 0x10, 0x0, 0x41, 0x4, 0x5, 0x26, 0xff, 0xa0, 0x5, 0x6}, {0x1, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x5, 0x7, 0x2, 0x8}, {0xeeee0000, 0x405}, {0x9000, 0xff7e}, 0xe0000031, 0x0, 0x6000, 0x40165, 0x5, 0xb400, 0x800f900, 0x1, [0x7, 0x2, 0x8000000000000003, 0xc]}) kernel console output (not intermixed with test programs): speed) [ 849.803356][T17096] vhci_hcd vhci_hcd.0: Device attached [ 849.917968][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 850.055090][ T5892] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 850.357170][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.483798][T17102] can0: slcan on ptm0. [ 850.689038][T17097] vhci_hcd: connection reset by peer [ 850.691220][T11379] vhci_hcd vhci_hcd.1: stop threads [ 850.692883][T11379] vhci_hcd vhci_hcd.1: release socket [ 850.693929][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 850.694821][T11379] vhci_hcd vhci_hcd.1: disconnect device [ 851.234690][ T42] audit: type=1326 audit(1785307519.768:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.3.3124" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 851.805266][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 851.961223][T17100] can0 (unregistered): slcan off ptm0. [ 852.047332][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 852.146803][T17147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3132'. [ 852.184942][T17150] binder: 17148:17150 unknown command 0 [ 852.186729][T17150] binder: 17148:17150 ioctl c0306201 800001c0 returned -22 [ 852.916582][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 853.388739][T17172] autofs4:pid:17172:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 853.450890][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 853.632586][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 853.637672][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 853.643298][ T10] usb 5-1: config 0 has no interface number 0 [ 853.647345][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 853.651971][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 18178, setting to 1024 [ 853.660030][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 853.665776][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.671384][ T10] usb 5-1: config 0 descriptor?? [ 853.679956][T17164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 853.694241][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 853.908217][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 853.911830][T17164] netlink: 'syz.0.3139': attribute type 30 has an invalid length. [ 853.914588][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 853.957065][ T8538] usb 5-1: USB disconnect, device number 68 [ 854.027990][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 854.137838][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3146'. [ 854.147397][T17186] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 854.173372][T17186] cramfs: wrong magic [ 854.913291][T17212] bridge_slave_0: invalid flags given to default FDB implementation [ 854.918263][T17212] bridge_slave_0: invalid flags given to default FDB implementation [ 854.923816][T17212] bridge_slave_0: invalid flags given to default FDB implementation [ 855.139350][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 855.314844][ T8370] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 855.599188][ T5755] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 855.602843][T17230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3164'. [ 855.604308][ T5755] Bluetooth: hci0: unexpected event for opcode 0x203e [ 855.612337][T17230] tmpfs: Unknown parameter 'mp ' [ 855.877051][ T8370] usb 5-1: Using ep0 maxpacket: 8 [ 855.890674][ T8370] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.895165][ T8370] usb 5-1: config 0 has no interface number 0 [ 855.898685][ T8370] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 855.904075][ T8370] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 18178, setting to 1024 [ 855.918926][ T8370] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 855.922570][ T8370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.952314][ T8370] usb 5-1: config 0 descriptor?? [ 855.961682][T17214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 856.016915][ T5892] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 856.043873][ T8370] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 856.250633][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 856.334661][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 856.340416][T17214] netlink: 'syz.0.3158': attribute type 30 has an invalid length. [ 856.350942][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 856.701275][ T10] usb 5-1: USB disconnect, device number 69 [ 856.823827][T17241] netlink: 'syz.3.3168': attribute type 10 has an invalid length. [ 856.850883][T17241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.857801][T17241] team0: Port device bond0 added [ 856.860800][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 856.981511][ T5830] wg2 speed is unknown, defaulting to 1000 [ 857.079335][T17260] tipc: Bearer : already 2 bearers with priority 10 [ 857.082608][T17260] tipc: Bearer : trying with adjusted priority [ 857.088502][T17260] tipc: Enabled bearer , priority 9 [ 857.092216][T17259] tipc: Resetting bearer [ 857.111303][T17259] tipc: Disabling bearer [ 857.362061][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 857.396158][T17269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3177'. [ 857.511631][ T8370] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 857.682575][ T8370] usb 6-1: Using ep0 maxpacket: 8 [ 857.686545][ T8370] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 857.689998][ T8370] usb 6-1: config 0 has no interface number 0 [ 857.692658][ T8370] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 857.697600][ T8370] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 18178, setting to 1024 [ 857.702294][ T8370] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 857.706527][ T8370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.711865][ T8370] usb 6-1: config 0 descriptor?? [ 857.719611][T17264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 857.727470][ T8370] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 857.947057][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 857.950962][T17264] netlink: 'syz.1.3176': attribute type 30 has an invalid length. [ 857.954257][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 858.009620][ T8370] usb 6-1: USB disconnect, device number 57 [ 858.473380][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 858.958682][T17290] autofs4:pid:17290:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 859.584804][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 859.814493][T17309] trusted_key: syz.0.3193 sent an empty control message without MSG_MORE. [ 859.924433][T17312] 9pnet_virtio: no channels available for device syz [ 859.928988][ T5755] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 859.932464][ T5755] Bluetooth: hci0: Injecting HCI hardware error event [ 859.939173][T12955] Bluetooth: hci0: hardware error 0x00 [ 860.696070][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 861.068686][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.082118][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.085263][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.089008][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.093106][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.289339][T17327] loop6: detected capacity change from 0 to 2640 [ 861.294869][T17333] bridge1: entered promiscuous mode [ 861.296664][T17333] bridge1: entered allmulticast mode [ 861.309658][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.313120][T17333] 9pnet_virtio: no channels available for device syz [ 861.320921][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.325219][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.336620][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.346361][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.361173][T17336] Trying to write to read-only block-device nullb0 [ 861.365289][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.370068][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.373286][ T7159] Bluetooth: hci5: Frame reassembly failed (-84) [ 861.378198][T17325] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.387388][T17325] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.407306][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 861.416724][T17327] ldm_validate_partition_table(): Disk read failed. [ 861.419763][T17327] Dev loop6: unable to read RDB block 0 [ 861.422301][T17327] loop6: unable to read partition table [ 861.425220][T17327] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 861.482871][T17323] wg2 speed is unknown, defaulting to 1000 [ 861.699707][T17349] autofs4:pid:17349:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 861.806838][T17351] team0: Port device bond0 removed [ 861.807538][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 861.813642][T17351] bridge_slave_0: left allmulticast mode [ 861.815997][T17351] bridge_slave_0: left promiscuous mode [ 861.819409][T17351] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.829663][T17351] bridge_slave_1: left allmulticast mode [ 861.831493][T17351] bridge_slave_1: left promiscuous mode [ 861.833593][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.871077][T17351] bond0: (slave bond_slave_0): Releasing backup interface [ 861.885216][T17351] bond0: (slave bond_slave_1): Releasing backup interface [ 861.907782][T17351] team0: Port device team_slave_0 removed [ 861.919434][T17351] team0: Port device team_slave_1 removed [ 861.923062][T17351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.926241][T17351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.932009][T17351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.934608][T17351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.941346][T17351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 862.037922][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.040280][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.043102][T17323] bridge_slave_0: entered allmulticast mode [ 862.045875][T17323] bridge_slave_0: entered promiscuous mode [ 862.049464][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.051959][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.054640][T17323] bridge_slave_1: entered allmulticast mode [ 862.057287][T17323] bridge_slave_1: entered promiscuous mode [ 862.074332][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.079033][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.097798][T17323] team0: Port device team_slave_0 added [ 862.101092][T17323] team0: Port device team_slave_1 added [ 862.114579][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.116838][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.125765][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.130284][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.132468][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.140785][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.149455][T12955] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 862.211080][T17323] hsr_slave_0: entered promiscuous mode [ 862.213480][T17323] hsr_slave_1: entered promiscuous mode [ 862.215615][T17323] debugfs: 'hsr0' already exists in 'hsr' [ 862.217445][T17323] Cannot create hsr debugfs directory [ 862.347470][T17323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.545598][T17323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.864788][T17323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.918887][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 862.976725][T17323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.170180][T17323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 863.189459][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.194469][T17323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 863.198560][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.201503][T17323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 863.222496][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.231035][T17323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 863.238453][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.346309][T12955] Bluetooth: hci3: command tx timeout [ 863.355444][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.366390][T17323] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.372785][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.375109][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.390501][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.392830][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.524424][T12955] Bluetooth: hci5: command 0x1003 tx timeout [ 863.526782][ T5756] Bluetooth: hci1: command 0x0406 tx timeout [ 863.533682][ T5755] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 863.639501][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.769952][T17405] autofs4:pid:17405:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 863.983282][T17323] veth0_vlan: entered promiscuous mode [ 864.030364][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 864.048440][T17412] wg2 speed is unknown, defaulting to 1000 [ 864.055431][T17323] veth1_vlan: entered promiscuous mode [ 864.145057][T17323] veth0_macvtap: entered promiscuous mode [ 864.155083][T17323] veth1_macvtap: entered promiscuous mode [ 864.181234][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.195000][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.203723][ T8382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.206656][ T8382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.210486][ T8382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.215229][ T8382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.376097][ T7106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.380772][ T7106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.385333][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 864.389976][T17419] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3215'. [ 864.393565][T17419] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3215'. [ 864.406347][ T7106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.409740][ T7106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.976173][T17443] IPVS: Error connecting to the multicast addr [ 865.141674][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 865.568897][ T5755] Bluetooth: hci3: command tx timeout [ 866.135285][ T29] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 866.178571][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3230'. [ 866.188713][T17474] openvswitch: netlink: Missing key (keys=40, expected=80) [ 866.253039][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 866.274736][ T29] usb 9-1: device descriptor read/64, error -71 [ 866.541304][ T29] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 866.680317][ T29] usb 9-1: device descriptor read/64, error -71 [ 866.798328][ T29] usb usb9-port1: attempt power cycle [ 867.257788][T17412] syz.0.3213 (17412) used greatest stack depth: 19568 bytes left [ 867.364284][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 867.514505][ T29] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 867.548348][ T29] usb 9-1: device descriptor read/8, error -71 [ 867.751794][T17486] syzkaller0: entered promiscuous mode [ 867.753864][T17486] syzkaller0: entered allmulticast mode [ 867.791926][ T5755] Bluetooth: hci3: command tx timeout [ 867.813016][ T29] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 867.890223][ T29] usb 9-1: device descriptor read/8, error -71 [ 867.902599][T17489] usb usb8: usbfs: process 17489 (syz.0.3233) did not claim interface 0 before use [ 868.018411][ T29] usb usb9-port1: unable to enumerate USB device [ 868.254687][T17475] syz.3.3226 (17475) used greatest stack depth: 17800 bytes left [ 868.475700][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 868.970366][ T5755] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 869.094563][T17506] autofs4:pid:17506:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 869.489489][T17516] syz.4.3241: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 869.494943][T17516] CPU: 3 UID: 0 PID: 17516 Comm: syz.4.3241 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.494974][T17516] Tainted: [L]=SOFTLOCKUP [ 869.494979][T17516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 869.494987][T17516] Call Trace: [ 869.494992][T17516] [ 869.494997][T17516] dump_stack_lvl+0x100/0x190 [ 869.495016][T17516] warn_alloc.cold+0x94/0xa8 [ 869.495028][T17516] ? __pfx_warn_alloc+0x10/0x10 [ 869.495046][T17516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 869.495062][T17516] ? __pfx_get_page_from_freelist+0x10/0x10 [ 869.495079][T17516] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 869.495095][T17516] ? __lock_acquire+0x49f/0x1a40 [ 869.495117][T17516] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 869.495132][T17516] ? find_held_lock+0x2b/0x80 [ 869.495145][T17516] ? __free_frozen_pages+0x747/0x1090 [ 869.495163][T17516] ? __free_frozen_pages+0x747/0x1090 [ 869.495181][T17516] ? do_raw_spin_unlock+0x145/0x1e0 [ 869.495193][T17516] ? _raw_spin_unlock+0x28/0x50 [ 869.495214][T17516] __folio_alloc_noprof+0x13/0x260 [ 869.495227][T17516] alloc_migration_target+0x1d7/0x6d0 [ 869.495246][T17516] migrate_pages_batch+0x5dc/0x45c0 [ 869.495264][T17516] ? __pfx_alloc_migration_target+0x10/0x10 [ 869.495283][T17516] ? migrate_pages_sync+0x12c/0x880 [ 869.495299][T17516] ? migrate_pages_sync+0x588/0x880 [ 869.495316][T17516] ? __pfx_migrate_pages_batch+0x10/0x10 [ 869.495334][T17516] ? find_held_lock+0x2b/0x80 [ 869.495348][T17516] ? __pfx_migrate_pages_sync+0x10/0x10 [ 869.495367][T17516] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 869.495384][T17516] ? __lock_acquire+0x49f/0x1a40 [ 869.495400][T17516] ? __css_rstat_updated+0x1ce/0x5a0 [ 869.495419][T17516] migrate_pages+0x1950/0x2850 [ 869.495437][T17516] ? __lock_acquire+0x49f/0x1a40 [ 869.495454][T17516] ? __pfx_alloc_migration_target+0x10/0x10 [ 869.495473][T17516] ? __pfx_migrate_pages+0x10/0x10 [ 869.495493][T17516] ? __lock_acquire+0x49f/0x1a40 [ 869.495511][T17516] ? mtree_load+0x32d/0xa90 [ 869.495528][T17516] move_pages_and_store_status+0xf1/0x230 [ 869.495546][T17516] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 869.495569][T17516] kernel_move_pages+0xc89/0x14a0 [ 869.495591][T17516] ? __pfx_kernel_move_pages+0x10/0x10 [ 869.495611][T17516] ? xfd_validate_state+0x129/0x190 [ 869.495641][T17516] __ia32_sys_move_pages+0xdd/0x1b0 [ 869.495658][T17516] ? __do_fast_syscall_32+0x98/0x970 [ 869.495672][T17516] ? lockdep_hardirqs_on+0x78/0x100 [ 869.495686][T17516] __do_fast_syscall_32+0xe7/0x970 [ 869.495700][T17516] ? lockdep_hardirqs_on+0x78/0x100 [ 869.495713][T17516] do_fast_syscall_32+0x32/0x70 [ 869.495728][T17516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 869.495742][T17516] RIP: 0023:0xf7f24fec [ 869.495757][T17516] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 869.495763][T17516] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 869.495774][T17516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 869.495781][T17516] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 869.495788][T17516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.495794][T17516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 869.495801][T17516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.495814][T17516] [ 869.497222][T17516] Mem-Info: [ 869.587068][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 869.610877][T17516] active_anon:14789 inactive_anon:4525 isolated_anon:12 [ 869.610877][T17516] active_file:999 inactive_file:14487 isolated_file:0 [ 869.610877][T17516] unevictable:1772 dirty:271 writeback:0 [ 869.610877][T17516] slab_reclaimable:6837 slab_unreclaimable:70052 [ 869.610877][T17516] mapped:23517 shmem:18979 pagetables:1389 [ 869.610877][T17516] sec_pagetables:324 bounce:0 [ 869.610877][T17516] kernel_misc_reclaimable:0 [ 869.610877][T17516] free:37839 free_pcp:232 free_cma:0 [ 869.626030][T17516] Node 0 active_anon:15892kB inactive_anon:80kB active_file:68kB inactive_file:32kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:17428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1516kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 869.636992][T17516] Node 1 active_anon:43364kB inactive_anon:18020kB active_file:3928kB inactive_file:57916kB unevictable:5552kB isolated(anon):48kB isolated(file):0kB mapped:93976kB dirty:1084kB writeback:0kB shmem:58488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6292kB pagetables:4040kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 869.647295][T17516] Node 0 DMA free:2388kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:444kB inactive_anon:0kB active_file:60kB inactive_file:32kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.656790][T17516] lowmem_reserve[]: 0 280 280 280 280 [ 869.658633][T17516] Node 0 DMA32 free:12304kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15448kB inactive_anon:80kB active_file:8kB inactive_file:8kB unevictable:1536kB writepending:0kB zspages:360kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.668778][T17516] lowmem_reserve[]: 0 0 0 0 0 [ 869.670476][T17516] Node 1 DMA32 free:135208kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43364kB inactive_anon:18020kB active_file:3928kB inactive_file:57916kB unevictable:5552kB writepending:1084kB zspages:7368kB present:1048432kB managed:948212kB mlocked:16kB bounce:0kB free_pcp:2324kB local_pcp:488kB free_cma:0kB [ 869.683693][T17516] lowmem_reserve[]: 0 0 0 0 0 [ 869.685399][T17516] Node 0 DMA: 85*4kB (UM) 34*8kB (UM) 20*16kB (UM) 12*32kB (UM) 7*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2404kB [ 869.690150][T17516] Node 0 DMA32: 374*4kB (UME) 295*8kB (UME) 80*16kB (UME) 51*32kB (UME) 43*64kB (UM) 8*128kB (UM) 3*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 12336kB [ 869.695908][T17516] Node 1 DMA32: 25*4kB (UE) 1064*8kB (UME) 1394*16kB (UME) 974*32kB (UME) 335*64kB (UME) 71*128kB (UME) 60*256kB (UME) 7*512kB (ME) 5*1024kB (UME) 3*2048kB (M) 3*4096kB (UE) = 135108kB [ 869.702098][T17516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 869.705407][T17516] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 869.708454][T17516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 869.711539][T17516] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 869.714594][T17516] 35267 total pagecache pages [ 869.716637][T17516] 781 pages in swap cache [ 869.718151][T17516] Free swap = 16kB [ 869.719477][T17516] Total swap = 124996kB [ 869.720942][T17516] 524155 pages RAM [ 869.722234][T17516] 0 pages HighMem/MovableOnly [ 869.723923][T17516] 211525 pages reserved [ 869.725355][T17516] 0 pages cma reserved [ 870.025114][ T5755] Bluetooth: hci3: command tx timeout [ 870.201934][T17523] FAULT_INJECTION: forcing a failure. [ 870.201934][T17523] name failslab, interval 1, probability 0, space 0, times 0 [ 870.208473][T17523] CPU: 3 UID: 0 PID: 17523 Comm: syz.4.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.208493][T17523] Tainted: [L]=SOFTLOCKUP [ 870.208497][T17523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 870.208505][T17523] Call Trace: [ 870.208510][T17523] [ 870.208515][T17523] dump_stack_lvl+0x100/0x190 [ 870.208557][T17523] should_fail_ex.cold+0x5/0xa [ 870.208571][T17523] should_failslab+0xc2/0x120 [ 870.208587][T17523] __kmalloc_noprof+0xfc/0x820 [ 870.208602][T17523] ? rcu_is_watching+0x12/0xc0 [ 870.208616][T17523] ? tomoyo_realpath_from_path+0xb6/0x690 [ 870.208638][T17523] tomoyo_realpath_from_path+0xb6/0x690 [ 870.208658][T17523] tomoyo_path_number_perm+0x23c/0x580 [ 870.208688][T17523] ? tomoyo_path_number_perm+0x22e/0x580 [ 870.208706][T17523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 870.208720][T17523] ? get_pid_task+0x106/0x250 [ 870.208746][T17523] ? find_held_lock+0x2b/0x80 [ 870.208759][T17523] ? __fget_files+0x215/0x3d0 [ 870.208770][T17523] ? hook_file_ioctl_common+0x140/0x440 [ 870.208784][T17523] ? __fget_files+0x215/0x3d0 [ 870.208797][T17523] ? __fget_files+0x21f/0x3d0 [ 870.208809][T17523] security_file_ioctl_compat+0xd3/0x230 [ 870.208825][T17523] __ia32_compat_sys_ioctl+0xc2/0x360 [ 870.208843][T17523] __do_fast_syscall_32+0xe7/0x970 [ 870.208857][T17523] ? lockdep_hardirqs_on+0x78/0x100 [ 870.208871][T17523] do_fast_syscall_32+0x32/0x70 [ 870.208886][T17523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.208900][T17523] RIP: 0023:0xf7f24fec [ 870.208915][T17523] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 870.208921][T17523] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 870.208933][T17523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 870.208940][T17523] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.208947][T17523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.208953][T17523] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 870.208959][T17523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.208973][T17523] [ 870.208979][T17523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 870.500333][T17536] 9pnet_virtio: no channels available for device syz [ 870.698296][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 870.904921][ T5819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.045975][ T5819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.062017][ T7520] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 871.145186][ T5819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.247573][ T5819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.265947][ T7520] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.270853][ T7520] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 871.273721][ T7520] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.278150][ T7520] usb 9-1: config 0 descriptor?? [ 871.309719][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 871.317829][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 871.321823][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 871.327315][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 871.333513][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 871.352784][T17543] FAULT_INJECTION: forcing a failure. [ 871.352784][T17543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.364450][T17543] CPU: 0 UID: 0 PID: 17543 Comm: syz.0.3255 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.364470][T17543] Tainted: [L]=SOFTLOCKUP [ 871.364475][T17543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 871.364482][T17543] Call Trace: [ 871.364487][T17543] [ 871.364492][T17543] dump_stack_lvl+0x100/0x190 [ 871.364512][T17543] should_fail_ex.cold+0x5/0xa [ 871.364547][T17543] _copy_from_iter+0x1f4/0x1690 [ 871.364567][T17543] ? _copy_from_iter+0x270/0x1690 [ 871.364583][T17543] ? __pfx__copy_from_iter+0x10/0x10 [ 871.364602][T17543] ? __pfx__copy_from_iter+0x10/0x10 [ 871.364622][T17543] copy_page_from_iter+0x238/0x300 [ 871.364641][T17543] skb_copy_datagram_from_iter+0x399/0x720 [ 871.364660][T17543] tun_get_user+0x1889/0x3c20 [ 871.364704][T17543] ? __pfx_tun_get_user+0x10/0x10 [ 871.364718][T17543] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 871.364735][T17543] ? find_held_lock+0x2b/0x80 [ 871.364750][T17543] ? tun_get+0x191/0x370 [ 871.364760][T17543] ? tun_get+0x191/0x370 [ 871.364775][T17543] tun_chr_write_iter+0xdc/0x200 [ 871.364789][T17543] vfs_write+0x6ac/0x1050 [ 871.364801][T17543] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 871.364815][T17543] ? __pfx_vfs_write+0x10/0x10 [ 871.364828][T17543] ? find_held_lock+0x2b/0x80 [ 871.364851][T17543] ksys_write+0x12a/0x250 [ 871.364861][T17543] ? __pfx_ksys_write+0x10/0x10 [ 871.364875][T17543] do_int80_emulation+0x14b/0x720 [ 871.364893][T17543] asm_int80_emulation+0x1a/0x20 [ 871.364905][T17543] RIP: 0023:0xf71772eb [ 871.364915][T17543] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 871.364927][T17543] RSP: 002b:00000000f542d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 871.364938][T17543] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 871.364945][T17543] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 871.364952][T17543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.364959][T17543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.364965][T17543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.364979][T17543] [ 871.749350][ T5819] bond0 (unregistering): Released all slaves [ 871.760030][T12863] wg2 speed is unknown, defaulting to 1000 [ 871.761841][T12863] syz2: Port: 1 Link DOWN [ 871.768083][T12863] wg2 speed is unknown, defaulting to 1000 [ 871.770907][T17555] wlan0 speed is unknown, defaulting to 1000 [ 871.785369][T17555] wlan0 speed is unknown, defaulting to 1000 [ 871.789479][T17555] wlan0 speed is unknown, defaulting to 1000 [ 871.792019][T17555] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 871.809695][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 871.812386][ T8538] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 871.816767][T17555] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 871.840846][T17555] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 871.871096][T17555] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 871.982204][T17555] wlan0 speed is unknown, defaulting to 1000 [ 871.990768][ T8538] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 871.996276][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.000577][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.009220][T17555] wlan0 speed is unknown, defaulting to 1000 [ 872.010209][T17544] wg2 speed is unknown, defaulting to 1000 [ 872.011733][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.019878][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.034650][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.038161][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.041836][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.044730][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.047027][ T5454] 8021q: adding VLAN 0 to HW filter on device eth1 [ 872.050044][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.052467][T17555] wlan0 speed is unknown, defaulting to 1000 [ 872.056774][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.060187][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.064167][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.069471][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.072164][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.075406][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.078586][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.081278][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.084862][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.091697][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.096233][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.102554][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.108387][ T8538] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.112969][T17555] wlan0 speed is unknown, defaulting to 1000 [ 872.116259][ T8538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.119837][T17555] wlan0 speed is unknown, defaulting to 1000 [ 872.123825][ T8538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.128234][T17555] wlan0 speed is unknown, defaulting to 1000 [ 872.130337][ T8538] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 872.133494][ T8538] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 872.137334][ T8538] usb 5-1: Product: syz [ 872.139235][ T8538] usb 5-1: Manufacturer: syz [ 872.139642][T17555] wlan0 speed is unknown, defaulting to 1000 [ 872.141746][ T8538] usb 5-1: SerialNumber: syz [ 872.146892][ T8538] usb 5-1: config 0 descriptor?? [ 872.168738][ T8538] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 872.285586][ T7520] usbhid 9-1:0.0: can't add hid device: -71 [ 872.291120][ T7520] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 872.292057][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 872.305862][ T7520] usb 9-1: USB disconnect, device number 50 [ 872.488192][ T5819] hsr_slave_0: left promiscuous mode [ 872.490466][ T5819] hsr_slave_1: left promiscuous mode [ 872.510025][ T5819] veth1_macvtap: left promiscuous mode [ 872.511859][ T5819] veth0_macvtap: left promiscuous mode [ 872.513731][ T5819] veth1_vlan: left promiscuous mode [ 872.515904][ T5819] veth0_vlan: left promiscuous mode [ 872.717952][ T7148] smc: removing ib device syz2 [ 872.754393][ C2] usb 5-1: yurex_control_callback - control failed: -2 [ 872.759871][ C2] usb 5-1: yurex_control_callback - control failed: -2 [ 872.779778][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 872.782274][ T7148] smbdirect: ib_dev[syz2] removed [ 872.935817][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 872.971571][ T8538] usb 5-1: USB disconnect, device number 70 [ 873.006693][ T8538] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 873.191236][T17615] FAULT_INJECTION: forcing a failure. [ 873.191236][T17615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.219256][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 873.223380][T17615] CPU: 1 UID: 0 PID: 17615 Comm: syz.4.3263 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.223401][T17615] Tainted: [L]=SOFTLOCKUP [ 873.223406][T17615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 873.223413][T17615] Call Trace: [ 873.223418][T17615] [ 873.223423][T17615] dump_stack_lvl+0x100/0x190 [ 873.223443][T17615] should_fail_ex.cold+0x5/0xa [ 873.223457][T17615] _copy_from_user+0x2e/0xd0 [ 873.223475][T17615] tls_setsockopt+0x17a9/0x21e0 [ 873.223498][T17615] ? __pfx_tls_setsockopt+0x10/0x10 [ 873.223518][T17615] ? aa_sock_opt_perm+0xfe/0x1b0 [ 873.223530][T17615] ? sock_common_setsockopt+0x2e/0xf0 [ 873.223549][T17615] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 873.223567][T17615] do_sock_setsockopt+0xf3/0x1d0 [ 873.223586][T17615] __sys_setsockopt+0x119/0x190 [ 873.223604][T17615] __ia32_sys_setsockopt+0xbc/0x160 [ 873.223618][T17615] ? __do_fast_syscall_32+0x98/0x970 [ 873.223636][T17615] ? lockdep_hardirqs_on+0x78/0x100 [ 873.223650][T17615] __do_fast_syscall_32+0xe7/0x970 [ 873.223665][T17615] ? lockdep_hardirqs_on+0x78/0x100 [ 873.223679][T17615] do_fast_syscall_32+0x32/0x70 [ 873.223694][T17615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 873.223710][T17615] RIP: 0023:0xf7f24fec [ 873.223725][T17615] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 873.223730][T17615] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 873.223742][T17615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011a [ 873.223749][T17615] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000038 [ 873.223756][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 873.223763][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.223769][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 873.223783][T17615] [ 873.317705][T17616] netlink: 'syz.1.3262': attribute type 10 has an invalid length. [ 873.413674][T17616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.424338][T17616] team0: Port device bond0 added [ 873.519489][ T5750] Bluetooth: hci0: command tx timeout [ 874.043070][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 874.593278][T17623] kthread_run failed with err -4 [ 874.662799][ T29] wlan0 speed is unknown, defaulting to 1000 [ 874.722090][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.730458][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.744789][T17544] bridge_slave_0: entered allmulticast mode [ 874.754971][T17544] bridge_slave_0: entered promiscuous mode [ 874.760732][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.762886][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.765692][T17544] bridge_slave_1: entered allmulticast mode [ 874.768737][T17544] bridge_slave_1: entered promiscuous mode [ 874.784243][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.789878][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.794926][T17643] FAULT_INJECTION: forcing a failure. [ 874.794926][T17643] name failslab, interval 1, probability 0, space 0, times 0 [ 874.803597][T17643] CPU: 3 UID: 0 PID: 17643 Comm: syz.4.3269 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.803626][T17643] Tainted: [L]=SOFTLOCKUP [ 874.803633][T17643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 874.803644][T17643] Call Trace: [ 874.803651][T17643] [ 874.803659][T17643] dump_stack_lvl+0x100/0x190 [ 874.803688][T17643] should_fail_ex.cold+0x5/0xa [ 874.803710][T17643] should_failslab+0xc2/0x120 [ 874.803737][T17643] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 874.803762][T17643] ? __alloc_skb+0x5b7/0x710 [ 874.803786][T17643] ? __alloc_skb+0x140/0x710 [ 874.803813][T17643] __alloc_skb+0x140/0x710 [ 874.803834][T17643] ? __alloc_skb+0x5b7/0x710 [ 874.803857][T17643] ? __pfx___alloc_skb+0x10/0x10 [ 874.803888][T17643] netlink_alloc_large_skb+0x69/0x150 [ 874.803913][T17643] netlink_sendmsg+0x680/0xda0 [ 874.803937][T17643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.803962][T17643] ? apparmor_socket_sendmsg+0x15b/0x270 [ 874.803987][T17643] ____sys_sendmsg+0xa4d/0xbe0 [ 874.804005][T17643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.804027][T17643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.804056][T17643] ___sys_sendmsg+0x190/0x1e0 [ 874.804079][T17643] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.804111][T17643] ? find_held_lock+0x2b/0x80 [ 874.804152][T17643] __sys_sendmsg+0x160/0x210 [ 874.804179][T17643] ? __pfx___sys_sendmsg+0x10/0x10 [ 874.804211][T17643] ? __pfx_ksys_write+0x10/0x10 [ 874.804235][T17643] __do_fast_syscall_32+0xe7/0x970 [ 874.804260][T17643] ? lockdep_hardirqs_on+0x78/0x100 [ 874.804290][T17643] do_fast_syscall_32+0x32/0x70 [ 874.804314][T17643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 874.804338][T17643] RIP: 0023:0xf7f24fec [ 874.804362][T17643] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 874.804370][T17643] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 874.804389][T17643] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 874.804401][T17643] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.804413][T17643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 874.804424][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.804435][T17643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 874.804459][T17643] [ 874.806042][T17544] team0: Port device team_slave_0 added [ 874.844398][T17645] 9pnet_virtio: no channels available for device syz [ 874.847527][T17544] team0: Port device team_slave_1 added [ 874.860238][T17645] overlayfs: missing 'lowerdir' [ 874.881301][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.901108][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.909857][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.916795][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.919665][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.928202][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.955025][T17544] hsr_slave_0: entered promiscuous mode [ 874.958054][T17544] hsr_slave_1: entered promiscuous mode [ 874.960169][T17544] debugfs: 'hsr0' already exists in 'hsr' [ 874.962561][T17544] Cannot create hsr debugfs directory [ 875.143849][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 875.537136][T17544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 875.554503][T17544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.557527][T17544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 875.563861][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 875.564993][T17544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.571440][T17544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 875.583734][T17544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.586589][T17544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 875.649492][T17544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.673073][ T42] audit: type=1326 audit(1785307542.630:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.1.3274" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23fec code=0x0 [ 875.675762][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.683604][T17544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.688140][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.691720][T17544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.743642][ T5750] Bluetooth: hci0: command tx timeout [ 875.746333][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.750272][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.791242][T17544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.829468][T17544] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.838668][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.841381][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.857036][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.859715][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.236301][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.239821][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.265711][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 876.327743][T17698] x_tables: duplicate underflow at hook 3 [ 876.394185][T17696] bond1: left allmulticast mode [ 876.395869][T17696] ip6gretap1: left allmulticast mode [ 876.397658][T17696] bond1: left promiscuous mode [ 876.399254][T17696] ip6gretap1: left promiscuous mode [ 876.415803][T17544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.420000][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.426484][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.432223][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.440550][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.640249][T17544] veth0_vlan: entered promiscuous mode [ 876.649253][T17544] veth1_vlan: entered promiscuous mode [ 876.689963][T17544] veth0_macvtap: entered promiscuous mode [ 876.694871][ T5750] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 876.698744][T17544] veth1_macvtap: entered promiscuous mode [ 876.699019][ T5750] CPU: 3 UID: 0 PID: 5750 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.699052][ T5750] Tainted: [L]=SOFTLOCKUP [ 876.699060][ T5750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 876.699086][ T5750] Workqueue: hci1 hci_rx_work [ 876.699126][ T5750] Call Trace: [ 876.699134][ T5750] [ 876.699143][ T5750] dump_stack_lvl+0x100/0x190 [ 876.699171][ T5750] sysfs_warn_dup.cold+0x1c/0x28 [ 876.699201][ T5750] sysfs_create_dir_ns+0x24b/0x2b0 [ 876.699232][ T5750] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 876.699258][ T5750] ? find_held_lock+0x2b/0x80 [ 876.699280][ T5750] ? kobject_add_internal+0x25f/0x930 [ 876.699310][ T5750] ? kobject_add_internal+0x25f/0x930 [ 876.699338][ T5750] ? do_raw_spin_unlock+0x145/0x1e0 [ 876.699360][ T5750] kobject_add_internal+0x2c8/0x930 [ 876.699388][ T5750] kobject_add+0x16a/0x1e0 [ 876.699415][ T5750] ? __pfx_kobject_add+0x10/0x10 [ 876.699439][ T5750] ? class_to_subsys+0x10f/0x150 [ 876.699481][ T5750] ? kobject_put+0xb9/0x640 [ 876.699507][ T5750] ? _raw_spin_unlock+0x28/0x50 [ 876.699536][ T5750] device_add+0x294/0x1970 [ 876.699571][ T5750] ? __pfx_dev_set_name+0x10/0x10 [ 876.699591][ T5750] ? __pfx_device_add+0x10/0x10 [ 876.699617][ T5750] ? mgmt_send_event_skb+0x2fb/0x460 [ 876.699646][ T5750] hci_conn_add_sysfs+0x1a3/0x260 [ 876.699678][ T5750] le_conn_complete_evt+0x11eb/0x1f60 [ 876.699710][ T5750] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 876.699732][ T5750] ? hci_event_packet+0x186/0xcd0 [ 876.699761][ T5750] hci_le_conn_complete_evt+0x23c/0x3a0 [ 876.699784][ T5750] ? skb_pull_data+0x15f/0x1e0 [ 876.699806][ T5750] hci_le_meta_evt+0x34a/0x5f0 [ 876.699829][ T5750] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 876.699852][ T5750] hci_event_packet+0x51c/0xcd0 [ 876.699874][ T5750] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 876.699896][ T5750] ? __pfx_hci_event_packet+0x10/0x10 [ 876.699920][ T5750] ? kcov_remote_start+0x384/0x670 [ 876.699945][ T5750] ? lockdep_hardirqs_on+0x78/0x100 [ 876.699973][ T5750] hci_rx_work+0x451/0xfc0 [ 876.699998][ T5750] process_one_work+0xa23/0x1940 [ 876.700035][ T5750] ? __pfx_process_one_work+0x10/0x10 [ 876.700067][ T5750] ? __pfx_hci_rx_work+0x10/0x10 [ 876.700090][ T5750] worker_thread+0x5ef/0xe50 [ 876.700124][ T5750] ? kthread+0x13a/0x450 [ 876.700147][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 876.700169][ T5750] kthread+0x370/0x450 [ 876.700192][ T5750] ? __pfx_kthread+0x10/0x10 [ 876.700217][ T5750] ret_from_fork+0x72b/0xd50 [ 876.700241][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 876.700264][ T5750] ? __switch_to+0x800/0x10f0 [ 876.700292][ T5750] ? __pfx_kthread+0x10/0x10 [ 876.700317][ T5750] ret_from_fork_asm+0x1a/0x30 [ 876.700352][ T5750] [ 876.700550][ T5750] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 876.720934][T17544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.724626][ T5750] Bluetooth: hci1: failed to register connection device [ 876.737959][T17544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.833700][T17712] FAULT_INJECTION: forcing a failure. [ 876.833700][T17712] name failslab, interval 1, probability 0, space 0, times 0 [ 876.839272][T17712] CPU: 0 UID: 0 PID: 17712 Comm: syz.1.3282 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.839304][T17712] Tainted: [L]=SOFTLOCKUP [ 876.839310][T17712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 876.839322][T17712] Call Trace: [ 876.839329][T17712] [ 876.839337][T17712] dump_stack_lvl+0x100/0x190 [ 876.839365][T17712] should_fail_ex.cold+0x5/0xa [ 876.839387][T17712] should_failslab+0xc2/0x120 [ 876.839415][T17712] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 876.839440][T17712] ? __alloc_skb+0x5b7/0x710 [ 876.839465][T17712] ? __alloc_skb+0x140/0x710 [ 876.839510][T17712] __alloc_skb+0x140/0x710 [ 876.839532][T17712] ? __alloc_skb+0x5b7/0x710 [ 876.839555][T17712] ? __pfx___alloc_skb+0x10/0x10 [ 876.839586][T17712] netlink_alloc_large_skb+0x69/0x150 [ 876.839609][T17712] netlink_sendmsg+0x680/0xda0 [ 876.839634][T17712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.839659][T17712] ? apparmor_socket_sendmsg+0x15b/0x270 [ 876.839683][T17712] ____sys_sendmsg+0xa4d/0xbe0 [ 876.839700][T17712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.839722][T17712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.839751][T17712] ___sys_sendmsg+0x190/0x1e0 [ 876.839778][T17712] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.839811][T17712] ? find_held_lock+0x2b/0x80 [ 876.839849][T17712] __sys_sendmsg+0x160/0x210 [ 876.839874][T17712] ? __pfx___sys_sendmsg+0x10/0x10 [ 876.839906][T17712] ? __pfx_ksys_write+0x10/0x10 [ 876.839929][T17712] __do_fast_syscall_32+0xe7/0x970 [ 876.839953][T17712] ? lockdep_hardirqs_on+0x78/0x100 [ 876.839978][T17712] do_fast_syscall_32+0x32/0x70 [ 876.840001][T17712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 876.840025][T17712] RIP: 0023:0xf7f23fec [ 876.840047][T17712] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 876.840056][T17712] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 876.840076][T17712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 876.840088][T17712] RDX: 0000000004040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 876.840099][T17712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 876.840110][T17712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.840120][T17712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 876.840144][T17712] [ 876.845682][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.994166][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.996843][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.999543][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.062449][ T7106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.078166][T17718] FAULT_INJECTION: forcing a failure. [ 877.078166][T17718] name failslab, interval 1, probability 100, space 0, times 100 [ 877.081197][ T7106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.082696][ T10] FAULT_INJECTION: forcing a failure. [ 877.082696][ T10] name failslab, interval 1, probability 100, space 0, times 99 [ 877.085135][ T29] FAULT_INJECTION: forcing a failure. [ 877.085135][ T29] name failslab, interval 1, probability 100, space 0, times 99 [ 877.085186][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.085202][ T29] Tainted: [L]=SOFTLOCKUP [ 877.085206][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.085214][ T29] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 877.085236][ T29] Call Trace: [ 877.085240][ T29] [ 877.085246][ T29] dump_stack_lvl+0x100/0x190 [ 877.085261][ T29] should_fail_ex.cold+0x5/0xa [ 877.085274][ T29] should_failslab+0xc2/0x120 [ 877.085290][ T29] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.085303][ T29] ? __pfx_down_write+0x10/0x10 [ 877.085318][ T29] ? wg_noise_handshake_begin_session+0xe5/0xe40 [ 877.085338][ T29] wg_noise_handshake_begin_session+0xe5/0xe40 [ 877.085358][ T29] wg_packet_send_handshake_response+0x219/0x310 [ 877.085376][ T29] ? wg_socket_set_peer_endpoint+0x324/0xbe0 [ 877.085389][ T29] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 877.085408][ T29] ? do_raw_spin_lock+0x128/0x260 [ 877.085422][ T29] wg_receive_handshake_packet+0x7dd/0xc20 [ 877.085436][ T29] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 877.085449][ T29] ? do_raw_spin_lock+0x128/0x260 [ 877.085463][ T29] ? __local_bh_enable_ip+0x9e/0x120 [ 877.085478][ T29] wg_packet_handshake_receive_worker+0x15e/0x370 [ 877.085495][ T29] process_one_work+0xa23/0x1940 [ 877.085517][ T29] ? __pfx_process_one_work+0x10/0x10 [ 877.085538][ T29] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 877.085553][ T29] worker_thread+0x5ef/0xe50 [ 877.085574][ T29] ? kthread+0x13a/0x450 [ 877.085599][ T29] ? __pfx_worker_thread+0x10/0x10 [ 877.085620][ T29] kthread+0x370/0x450 [ 877.085643][ T29] ? __pfx_kthread+0x10/0x10 [ 877.085665][ T29] ret_from_fork+0x72b/0xd50 [ 877.085686][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 877.085713][ T29] ? __switch_to+0x800/0x10f0 [ 877.085742][ T29] ? __pfx_kthread+0x10/0x10 [ 877.085767][ T29] ret_from_fork_asm+0x1a/0x30 [ 877.085803][ T29] [ 877.085856][T17718] CPU: 1 UID: 0 PID: 17718 Comm: syz.1.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.085878][T17718] Tainted: [L]=SOFTLOCKUP [ 877.085883][T17718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.085890][T17718] Call Trace: [ 877.085895][T17718] [ 877.085900][T17718] dump_stack_lvl+0x100/0x190 [ 877.085916][T17718] should_fail_ex.cold+0x5/0xa [ 877.085930][T17718] should_failslab+0xc2/0x120 [ 877.085947][T17718] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.085962][T17718] ? copy_process+0x611/0x8030 [ 877.085976][T17718] ? copy_process+0x69a/0x8030 [ 877.085992][T17718] copy_process+0x69a/0x8030 [ 877.086005][T17718] ? try_to_wake_up+0x70a/0x1c90 [ 877.086020][T17718] ? __pfx_try_to_wake_up+0x10/0x10 [ 877.086033][T17718] ? futex_hash+0x311/0x400 [ 877.086050][T17718] ? __pfx_copy_process+0x10/0x10 [ 877.086064][T17718] ? futex_wake+0x4ea/0x5e0 [ 877.086079][T17718] ? futex_private_hash_put+0x115/0x1c0 [ 877.086093][T17718] kernel_clone+0x176/0x9d0 [ 877.086106][T17718] ? __pfx_futex_wake+0x10/0x10 [ 877.086121][T17718] ? __pfx_kernel_clone+0x10/0x10 [ 877.086138][T17718] ? ksys_write+0x190/0x250 [ 877.086152][T17718] __do_compat_sys_ia32_clone+0xd4/0x120 [ 877.086167][T17718] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 877.086179][T17718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 877.086204][T17718] __do_fast_syscall_32+0xe7/0x970 [ 877.086222][T17718] do_fast_syscall_32+0x32/0x70 [ 877.086236][T17718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 877.086251][T17718] RIP: 0023:0xf7f23fec [ 877.086268][T17718] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 877.086275][T17718] RSP: 002b:00000000f53a44bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 877.086287][T17718] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 877.086294][T17718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.086300][T17718] RBP: 00000000f53a45ec R08: 0000000000000000 R09: 0000000000000000 [ 877.086307][T17718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.086314][T17718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.086327][T17718] [ 877.086546][T17715] FAULT_INJECTION: forcing a failure. [ 877.086546][T17715] name failslab, interval 1, probability 100, space 0, times 97 [ 877.094921][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.094954][ T10] Tainted: [L]=SOFTLOCKUP [ 877.094961][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.094975][ T10] Workqueue: events nsim_fib_event_work [ 877.095031][ T10] Call Trace: [ 877.095040][ T10] [ 877.095048][ T10] dump_stack_lvl+0x100/0x190 [ 877.095074][ T10] should_fail_ex.cold+0x5/0xa [ 877.095096][ T10] should_failslab+0xc2/0x120 [ 877.095123][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.095145][ T10] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.095169][ T10] nsim_fib_event_work+0xfdd/0x6310 [ 877.095202][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.095228][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.095255][ T10] process_one_work+0xa23/0x1940 [ 877.095294][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.095329][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.095350][ T10] worker_thread+0x5ef/0xe50 [ 877.095380][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.095406][ T10] ? kthread+0x13a/0x450 [ 877.095427][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.095449][ T10] kthread+0x370/0x450 [ 877.095471][ T10] ? __pfx_kthread+0x10/0x10 [ 877.095497][ T10] ret_from_fork+0x72b/0xd50 [ 877.095520][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.095544][ T10] ? __switch_to+0x800/0x10f0 [ 877.095572][ T10] ? __pfx_kthread+0x10/0x10 [ 877.095596][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.095633][ T10] [ 877.095714][ T10] FAULT_INJECTION: forcing a failure. [ 877.095714][ T10] name failslab, interval 1, probability 100, space 0, times 96 [ 877.099470][T12863] FAULT_INJECTION: forcing a failure. [ 877.099470][T12863] name failslab, interval 1, probability 100, space 0, times 96 [ 877.100722][ T13] FAULT_INJECTION: forcing a failure. [ 877.100722][ T13] name failslab, interval 1, probability 100, space 0, times 96 [ 877.100784][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.100809][ T13] Tainted: [L]=SOFTLOCKUP [ 877.100815][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.100828][ T13] Workqueue: bat_events batadv_mcast_mla_update [ 877.100864][ T13] Call Trace: [ 877.100870][ T13] [ 877.100877][ T13] dump_stack_lvl+0x100/0x190 [ 877.100901][ T13] should_fail_ex.cold+0x5/0xa [ 877.100923][ T13] should_failslab+0xc2/0x120 [ 877.100948][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.100969][ T13] ? batadv_mcast_mla_update+0x1ed5/0x3200 [ 877.101001][ T13] batadv_mcast_mla_update+0x1ed5/0x3200 [ 877.101027][ T13] ? do_raw_spin_lock+0x128/0x260 [ 877.101055][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 877.101088][ T13] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.101126][ T13] ? rcu_is_watching+0x12/0xc0 [ 877.101153][ T13] process_one_work+0xa23/0x1940 [ 877.101191][ T13] ? __pfx_process_one_work+0x10/0x10 [ 877.101225][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 877.101256][ T13] worker_thread+0x5ef/0xe50 [ 877.101292][ T13] ? kthread+0x13a/0x450 [ 877.101315][ T13] ? __pfx_worker_thread+0x10/0x10 [ 877.101339][ T13] kthread+0x370/0x450 [ 877.101362][ T13] ? __pfx_kthread+0x10/0x10 [ 877.101392][ T13] ret_from_fork+0x72b/0xd50 [ 877.101416][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 877.101439][ T13] ? __switch_to+0x800/0x10f0 [ 877.101468][ T13] ? __pfx_kthread+0x10/0x10 [ 877.101493][ T13] ret_from_fork_asm+0x1a/0x30 [ 877.101531][ T13] [ 877.101545][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.101571][ T10] Tainted: [L]=SOFTLOCKUP [ 877.101578][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.101591][ T10] Workqueue: events nsim_fib_event_work [ 877.101613][ T10] Call Trace: [ 877.101621][ T10] [ 877.101629][ T10] dump_stack_lvl+0x100/0x190 [ 877.101653][ T10] should_fail_ex.cold+0x5/0xa [ 877.101674][ T10] should_failslab+0xc2/0x120 [ 877.101700][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.101710][ T5140] FAULT_INJECTION: forcing a failure. [ 877.101710][ T5140] name failslab, interval 1, probability 100, space 0, times 95 [ 877.101722][ T10] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.101746][ T10] nsim_fib_event_work+0xfdd/0x6310 [ 877.101784][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.101810][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.101837][ T10] process_one_work+0xa23/0x1940 [ 877.101876][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.101911][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.101933][ T10] worker_thread+0x5ef/0xe50 [ 877.101968][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.101995][ T10] ? kthread+0x13a/0x450 [ 877.102017][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.102042][ T10] kthread+0x370/0x450 [ 877.102065][ T10] ? __pfx_kthread+0x10/0x10 [ 877.102090][ T10] ret_from_fork+0x72b/0xd50 [ 877.102113][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.102137][ T10] ? __switch_to+0x800/0x10f0 [ 877.102165][ T10] ? __pfx_kthread+0x10/0x10 [ 877.102190][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.102226][ T10] [ 877.102262][ T10] FAULT_INJECTION: forcing a failure. [ 877.102262][ T10] name failslab, interval 1, probability 100, space 0, times 94 [ 877.102286][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.102309][ T10] Tainted: [L]=SOFTLOCKUP [ 877.102316][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.102328][ T10] Workqueue: events nsim_fib_event_work [ 877.102344][ T10] Call Trace: [ 877.102351][ T10] [ 877.102358][ T10] dump_stack_lvl+0x100/0x190 [ 877.102380][ T10] should_fail_ex.cold+0x5/0xa [ 877.102401][ T10] should_failslab+0xc2/0x120 [ 877.102426][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.102447][ T10] ? nsim_fib_event_work+0x156d/0x6310 [ 877.102471][ T10] nsim_fib_event_work+0x156d/0x6310 [ 877.102503][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.102529][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.102555][ T10] process_one_work+0xa23/0x1940 [ 877.102593][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.102628][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.102649][ T10] worker_thread+0x5ef/0xe50 [ 877.102683][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.102710][ T10] ? kthread+0x13a/0x450 [ 877.102733][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.102763][ T10] kthread+0x370/0x450 [ 877.102787][ T10] ? __pfx_kthread+0x10/0x10 [ 877.102813][ T10] ret_from_fork+0x72b/0xd50 [ 877.102836][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.102860][ T10] ? __switch_to+0x800/0x10f0 [ 877.102888][ T10] ? __pfx_kthread+0x10/0x10 [ 877.102913][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.102951][ T10] [ 877.103075][ T10] FAULT_INJECTION: forcing a failure. [ 877.103075][ T10] name failslab, interval 1, probability 100, space 0, times 93 [ 877.103099][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.103123][ T10] Tainted: [L]=SOFTLOCKUP [ 877.103129][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.103141][ T10] Workqueue: events nsim_fib_event_work [ 877.103158][ T10] Call Trace: [ 877.103165][ T10] [ 877.103172][ T10] dump_stack_lvl+0x100/0x190 [ 877.103193][ T10] should_fail_ex.cold+0x5/0xa [ 877.103215][ T10] should_failslab+0xc2/0x120 [ 877.103241][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.103261][ T10] ? nsim_fib_event_work+0x156d/0x6310 [ 877.103285][ T10] nsim_fib_event_work+0x156d/0x6310 [ 877.103318][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.103345][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.103372][ T10] process_one_work+0xa23/0x1940 [ 877.103407][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.103442][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.103463][ T10] worker_thread+0x5ef/0xe50 [ 877.103497][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.103525][ T10] ? kthread+0x13a/0x450 [ 877.103546][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.103570][ T10] kthread+0x370/0x450 [ 877.103594][ T10] ? __pfx_kthread+0x10/0x10 [ 877.103618][ T10] ret_from_fork+0x72b/0xd50 [ 877.103642][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.103665][ T10] ? __switch_to+0x800/0x10f0 [ 877.103694][ T10] ? __pfx_kthread+0x10/0x10 [ 877.103718][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.103761][ T10] [ 877.103784][ T10] FAULT_INJECTION: forcing a failure. [ 877.103784][ T10] name failslab, interval 1, probability 100, space 0, times 92 [ 877.103808][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.103832][ T10] Tainted: [L]=SOFTLOCKUP [ 877.103838][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.103850][ T10] Workqueue: events nsim_fib_event_work [ 877.103868][ T10] Call Trace: [ 877.103874][ T10] [ 877.103881][ T10] dump_stack_lvl+0x100/0x190 [ 877.103902][ T10] should_fail_ex.cold+0x5/0xa [ 877.103923][ T10] should_failslab+0xc2/0x120 [ 877.103949][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.103971][ T10] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.103995][ T10] nsim_fib_event_work+0xfdd/0x6310 [ 877.104028][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.104053][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.104080][ T10] process_one_work+0xa23/0x1940 [ 877.104118][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.104153][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.104175][ T10] worker_thread+0x5ef/0xe50 [ 877.104209][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.104237][ T10] ? kthread+0x13a/0x450 [ 877.104258][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.104283][ T10] kthread+0x370/0x450 [ 877.104306][ T10] ? __pfx_kthread+0x10/0x10 [ 877.104332][ T10] ret_from_fork+0x72b/0xd50 [ 877.104356][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.104380][ T10] ? __switch_to+0x800/0x10f0 [ 877.104408][ T10] ? __pfx_kthread+0x10/0x10 [ 877.104434][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.104472][ T10] [ 877.104527][ T10] FAULT_INJECTION: forcing a failure. [ 877.104527][ T10] name failslab, interval 1, probability 100, space 0, times 91 [ 877.104552][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.104576][ T10] Tainted: [L]=SOFTLOCKUP [ 877.104582][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.104594][ T10] Workqueue: events nsim_fib_event_work [ 877.104611][ T10] Call Trace: [ 877.104618][ T10] [ 877.104625][ T10] dump_stack_lvl+0x100/0x190 [ 877.104646][ T10] should_fail_ex.cold+0x5/0xa [ 877.104667][ T10] should_failslab+0xc2/0x120 [ 877.104692][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.104714][ T10] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.104738][ T10] nsim_fib_event_work+0xfdd/0x6310 [ 877.104774][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.104800][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.104827][ T10] process_one_work+0xa23/0x1940 [ 877.104865][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.104900][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.104922][ T10] worker_thread+0x5ef/0xe50 [ 877.104955][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.104983][ T10] ? kthread+0x13a/0x450 [ 877.105004][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.105028][ T10] kthread+0x370/0x450 [ 877.105050][ T10] ? __pfx_kthread+0x10/0x10 [ 877.105075][ T10] ret_from_fork+0x72b/0xd50 [ 877.105099][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.105123][ T10] ? __switch_to+0x800/0x10f0 [ 877.105150][ T10] ? __pfx_kthread+0x10/0x10 [ 877.105176][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.105215][ T10] [ 877.105243][ T10] FAULT_INJECTION: forcing a failure. [ 877.105243][ T10] name failslab, interval 1, probability 100, space 0, times 90 [ 877.105271][ T7106] FAULT_INJECTION: forcing a failure. [ 877.105271][ T7106] name failslab, interval 1, probability 100, space 0, times 90 [ 877.105314][ T7106] CPU: 3 UID: 0 PID: 7106 Comm: kworker/u33:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.105341][ T7106] Tainted: [L]=SOFTLOCKUP [ 877.105348][ T7106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.105360][ T7106] Workqueue: events_unbound cfg80211_wiphy_work [ 877.105407][ T7106] Call Trace: [ 877.105415][ T7106] [ 877.105423][ T7106] dump_stack_lvl+0x100/0x190 [ 877.105445][ T7106] should_fail_ex.cold+0x5/0xa [ 877.105467][ T7106] should_failslab+0xc2/0x120 [ 877.105493][ T7106] __kmalloc_noprof+0xfc/0x820 [ 877.105517][ T7106] ? ieee80211_alloc_chanctx+0xa5/0x4c0 [ 877.105545][ T7106] ieee80211_alloc_chanctx+0xa5/0x4c0 [ 877.105569][ T7106] ieee80211_new_chanctx+0x84/0x320 [ 877.105594][ T7106] ieee80211_find_or_create_chanctx+0x279/0x2d0 [ 877.105619][ T7106] ? __pfx_ieee80211_find_or_create_chanctx+0x10/0x10 [ 877.105652][ T7106] _ieee80211_link_use_channel+0x459/0xbc0 [ 877.105681][ T7106] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 877.105706][ T7106] ? _cfg80211_chandef_usable+0x636/0x1ed0 [ 877.105737][ T7106] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 877.105771][ T7106] ? cfg80211_reg_check_beaconing+0x20d/0xe60 [ 877.105808][ T7106] __ieee80211_sta_join_ibss+0x607/0x1940 [ 877.105843][ T7106] ? __pfx___ieee80211_sta_join_ibss+0x10/0x10 [ 877.105869][ T7106] ? vprintk_emit+0xe0/0x6b0 [ 877.105893][ T7106] ? __pfx_vprintk_emit+0x10/0x10 [ 877.105924][ T7106] ? _printk+0xcf/0x110 [ 877.105957][ T7106] ieee80211_sta_create_ibss.cold+0xaf/0x104 [ 877.105986][ T7106] ? __cfg80211_get_bss+0x612/0x960 [ 877.106009][ T7106] ? __pfx_ieee80211_sta_create_ibss+0x10/0x10 [ 877.106044][ T7106] ieee80211_ibss_work.cold+0x253/0x431 [ 877.106076][ T7106] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 877.106102][ T7106] ? __lock_acquire+0x49f/0x1a40 [ 877.106130][ T7106] ? rcu_is_watching+0x12/0xc0 [ 877.106152][ T7106] ? trace_contention_end+0x126/0x160 [ 877.106177][ T7106] ? do_raw_spin_lock+0x128/0x260 [ 877.106199][ T7106] ? find_held_lock+0x2b/0x80 [ 877.106224][ T7106] ? mark_held_locks+0x40/0x70 [ 877.106256][ T7106] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 877.106278][ T7106] ? lockdep_hardirqs_on+0x78/0x100 [ 877.106302][ T7106] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.106326][ T7106] ieee80211_iface_work+0xac4/0x1070 [ 877.106358][ T7106] cfg80211_wiphy_work+0x2b7/0x550 [ 877.106402][ T7106] process_one_work+0xa23/0x1940 [ 877.106438][ T7106] ? __pfx_process_one_work+0x10/0x10 [ 877.106474][ T7106] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 877.106498][ T7106] worker_thread+0x5ef/0xe50 [ 877.106535][ T7106] ? kthread+0x13a/0x450 [ 877.106555][ T7106] ? __pfx_worker_thread+0x10/0x10 [ 877.106575][ T7106] kthread+0x370/0x450 [ 877.106594][ T7106] ? __pfx_kthread+0x10/0x10 [ 877.106618][ T7106] ret_from_fork+0x72b/0xd50 [ 877.106641][ T7106] ? __pfx_ret_from_fork+0x10/0x10 [ 877.106661][ T7106] ? native_load_gs_index+0x1e/0xc0 [ 877.106687][ T7106] ? __switch_to+0x800/0x10f0 [ 877.106713][ T7106] ? __pfx_kthread+0x10/0x10 [ 877.106737][ T7106] ret_from_fork_asm+0x1a/0x30 [ 877.106773][ T7106] [ 877.106802][ T7106] wlan0: Failed to join IBSS, no channel context [ 877.107497][ T7520] FAULT_INJECTION: forcing a failure. [ 877.107497][ T7520] name failslab, interval 1, probability 100, space 0, times 89 [ 877.109133][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.109160][ T10] Tainted: [L]=SOFTLOCKUP [ 877.109166][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.109178][ T10] Workqueue: events nsim_fib_event_work [ 877.109199][ T10] Call Trace: [ 877.109207][ T10] [ 877.109219][ T10] dump_stack_lvl+0x100/0x190 [ 877.109242][ T10] should_fail_ex.cold+0x5/0xa [ 877.109264][ T10] should_failslab+0xc2/0x120 [ 877.109290][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.109309][ T10] ? nsim_fib_event_work+0x156d/0x6310 [ 877.109332][ T10] nsim_fib_event_work+0x156d/0x6310 [ 877.109365][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.109391][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.109417][ T10] process_one_work+0xa23/0x1940 [ 877.109454][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.109487][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.109506][ T10] worker_thread+0x5ef/0xe50 [ 877.109539][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.109566][ T10] ? kthread+0x13a/0x450 [ 877.109587][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.109612][ T10] kthread+0x370/0x450 [ 877.109634][ T10] ? __pfx_kthread+0x10/0x10 [ 877.109660][ T10] ret_from_fork+0x72b/0xd50 [ 877.109683][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.109707][ T10] ? __switch_to+0x800/0x10f0 [ 877.109758][ T10] ? __pfx_kthread+0x10/0x10 [ 877.109784][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.109822][ T10] [ 877.109962][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 877.109979][ T5140] Tainted: [L]=SOFTLOCKUP [ 877.109983][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.109990][ T5140] Call Trace: [ 877.109994][ T5140] [ 877.109998][ T5140] dump_stack_lvl+0x100/0x190 [ 877.110013][ T5140] should_fail_ex.cold+0x5/0xa [ 877.110025][ T5140] should_failslab+0xc2/0x120 [ 877.110041][ T5140] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.110055][ T5140] ? __alloc_skb+0x5b7/0x710 [ 877.110084][ T5140] ? __alloc_skb+0x140/0x710 [ 877.110101][ T5140] __alloc_skb+0x140/0x710 [ 877.110115][ T5140] ? __alloc_skb+0x5b7/0x710 [ 877.110128][ T5140] ? __pfx___alloc_skb+0x10/0x10 [ 877.110142][ T5140] ? __x64_sys_syslog+0x74/0xb0 [ 877.110154][ T5140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.110170][ T5140] alloc_skb_with_frags+0xdd/0x760 [ 877.110190][ T5140] sock_alloc_send_pskb+0x801/0x980 [ 877.110209][ T5140] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 877.110225][ T5140] ? kasan_quarantine_put+0x104/0x240 [ 877.110238][ T5140] ? lockdep_hardirqs_on+0x78/0x100 [ 877.110252][ T5140] ? syslog_print+0x480/0x620 [ 877.110270][ T5140] unix_dgram_sendmsg+0x3c7/0x1810 [ 877.110288][ T5140] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 877.110307][ T5140] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 877.110324][ T5140] ? __pfx_syslog_print+0x10/0x10 [ 877.110341][ T5140] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 877.110355][ T5140] ? lock_acquire+0x1b9/0x370 [ 877.110378][ T5140] ? apparmor_socket_sendmsg+0x15b/0x270 [ 877.110392][ T5140] __sys_sendto+0x48b/0x4e0 [ 877.110406][ T5140] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 877.110421][ T5140] ? __pfx___sys_sendto+0x10/0x10 [ 877.110438][ T5140] ? do_syslog+0x18c/0x6d0 [ 877.110454][ T5140] ? xfd_validate_state+0x129/0x190 [ 877.110471][ T5140] __x64_sys_sendto+0xe0/0x1c0 [ 877.110484][ T5140] ? do_syscall_64+0x90/0x840 [ 877.110497][ T5140] ? lockdep_hardirqs_on+0x78/0x100 [ 877.110510][ T5140] do_syscall_64+0x115/0x840 [ 877.110523][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.110537][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.110549][ T5140] RIP: 0033:0x7f8979d59407 [ 877.110560][ T5140] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 877.110571][ T5140] RSP: 002b:00007ffe4a8e1190 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 877.110582][ T5140] RAX: ffffffffffffffda RBX: 00007f8979c09c80 RCX: 00007f8979d59407 [ 877.110589][ T5140] RDX: 0000000000000055 RSI: 00007ffe4a8e12d0 RDI: 0000000000000003 [ 877.110596][ T5140] RBP: 00007ffe4a8e1700 R08: 0000000000000000 R09: 0000000000000000 [ 877.110602][ T5140] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe4a8e1718 [ 877.110609][ T5140] R13: 00007ffe4a8e12d0 R14: 000000000000003a R15: 00007ffe4a8e12d0 [ 877.110623][ T5140] [ 877.110706][ T10] FAULT_INJECTION: forcing a failure. [ 877.110706][ T10] name failslab, interval 1, probability 100, space 0, times 87 [ 877.110733][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.110764][ T10] Tainted: [L]=SOFTLOCKUP [ 877.110771][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.110782][ T10] Workqueue: events nsim_fib_event_work [ 877.110801][ T10] Call Trace: [ 877.110797][ T5140] FAULT_INJECTION: forcing a failure. [ 877.110797][ T5140] name failslab, interval 1, probability 100, space 0, times 86 [ 877.110807][ T10] [ 877.110814][ T10] dump_stack_lvl+0x100/0x190 [ 877.110834][ T10] should_fail_ex.cold+0x5/0xa [ 877.110856][ T10] should_failslab+0xc2/0x120 [ 877.110880][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.110900][ T10] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.110925][ T10] nsim_fib_event_work+0xfdd/0x6310 [ 877.110956][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.110981][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.111010][ T10] process_one_work+0xa23/0x1940 [ 877.111044][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.111076][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.111098][ T10] worker_thread+0x5ef/0xe50 [ 877.111131][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.111159][ T10] ? kthread+0x13a/0x450 [ 877.111181][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.111206][ T10] kthread+0x370/0x450 [ 877.111230][ T10] ? __pfx_kthread+0x10/0x10 [ 877.111254][ T10] ret_from_fork+0x72b/0xd50 [ 877.111277][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.111301][ T10] ? __switch_to+0x800/0x10f0 [ 877.111328][ T10] ? __pfx_kthread+0x10/0x10 [ 877.111353][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.111390][ T10] [ 877.111400][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 877.111415][ T5140] Tainted: [L]=SOFTLOCKUP [ 877.111412][ T10] FAULT_INJECTION: forcing a failure. [ 877.111412][ T10] name failslab, interval 1, probability 100, space 0, times 85 [ 877.111418][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.111425][ T5140] Call Trace: [ 877.111428][ T5140] [ 877.111433][ T5140] dump_stack_lvl+0x100/0x190 [ 877.111445][ T5140] should_fail_ex.cold+0x5/0xa [ 877.111457][ T5140] should_failslab+0xc2/0x120 [ 877.111473][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.111486][ T5140] ? find_held_lock+0x2b/0x80 [ 877.111500][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.111518][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.111535][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.111552][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.111568][ T5140] alloc_inode+0x68/0x250 [ 877.111583][ T5140] sock_alloc+0x44/0x280 [ 877.111598][ T5140] ? security_socket_create+0x7f/0x250 [ 877.111611][ T5140] __sock_create+0xc2/0x860 [ 877.111625][ T5140] __sys_socket+0x14d/0x260 [ 877.111638][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.111653][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.111664][ T5140] ? lockdep_hardirqs_on+0x78/0x100 [ 877.111677][ T5140] do_syscall_64+0x115/0x840 [ 877.111690][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.111703][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.111714][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.111722][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.111733][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.111743][ T5140] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007f8979dd4707 [ 877.111750][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.111756][ T5140] RBP: 00007f8979e60560 R08: 0000000000000000 R09: 0000000000000000 [ 877.111762][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.111769][ T5140] R13: 00007ffe4a8e12d0 R14: 000000000000003a R15: 00007ffe4a8e12d0 [ 877.111782][ T5140] [ 877.111788][ T5140] socket: no more sockets [ 877.111809][ T5140] FAULT_INJECTION: forcing a failure. [ 877.111809][ T5140] name failslab, interval 1, probability 100, space 0, times 84 [ 877.111822][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 877.111836][ T5140] Tainted: [L]=SOFTLOCKUP [ 877.111840][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.111846][ T5140] Call Trace: [ 877.111849][ T5140] [ 877.111853][ T5140] dump_stack_lvl+0x100/0x190 [ 877.111868][ T5140] should_fail_ex.cold+0x5/0xa [ 877.111880][ T5140] should_failslab+0xc2/0x120 [ 877.111895][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.111909][ T5140] ? _printk+0xcf/0x110 [ 877.111919][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.111936][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.111954][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.111970][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.111986][ T5140] alloc_inode+0x68/0x250 [ 877.112000][ T5140] sock_alloc+0x44/0x280 [ 877.112015][ T5140] ? security_socket_create+0x7f/0x250 [ 877.112027][ T5140] __sock_create+0xc2/0x860 [ 877.112040][ T5140] __sys_socket+0x14d/0x260 [ 877.112052][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.112068][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.112079][ T5140] ? lockdep_hardirqs_on+0x78/0x100 [ 877.112092][ T5140] do_syscall_64+0x115/0x840 [ 877.112104][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.112117][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.112128][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.112136][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.112146][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.112156][ T5140] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8979dd4707 [ 877.112162][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.112168][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.112175][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.112181][ T5140] R13: 00007ffe4a8e12d0 R14: 0000000000000055 R15: 00007ffe4a8e12d0 [ 877.112195][ T5140] [ 877.112199][ T5140] socket: no more sockets [ 877.112206][ T5140] FAULT_INJECTION: forcing a failure. [ 877.112206][ T5140] name failslab, interval 1, probability 100, space 0, times 83 [ 877.112219][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 877.112232][ T5140] Tainted: [L]=SOFTLOCKUP [ 877.112236][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.112242][ T5140] Call Trace: [ 877.112246][ T5140] [ 877.112249][ T5140] dump_stack_lvl+0x100/0x190 [ 877.112262][ T5140] should_fail_ex.cold+0x5/0xa [ 877.112274][ T5140] should_failslab+0xc2/0x120 [ 877.112288][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.112302][ T5140] ? _printk+0xcf/0x110 [ 877.112312][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.112329][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.112347][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.112367][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.112383][ T5140] alloc_inode+0x68/0x250 [ 877.112397][ T5140] sock_alloc+0x44/0x280 [ 877.112425][ T5140] ? security_socket_create+0x7f/0x250 [ 877.112439][ T5140] __sock_create+0xc2/0x860 [ 877.112452][ T5140] __sys_socket+0x14d/0x260 [ 877.112465][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.112480][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.112512][ T5140] ? lockdep_hardirqs_on+0x78/0x100 [ 877.112526][ T5140] do_syscall_64+0x115/0x840 [ 877.112538][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.112552][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.112562][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.112571][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.112582][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.112591][ T5140] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f8979dd4707 [ 877.112598][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.112605][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.112611][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.112617][ T5140] R13: 00007ffe4a8e12d0 R14: 0000000000000050 R15: 00007ffe4a8e12d0 [ 877.112631][ T5140] [ 877.112810][T12863] CPU: 3 UID: 0 PID: 12863 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.112836][T12863] Tainted: [L]=SOFTLOCKUP [ 877.112843][T12863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.112855][T12863] Workqueue: events nsim_fib_event_work [ 877.112891][T12863] Call Trace: [ 877.112898][T12863] [ 877.112906][T12863] dump_stack_lvl+0x100/0x190 [ 877.112929][T12863] should_fail_ex.cold+0x5/0xa [ 877.112949][T12863] should_failslab+0xc2/0x120 [ 877.112975][T12863] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.112996][T12863] ? nsim_fib_event_work+0x156d/0x6310 [ 877.113019][T12863] nsim_fib_event_work+0x156d/0x6310 [ 877.113048][T12863] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.113078][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.113104][T12863] ? rcu_is_watching+0x12/0xc0 [ 877.113130][T12863] process_one_work+0xa23/0x1940 [ 877.113167][T12863] ? __pfx_process_one_work+0x10/0x10 [ 877.113201][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.113222][T12863] worker_thread+0x5ef/0xe50 [ 877.113261][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.113288][T12863] ? kthread+0x13a/0x450 [ 877.113311][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.113336][T12863] kthread+0x370/0x450 [ 877.113359][T12863] ? __pfx_kthread+0x10/0x10 [ 877.113385][T12863] ret_from_fork+0x72b/0xd50 [ 877.113425][T12863] ? __pfx_ret_from_fork+0x10/0x10 [ 877.113450][T12863] ? __switch_to+0x800/0x10f0 [ 877.113478][T12863] ? __pfx_kthread+0x10/0x10 [ 877.113504][T12863] ret_from_fork_asm+0x1a/0x30 [ 877.113541][T12863] [ 877.113746][T12863] FAULT_INJECTION: forcing a failure. [ 877.113746][T12863] name failslab, interval 1, probability 100, space 0, times 82 [ 877.114670][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.114696][ T10] Tainted: [L]=SOFTLOCKUP [ 877.114703][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.114715][ T10] Workqueue: events nsim_fib_event_work [ 877.114734][ T10] Call Trace: [ 877.114741][ T10] [ 877.114749][ T10] dump_stack_lvl+0x100/0x190 [ 877.114775][ T10] should_fail_ex.cold+0x5/0xa [ 877.114796][ T10] should_failslab+0xc2/0x120 [ 877.114822][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.114843][ T10] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.114866][ T10] nsim_fib_event_work+0xfdd/0x6310 [ 877.114899][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.114925][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.114951][ T10] process_one_work+0xa23/0x1940 [ 877.114993][T17714] FAULT_INJECTION: forcing a failure. [ 877.114993][T17714] name failslab, interval 1, probability 100, space 0, times 82 [ 877.114988][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.115024][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.115045][ T10] worker_thread+0x5ef/0xe50 [ 877.115078][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.115105][ T10] ? kthread+0x13a/0x450 [ 877.115127][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.115151][ T10] kthread+0x370/0x450 [ 877.115174][ T10] ? __pfx_kthread+0x10/0x10 [ 877.115200][ T10] ret_from_fork+0x72b/0xd50 [ 877.115224][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.115247][ T10] ? __switch_to+0x800/0x10f0 [ 877.115274][ T10] ? __pfx_kthread+0x10/0x10 [ 877.115299][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.115337][ T10] [ 877.115360][ T10] FAULT_INJECTION: forcing a failure. [ 877.115360][ T10] name failslab, interval 1, probability 100, space 0, times 81 [ 877.115383][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.115406][ T10] Tainted: [L]=SOFTLOCKUP [ 877.115413][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.115424][ T10] Workqueue: events nsim_fib_event_work [ 877.115441][ T10] Call Trace: [ 877.115447][ T10] [ 877.115454][ T10] dump_stack_lvl+0x100/0x190 [ 877.115475][ T10] should_fail_ex.cold+0x5/0xa [ 877.115495][ T10] should_failslab+0xc2/0x120 [ 877.115521][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.115542][ T10] ? nsim_fib_event_work+0x156d/0x6310 [ 877.115565][ T10] nsim_fib_event_work+0x156d/0x6310 [ 877.115598][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.115624][ T10] ? rcu_is_watching+0x12/0xc0 [ 877.115649][ T10] process_one_work+0xa23/0x1940 [ 877.115687][ T10] ? __pfx_process_one_work+0x10/0x10 [ 877.115721][ T10] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.115743][ T10] worker_thread+0x5ef/0xe50 [ 877.115781][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.115809][ T10] ? kthread+0x13a/0x450 [ 877.115831][ T10] ? __pfx_worker_thread+0x10/0x10 [ 877.115855][ T10] kthread+0x370/0x450 [ 877.115879][ T10] ? __pfx_kthread+0x10/0x10 [ 877.115904][ T10] ret_from_fork+0x72b/0xd50 [ 877.115928][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 877.115951][ T10] ? __switch_to+0x800/0x10f0 [ 877.115977][ T10] ? __pfx_kthread+0x10/0x10 [ 877.116001][ T10] ret_from_fork_asm+0x1a/0x30 [ 877.116037][ T10] [ 877.116833][ T7520] CPU: 3 UID: 0 PID: 7520 Comm: kworker/3:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.116874][ T7520] Tainted: [L]=SOFTLOCKUP [ 877.116881][ T7520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.116893][ T7520] Workqueue: events vidtv_mux_tick [ 877.116942][ T7520] Call Trace: [ 877.116948][ T7520] [ 877.116956][ T7520] dump_stack_lvl+0x100/0x190 [ 877.116977][ T7520] should_fail_ex.cold+0x5/0xa [ 877.116998][ T7520] should_failslab+0xc2/0x120 [ 877.117022][ T7520] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.117041][ T7520] ? vidtv_s302m_encode+0x1c3/0x1860 [ 877.117069][ T7520] vidtv_s302m_encode+0x1c3/0x1860 [ 877.117099][ T7520] ? vidtv_memset+0x50/0x90 [ 877.117121][ T7520] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 877.117142][ T7520] ? __schedule+0x31d8/0x6730 [ 877.117162][ T7520] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 877.117189][ T7520] ? trace_sched_exit_tp+0x120/0x160 [ 877.117212][ T7520] ? __schedule+0x126e/0x6730 [ 877.117239][ T7520] vidtv_mux_tick+0x4e4/0x1460 [ 877.117285][ T7520] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 877.117311][ T7520] ? irqentry_exit+0x24d/0xa00 [ 877.117347][ T7520] ? lock_acquire+0x5e/0x370 [ 877.117378][ T7520] ? rcu_is_watching+0x12/0xc0 [ 877.117404][ T7520] process_one_work+0xa23/0x1940 [ 877.117444][ T7520] ? __pfx_process_one_work+0x10/0x10 [ 877.117478][ T7520] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 877.117482][ T5347] FAULT_INJECTION: forcing a failure. [ 877.117482][ T5347] name failslab, interval 1, probability 100, space 0, times 80 [ 877.117506][ T7520] worker_thread+0x5ef/0xe50 [ 877.117542][ T7520] ? kthread+0x13a/0x450 [ 877.117565][ T7520] ? __pfx_worker_thread+0x10/0x10 [ 877.117590][ T7520] kthread+0x370/0x450 [ 877.117614][ T7520] ? __pfx_kthread+0x10/0x10 [ 877.117640][ T7520] ret_from_fork+0x72b/0xd50 [ 877.117663][ T7520] ? __pfx_ret_from_fork+0x10/0x10 [ 877.117688][ T7520] ? __switch_to+0x800/0x10f0 [ 877.117717][ T7520] ? __pfx_kthread+0x10/0x10 [ 877.117741][ T7520] ret_from_fork_asm+0x1a/0x30 [ 877.117778][ T7520] [ 877.120828][T12863] CPU: 3 UID: 0 PID: 12863 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.120856][T12863] Tainted: [L]=SOFTLOCKUP [ 877.120863][T12863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.120891][T12863] Workqueue: events nsim_fib_event_work [ 877.120913][T12863] Call Trace: [ 877.120920][T12863] [ 877.120929][T12863] dump_stack_lvl+0x100/0x190 [ 877.120952][T12863] should_fail_ex.cold+0x5/0xa [ 877.120974][T12863] should_failslab+0xc2/0x120 [ 877.121000][T12863] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.121021][T12863] ? nsim_fib_event_work+0x156d/0x6310 [ 877.121042][T12863] nsim_fib_event_work+0x156d/0x6310 [ 877.121073][T12863] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.121102][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.121128][T12863] ? rcu_is_watching+0x12/0xc0 [ 877.121154][T12863] process_one_work+0xa23/0x1940 [ 877.121159][ T5819] FAULT_INJECTION: forcing a failure. [ 877.121159][ T5819] name failslab, interval 1, probability 100, space 0, times 79 [ 877.121194][T12863] ? __pfx_process_one_work+0x10/0x10 [ 877.121227][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.121255][T12863] worker_thread+0x5ef/0xe50 [ 877.121287][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.121314][T12863] ? kthread+0x13a/0x450 [ 877.121336][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.121360][T12863] kthread+0x370/0x450 [ 877.121384][T12863] ? __pfx_kthread+0x10/0x10 [ 877.121409][T12863] ret_from_fork+0x72b/0xd50 [ 877.121433][T12863] ? __pfx_ret_from_fork+0x10/0x10 [ 877.121457][T12863] ? __switch_to+0x800/0x10f0 [ 877.121485][T12863] ? __pfx_kthread+0x10/0x10 [ 877.121511][T12863] ret_from_fork_asm+0x1a/0x30 [ 877.121549][T12863] [ 877.123527][ T8382] FAULT_INJECTION: forcing a failure. [ 877.123527][ T8382] name failslab, interval 1, probability 100, space 0, times 78 [ 877.123609][T12863] FAULT_INJECTION: forcing a failure. [ 877.123609][T12863] name failslab, interval 1, probability 100, space 0, times 78 [ 877.123669][T12863] CPU: 3 UID: 0 PID: 12863 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.123691][T12863] Tainted: [L]=SOFTLOCKUP [ 877.123697][T12863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.123723][T12863] Workqueue: events nsim_fib_event_work [ 877.123742][T12863] Call Trace: [ 877.123747][T12863] [ 877.123754][T12863] dump_stack_lvl+0x100/0x190 [ 877.123776][T12863] should_fail_ex.cold+0x5/0xa [ 877.123795][T12863] should_failslab+0xc2/0x120 [ 877.123818][T12863] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.123836][T12863] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.123856][T12863] nsim_fib_event_work+0xfdd/0x6310 [ 877.123874][T12863] ? __lock_acquire+0x49f/0x1a40 [ 877.123898][T12863] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.123916][T12863] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.123935][T12863] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.123963][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.123988][T12863] ? rcu_is_watching+0x12/0xc0 [ 877.124013][T12863] process_one_work+0xa23/0x1940 [ 877.124049][T12863] ? __pfx_process_one_work+0x10/0x10 [ 877.124082][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.124104][T12863] worker_thread+0x5ef/0xe50 [ 877.124137][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.124163][T12863] ? kthread+0x13a/0x450 [ 877.124186][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.124211][T12863] kthread+0x370/0x450 [ 877.124240][T12863] ? __pfx_kthread+0x10/0x10 [ 877.124266][T12863] ret_from_fork+0x72b/0xd50 [ 877.124290][T12863] ? __pfx_ret_from_fork+0x10/0x10 [ 877.124298][ C2] FAULT_INJECTION: forcing a failure. [ 877.124298][ C2] name failslab, interval 1, probability 100, space 0, times 77 [ 877.124314][T12863] ? __switch_to+0x800/0x10f0 [ 877.124342][T12863] ? __pfx_kthread+0x10/0x10 [ 877.124369][T12863] ret_from_fork_asm+0x1a/0x30 [ 877.124407][T12863] [ 877.124417][ C2] CPU: 2 UID: 0 PID: 17705 Comm: syz.0.3281 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.124434][ C2] Tainted: [L]=SOFTLOCKUP [ 877.124438][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.124445][ C2] Call Trace: [ 877.124449][ C2] [ 877.124453][ C2] dump_stack_lvl+0x100/0x190 [ 877.124469][ C2] should_fail_ex.cold+0x5/0xa [ 877.124481][ C2] should_failslab+0xc2/0x120 [ 877.124518][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.124488][ C3] FAULT_INJECTION: forcing a failure. [ 877.124488][ C3] name failslab, interval 1, probability 100, space 0, times 77 [ 877.124534][ C2] ? kmalloc_reserve+0x21b/0x350 [ 877.124550][ C2] kmalloc_reserve+0x21b/0x350 [ 877.124563][ C2] __alloc_skb+0x185/0x710 [ 877.124577][ C2] ? __alloc_skb+0x5b7/0x710 [ 877.124591][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 877.124606][ C2] ? lock_acquire+0x1b9/0x370 [ 877.124626][ C2] __netdev_alloc_skb+0x7a/0x960 [ 877.124642][ C2] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.124669][ C2] ? __lock_acquire+0x49f/0x1a40 [ 877.124718][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.124746][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.124767][ C2] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.124788][ C2] __iterate_interfaces+0x2e6/0x650 [ 877.124802][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.124820][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.124836][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.124853][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.124867][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.124882][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 877.124913][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 877.124938][ C2] handle_softirqs+0x1ea/0x9b0 [ 877.124965][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 877.124985][ C2] ? _raw_spin_unlock+0x28/0x50 [ 877.125005][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 877.125034][ C2] __irq_exit_rcu+0x162/0x210 [ 877.125055][ C2] irq_exit_rcu+0x9/0x30 [ 877.125076][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 877.125097][ C2] [ 877.125101][ C2] [ 877.125106][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.125119][ C2] RIP: 0010:_raw_spin_lock_irq+0xa/0x50 [ 877.125131][ C2] Code: 05 2a f6 48 89 df 58 5b e9 83 56 2a f6 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb 9c 58 f6 c4 02 75 30 bf 01 00 00 00 e8 36 ca 19 f6 ff 74 24 08 48 8d [ 877.125143][ C2] RSP: 0018:ffffc90003b67af8 EFLAGS: 00000246 [ 877.125153][ C2] RAX: 0000000000000246 RBX: ffff8880243dc638 RCX: ffffc90005155000 [ 877.125160][ C2] RDX: 0000000000080000 RSI: ffffffff89515caa RDI: ffff8880243dc638 [ 877.125168][ C2] RBP: ffff888027e48000 R08: 0000000000000007 R09: 0000000000000000 [ 877.125175][ C2] R10: 000000000000a6ff R11: 0000000000000000 R12: 0000000000000001 [ 877.125184][ C2] R13: 0000000000000000 R14: 000000000000a6ff R15: 0000000080004bc1 [ 877.125195][ C2] ? snd_rawmidi_write+0x1ea/0xc60 [ 877.125226][ C2] snd_rawmidi_write+0x1f4/0xc60 [ 877.125243][ C2] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 877.125257][ C2] ? __pfx_default_wake_function+0x10/0x10 [ 877.125271][ C2] ? bpf_lsm_file_permission+0x9/0x10 [ 877.125283][ C2] ? security_file_permission+0x76/0x210 [ 877.125300][ C2] ? rw_verify_area+0xce/0x6d0 [ 877.125317][ C2] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 877.125330][ C2] vfs_writev+0x5ed/0xdd0 [ 877.125349][ C2] ? __pfx_vfs_writev+0x10/0x10 [ 877.125375][ C2] ? __fget_files+0x21f/0x3d0 [ 877.125390][ C2] ? do_writev+0x28a/0x340 [ 877.125405][ C2] do_writev+0x28a/0x340 [ 877.125422][ C2] ? __pfx_do_writev+0x10/0x10 [ 877.125442][ C2] __do_fast_syscall_32+0xe7/0x970 [ 877.125456][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 877.125471][ C2] do_fast_syscall_32+0x32/0x70 [ 877.125486][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 877.125500][ C2] RIP: 0023:0xf703efec [ 877.125517][ C2] Code: Unable to access opcode bytes at 0xf703efc2. [ 877.125522][ C2] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 877.125533][ C2] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840 [ 877.125539][ C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.125546][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 877.125539][ C0] FAULT_INJECTION: forcing a failure. [ 877.125539][ C0] name failslab, interval 1, probability 100, space 0, times 77 [ 877.125553][ C2] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 877.125559][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.125573][ C2] [ 877.125582][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.125599][ T5819] Tainted: [L]=SOFTLOCKUP [ 877.125604][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.125611][ T5819] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 877.125629][ T5819] Call Trace: [ 877.125633][ T5819] [ 877.125638][ T5819] dump_stack_lvl+0x100/0x190 [ 877.125651][ T5819] should_fail_ex.cold+0x5/0xa [ 877.125663][ T5819] should_failslab+0xc2/0x120 [ 877.125678][ T5819] __kmalloc_noprof+0xfc/0x820 [ 877.125691][ T5819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 877.125704][ T5819] ? batadv_tt_prepare_tvlv_local_data+0x1cb/0x7a0 [ 877.125725][ T5819] batadv_tt_prepare_tvlv_local_data+0x1cb/0x7a0 [ 877.125746][ T5819] batadv_tt_tvlv_container_update+0x60f/0x8b0 [ 877.125766][ T5819] ? __pfx_batadv_tt_tvlv_container_update+0x10/0x10 [ 877.125786][ T5819] ? find_held_lock+0x2b/0x80 [ 877.125799][ T5819] ? batadv_tt_local_commit_changes_nolock+0x829/0xeb0 [ 877.125811][ T5819] ? batadv_tt_local_commit_changes_nolock+0x829/0xeb0 [ 877.125823][ T5819] ? crc32c+0x1a5/0x360 [ 877.125839][ T5819] batadv_tt_local_commit_changes_nolock+0x8eb/0xeb0 [ 877.125852][ T5819] ? batadv_tt_local_commit_changes_nolock+0x4b8/0xeb0 [ 877.125868][ T5819] ? __pfx_batadv_tt_local_commit_changes_nolock+0x10/0x10 [ 877.125887][ T5819] ? do_raw_spin_lock+0x128/0x260 [ 877.125899][ T5819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 877.125912][ T5819] ? find_held_lock+0x2b/0x80 [ 877.125927][ T5819] batadv_tt_local_commit_changes+0x25/0x30 [ 877.125941][ T5819] batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.125955][ T5819] ? try_to_wake_up+0x158/0x1c90 [ 877.125969][ T5819] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 877.125983][ T5819] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.125996][ T5819] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.126015][ T5819] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 877.126031][ T5819] ? rcu_is_watching+0x12/0xc0 [ 877.126047][ T5819] process_one_work+0xa23/0x1940 [ 877.126068][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 877.126088][ T5819] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 877.126105][ T5819] worker_thread+0x5ef/0xe50 [ 877.126132][ T5819] ? kthread+0x13a/0x450 [ 877.126152][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 877.126173][ T5819] kthread+0x370/0x450 [ 877.126195][ T5819] ? __pfx_kthread+0x10/0x10 [ 877.126217][ T5819] ret_from_fork+0x72b/0xd50 [ 877.126238][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 877.126262][ T5819] ? __switch_to+0x800/0x10f0 [ 877.126288][ T5819] ? __pfx_kthread+0x10/0x10 [ 877.126311][ T5819] ret_from_fork_asm+0x1a/0x30 [ 877.126336][ T5819] [ 877.126348][ C3] CPU: 3 UID: 0 PID: 12863 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.126379][ C3] Tainted: [L]=SOFTLOCKUP [ 877.126399][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.126413][ C3] Workqueue: events nsim_fib_event_work [ 877.126434][ C3] Call Trace: [ 877.126442][ C3] [ 877.126450][ C3] dump_stack_lvl+0x100/0x190 [ 877.126454][ C1] FAULT_INJECTION: forcing a failure. [ 877.126454][ C1] name failslab, interval 1, probability 100, space 0, times 75 [ 877.126474][ C3] should_fail_ex.cold+0x5/0xa [ 877.126497][ C3] should_failslab+0xc2/0x120 [ 877.126524][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.126551][ C3] ? __alloc_skb+0x140/0x710 [ 877.126581][ C3] __alloc_skb+0x140/0x710 [ 877.126605][ C3] ? __alloc_skb+0x5b7/0x710 [ 877.126629][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 877.126655][ C3] ? lock_acquire+0x1b9/0x370 [ 877.126690][ C3] __netdev_alloc_skb+0x7a/0x960 [ 877.126720][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.126749][ C3] ? __lock_acquire+0x49f/0x1a40 [ 877.126784][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.126812][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.126847][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.126884][ C3] __iterate_interfaces+0x2e6/0x650 [ 877.126908][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.126940][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.126968][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.126998][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.127022][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.127044][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 877.127079][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 877.127105][ C3] handle_softirqs+0x1ea/0x9b0 [ 877.127131][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 877.127155][ C3] ? _raw_spin_unlock+0x28/0x50 [ 877.127175][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 877.127202][ C3] __irq_exit_rcu+0x162/0x210 [ 877.127224][ C3] irq_exit_rcu+0x9/0x30 [ 877.127249][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 877.127273][ C3] [ 877.127279][ C3] [ 877.127287][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.127311][ C3] RIP: 0010:preempt_schedule_irq+0x4b/0x90 [ 877.127334][ C3] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 00 7a 1b f6 e8 4b 54 58 f6 fb bf 01 00 00 00 a0 91 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 ee 19 1b [ 877.127352][ C3] RSP: 0000:ffffc90006f3f8a8 EFLAGS: 00000202 [ 877.127368][ C3] RAX: 0000000000058ff1 RBX: ffffed10053954a8 RCX: 0000000000000040 [ 877.127381][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a87b4 RDI: 0000000000000001 [ 877.127394][ C3] RBP: ffff888029caa540 R08: 0000000000000001 R09: 0000000000000000 [ 877.127405][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 877.127417][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.127441][ C3] ? preempt_schedule_irq+0x45/0x90 [ 877.127464][ C3] irqentry_exit+0x205/0xa00 [ 877.127491][ C3] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 877.127512][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 877.127540][ C3] Code: 16 f9 5d 00 48 89 df 5b e9 9d 73 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 23 5a 12 48 8b 34 24 65 48 8b 15 a1 23 5a [ 877.127559][ C3] RSP: 0000:ffffc90006f3f9b0 EFLAGS: 00000293 [ 877.127574][ C3] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174e11c [ 877.127587][ C3] RDX: ffff888029caa540 RSI: ffffffff8174e126 RDI: ffff888029caa540 [ 877.127600][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 877.127612][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000200 [ 877.127624][ C3] R13: ffffffff8d4e9900 R14: 0000000000000001 R15: 0000000000000000 [ 877.127644][ C3] ? dump_stack_lvl+0x16c/0x190 [ 877.127663][ C3] ? dump_stack_lvl+0x176/0x190 [ 877.127686][ C3] dump_stack_lvl+0x17c/0x190 [ 877.127708][ C3] should_fail_ex.cold+0x5/0xa [ 877.127730][ C3] should_failslab+0xc2/0x120 [ 877.127756][ C3] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.127778][ C3] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.127802][ C3] nsim_fib_event_work+0xfdd/0x6310 [ 877.127825][ C3] ? __lock_acquire+0x49f/0x1a40 [ 877.127855][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.127878][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.127900][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.127928][ C3] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.127955][ C3] ? rcu_is_watching+0x12/0xc0 [ 877.127982][ C3] process_one_work+0xa23/0x1940 [ 877.128021][ C3] ? __pfx_process_one_work+0x10/0x10 [ 877.128058][ C3] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.128081][ C3] worker_thread+0x5ef/0xe50 [ 877.128115][ C3] ? __pfx_worker_thread+0x10/0x10 [ 877.128145][ C3] ? kthread+0x13a/0x450 [ 877.128168][ C3] ? __pfx_worker_thread+0x10/0x10 [ 877.128193][ C3] kthread+0x370/0x450 [ 877.128217][ C3] ? __pfx_kthread+0x10/0x10 [ 877.128250][ C3] ret_from_fork+0x72b/0xd50 [ 877.128274][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 877.128299][ C3] ? __switch_to+0x800/0x10f0 [ 877.128328][ C3] ? __pfx_kthread+0x10/0x10 [ 877.128355][ C3] ret_from_fork_asm+0x1a/0x30 [ 877.128394][ C3] [ 877.128406][ C1] CPU: 1 UID: 0 PID: 5819 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.128422][ C1] Tainted: [L]=SOFTLOCKUP [ 877.128426][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.128434][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 877.128451][ C1] Call Trace: [ 877.128455][ C1] [ 877.128460][ C1] dump_stack_lvl+0x100/0x190 [ 877.128473][ C1] should_fail_ex.cold+0x5/0xa [ 877.128486][ C1] should_failslab+0xc2/0x120 [ 877.128524][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.128539][ C1] ? __alloc_skb+0x140/0x710 [ 877.128556][ C1] __alloc_skb+0x140/0x710 [ 877.128570][ C1] ? __alloc_skb+0x5b7/0x710 [ 877.128584][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 877.128598][ C1] ? lock_acquire+0x1b9/0x370 [ 877.128618][ C1] __netdev_alloc_skb+0x7a/0x960 [ 877.128634][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.128651][ C1] ? __lock_acquire+0x49f/0x1a40 [ 877.128670][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.128686][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.128705][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.128726][ C1] __iterate_interfaces+0x2e6/0x650 [ 877.128740][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.128757][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.128773][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.128790][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.128815][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.128829][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 877.128847][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 877.128862][ C1] handle_softirqs+0x1ea/0x9b0 [ 877.128879][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 877.128891][ C1] ? irqtime_account_delta+0x9a/0x110 [ 877.128907][ C1] ? batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.128922][ C1] do_softirq+0xac/0xe0 [ 877.128933][ C1] [ 877.128937][ C1] [ 877.128941][ C1] __local_bh_enable_ip+0xf8/0x120 [ 877.128954][ C1] batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.128969][ C1] ? try_to_wake_up+0x158/0x1c90 [ 877.128993][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 877.129015][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.129036][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.129066][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 877.129091][ C1] ? rcu_is_watching+0x12/0xc0 [ 877.129116][ C1] process_one_work+0xa23/0x1940 [ 877.129149][ C1] ? __pfx_process_one_work+0x10/0x10 [ 877.129181][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 877.129209][ C1] worker_thread+0x5ef/0xe50 [ 877.129245][ C1] ? kthread+0x13a/0x450 [ 877.129268][ C1] ? __pfx_worker_thread+0x10/0x10 [ 877.129293][ C1] kthread+0x370/0x450 [ 877.129317][ C1] ? __pfx_kthread+0x10/0x10 [ 877.129342][ C1] ret_from_fork+0x72b/0xd50 [ 877.129371][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 877.129396][ C1] ? __switch_to+0x800/0x10f0 [ 877.129424][ C1] ? __pfx_kthread+0x10/0x10 [ 877.129450][ C1] ret_from_fork_asm+0x1a/0x30 [ 877.129488][ C1] [ 877.129504][ C0] CPU: 0 UID: 0 PID: 8382 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.129535][ C0] Tainted: [L]=SOFTLOCKUP [ 877.129543][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.129548][ C1] FAULT_INJECTION: forcing a failure. [ 877.129548][ C1] name failslab, interval 1, probability 100, space 0, times 73 [ 877.129557][ C0] Workqueue: krds_cp_wq#5/0 rds_connect_worker [ 877.129581][ C0] Call Trace: [ 877.129589][ C0] [ 877.129597][ C0] dump_stack_lvl+0x100/0x190 [ 877.129621][ C0] should_fail_ex.cold+0x5/0xa [ 877.129644][ C0] should_failslab+0xc2/0x120 [ 877.129670][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.129696][ C0] ? __alloc_skb+0x140/0x710 [ 877.129726][ C0] __alloc_skb+0x140/0x710 [ 877.129749][ C0] ? __alloc_skb+0x5b7/0x710 [ 877.129777][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 877.129804][ C0] ? lock_acquire+0x1b9/0x370 [ 877.129838][ C0] __netdev_alloc_skb+0x7a/0x960 [ 877.129866][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.129893][ C0] ? __lock_acquire+0x49f/0x1a40 [ 877.129925][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.129951][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.129984][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.130017][ C0] __iterate_interfaces+0x2e6/0x650 [ 877.130039][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.130064][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.130090][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.130117][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.130138][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.130159][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 877.130191][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 877.130218][ C0] handle_softirqs+0x1ea/0x9b0 [ 877.130244][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 877.130266][ C0] ? _raw_spin_unlock+0x28/0x50 [ 877.130285][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 877.130312][ C0] __irq_exit_rcu+0x162/0x210 [ 877.130333][ C0] irq_exit_rcu+0x9/0x30 [ 877.130354][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 877.130377][ C0] [ 877.130385][ C0] [ 877.130393][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.130416][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 877.130442][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 93 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 96 8d 21 00 48 85 ed 0f 85 27 01 00 00 e8 92 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 877.130461][ C0] RSP: 0000:ffffc90003947798 EFLAGS: 00000293 [ 877.130477][ C0] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e81a8a [ 877.130490][ C0] RDX: ffff8880290da540 RSI: ffffffff81e81a94 RDI: ffff8880290da540 [ 877.130503][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 877.130515][ C0] R10: 0000000000000000 R11: 000000000000756b R12: 1ffff92000728ef5 [ 877.130526][ C0] R13: 0000000000000200 R14: ffff888022492540 R15: ffffc90003947860 [ 877.130545][ C0] ? vprintk_emit+0x66a/0x6b0 [ 877.130567][ C0] ? vprintk_emit+0x674/0x6b0 [ 877.130593][ C0] ? vprintk_emit+0x674/0x6b0 [ 877.130616][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 877.130647][ C0] _printk+0xcf/0x110 [ 877.130667][ C0] ? __pfx__printk+0x10/0x10 [ 877.130693][ C0] ? __pfx____ratelimit+0x10/0x10 [ 877.130721][ C0] should_fail_ex+0x4e4/0x640 [ 877.130759][ C0] should_failslab+0xc2/0x120 [ 877.130786][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.130810][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.130834][ C0] ? sock_alloc_inode+0x26/0x2c0 [ 877.130865][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.130896][ C0] sock_alloc_inode+0x26/0x2c0 [ 877.130923][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.130950][ C0] alloc_inode+0x68/0x250 [ 877.130976][ C0] sock_alloc+0x44/0x280 [ 877.130983][T12863] FAULT_INJECTION: forcing a failure. [ 877.130983][T12863] name failslab, interval 1, probability 100, space 0, times 72 [ 877.131002][ C0] ? security_socket_create+0x7f/0x250 [ 877.131028][ C0] __sock_create+0xc2/0x860 [ 877.131053][ C0] rds_tcp_conn_path_connect+0x304/0xaa0 [ 877.131083][ C0] ? __lock_acquire+0x49f/0x1a40 [ 877.131133][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 877.131160][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.131201][ C0] rds_connect_worker+0x1b4/0x2d0 [ 877.131223][ C0] process_one_work+0xa23/0x1940 [ 877.131262][ C0] ? __pfx_process_one_work+0x10/0x10 [ 877.131298][ C0] ? __pfx_rds_connect_worker+0x10/0x10 [ 877.131322][ C0] worker_thread+0x5ef/0xe50 [ 877.131356][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.131385][ C0] ? kthread+0x13a/0x450 [ 877.131408][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.131434][ C0] kthread+0x370/0x450 [ 877.131458][ C0] ? __pfx_kthread+0x10/0x10 [ 877.131485][ C0] ret_from_fork+0x72b/0xd50 [ 877.131510][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 877.131536][ C0] ? __switch_to+0x800/0x10f0 [ 877.131565][ C0] ? __pfx_kthread+0x10/0x10 [ 877.131592][ C0] ret_from_fork_asm+0x1a/0x30 [ 877.131632][ C0] [ 877.131645][ C1] CPU: 1 UID: 0 PID: 5819 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.131673][ C1] Tainted: [L]=SOFTLOCKUP [ 877.131680][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.131691][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 877.131716][ C1] Call Trace: [ 877.131723][ C1] [ 877.131723][ C0] FAULT_INJECTION: forcing a failure. [ 877.131723][ C0] name failslab, interval 1, probability 100, space 0, times 71 [ 877.131731][ C1] dump_stack_lvl+0x100/0x190 [ 877.131753][ C1] should_fail_ex.cold+0x5/0xa [ 877.131775][ C1] should_failslab+0xc2/0x120 [ 877.131801][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.131826][ C1] ? __alloc_skb+0x140/0x710 [ 877.131855][ C1] __alloc_skb+0x140/0x710 [ 877.131876][ C1] ? __alloc_skb+0x5b7/0x710 [ 877.131899][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 877.131924][ C1] ? lock_acquire+0x1b9/0x370 [ 877.131954][ C1] __netdev_alloc_skb+0x7a/0x960 [ 877.131981][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.132008][ C1] ? __lock_acquire+0x49f/0x1a40 [ 877.132039][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.132066][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.132098][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.132133][ C1] __iterate_interfaces+0x2e6/0x650 [ 877.132156][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.132185][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.132211][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.132239][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.132261][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.132281][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 877.132314][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 877.132339][ C1] handle_softirqs+0x1ea/0x9b0 [ 877.132369][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 877.132391][ C1] ? irqtime_account_delta+0x9a/0x110 [ 877.132416][ C1] ? batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.132441][ C1] do_softirq+0xac/0xe0 [ 877.132461][ C1] [ 877.132467][ C1] [ 877.132474][ C1] __local_bh_enable_ip+0xf8/0x120 [ 877.132516][ C1] batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.132541][ C1] ? try_to_wake_up+0x158/0x1c90 [ 877.132566][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 877.132591][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.132613][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.132645][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 877.132672][ C1] ? rcu_is_watching+0x12/0xc0 [ 877.132698][ C1] process_one_work+0xa23/0x1940 [ 877.132735][ C1] ? __pfx_process_one_work+0x10/0x10 [ 877.132768][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 877.132796][ C1] worker_thread+0x5ef/0xe50 [ 877.132832][ C1] ? kthread+0x13a/0x450 [ 877.132855][ C1] ? __pfx_worker_thread+0x10/0x10 [ 877.132878][ C1] kthread+0x370/0x450 [ 877.132902][ C1] ? __pfx_kthread+0x10/0x10 [ 877.132928][ C1] ret_from_fork+0x72b/0xd50 [ 877.132952][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 877.132976][ C1] ? __switch_to+0x800/0x10f0 [ 877.133004][ C1] ? __pfx_kthread+0x10/0x10 [ 877.133030][ C1] ret_from_fork_asm+0x1a/0x30 [ 877.133067][ C1] [ 877.133082][ C0] CPU: 0 UID: 0 PID: 8382 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.133088][ C1] FAULT_INJECTION: forcing a failure. [ 877.133088][ C1] name failslab, interval 1, probability 100, space 0, times 70 [ 877.133112][ C0] Tainted: [L]=SOFTLOCKUP [ 877.133119][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.133133][ C0] Workqueue: krds_cp_wq#5/0 rds_connect_worker [ 877.133154][ C0] Call Trace: [ 877.133161][ C0] [ 877.133169][ C0] dump_stack_lvl+0x100/0x190 [ 877.133192][ C0] should_fail_ex.cold+0x5/0xa [ 877.133215][ C0] should_failslab+0xc2/0x120 [ 877.133241][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.133267][ C0] ? __alloc_skb+0x140/0x710 [ 877.133297][ C0] __alloc_skb+0x140/0x710 [ 877.133320][ C0] ? __alloc_skb+0x5b7/0x710 [ 877.133344][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 877.133370][ C0] ? lock_acquire+0x1b9/0x370 [ 877.133402][ C0] __netdev_alloc_skb+0x7a/0x960 [ 877.133430][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.133459][ C0] ? __lock_acquire+0x49f/0x1a40 [ 877.133490][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.133503][ T7520] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 877.133515][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.133536][ T7520] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 877.133542][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.133555][ T7520] CPU: 3 UID: 0 PID: 7520 Comm: kworker/3:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.133571][ C0] __iterate_interfaces+0x2e6/0x650 [ 877.133580][ T7520] Tainted: [L]=SOFTLOCKUP [ 877.133587][ T7520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.133594][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.133600][ T7520] Workqueue: events vidtv_mux_tick [ 877.133622][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.133627][ T7520] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 877.133652][ T7520] Code: fd ab f9 31 ff 89 de e8 35 f7 ab f9 84 db 0f 85 37 0d 00 00 e8 18 fd ab f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 877.133648][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.133669][ T7520] RSP: 0000:ffffc90003287830 EFLAGS: 00010246 [ 877.133675][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.133684][ T7520] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 877.133696][ T7520] RDX: 0000000000000000 RSI: ffffffff885daf48 RDI: ffff88801bc428c0 [ 877.133696][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.133709][ T7520] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 877.133720][ T7520] R10: ffffffff8eded4b3 R11: 0000000000000000 R12: 0000000000000000 [ 877.133717][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 877.133731][ T7520] R13: dffffc0000000000 R14: ffff88806872f500 R15: 0000000000000000 [ 877.133743][ T7520] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 877.133743][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 877.133772][ C0] handle_softirqs+0x1ea/0x9b0 [ 877.133776][ T7520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.133791][ T7520] CR2: 00000000f720e853 CR3: 0000000071303000 CR4: 0000000000352ef0 [ 877.133795][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 877.133804][ T7520] Call Trace: [ 877.133811][ T7520] [ 877.133817][ C0] ? _raw_spin_unlock+0x28/0x50 [ 877.133823][ T7520] ? vidtv_memset+0x50/0x90 [ 877.133836][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 877.133843][ T7520] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 877.133861][ C0] __irq_exit_rcu+0x162/0x210 [ 877.133864][ T7520] ? __schedule+0x31d8/0x6730 [ 877.133881][ C0] irq_exit_rcu+0x9/0x30 [ 877.133882][ T7520] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 877.133900][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 877.133908][ T7520] ? trace_sched_exit_tp+0x120/0x160 [ 877.133921][ C0] [ 877.133930][ C0] [ 877.133931][ T7520] ? __schedule+0x126e/0x6730 [ 877.133937][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.133951][ T7520] vidtv_mux_tick+0x4e4/0x1460 [ 877.133959][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 877.133984][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 93 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 96 8d 21 00 48 85 ed 0f 85 27 01 00 00 e8 92 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 877.133983][ T7520] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 877.134001][ C0] RSP: 0000:ffffc90003947798 EFLAGS: 00000293 [ 877.134010][ T7520] ? irqentry_exit+0x24d/0xa00 [ 877.134016][ C0] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e81a8a [ 877.134030][ C0] RDX: ffff8880290da540 RSI: ffffffff81e81a94 RDI: ffff8880290da540 [ 877.134042][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 877.134038][ T7520] ? lock_acquire+0x5e/0x370 [ 877.134054][ C0] R10: 0000000000000000 R11: 000000000000756b R12: 1ffff92000728ef5 [ 877.134067][ C0] R13: 0000000000000200 R14: ffff888022492540 R15: ffffc90003947860 [ 877.134066][ T7520] ? rcu_is_watching+0x12/0xc0 [ 877.134082][ C0] ? vprintk_emit+0x66a/0x6b0 [ 877.134090][ T7520] process_one_work+0xa23/0x1940 [ 877.134105][ C0] ? vprintk_emit+0x674/0x6b0 [ 877.134120][ T7520] ? __pfx_process_one_work+0x10/0x10 [ 877.134128][ C0] ? vprintk_emit+0x674/0x6b0 [ 877.134149][ T7520] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 877.134150][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 877.134176][ C0] _printk+0xcf/0x110 [ 877.134176][ T7520] worker_thread+0x5ef/0xe50 [ 877.134195][ C0] ? __pfx__printk+0x10/0x10 [ 877.134205][ T7520] ? kthread+0x13a/0x450 [ 877.134215][ C0] ? __pfx____ratelimit+0x10/0x10 [ 877.134228][ T7520] ? __pfx_worker_thread+0x10/0x10 [ 877.134238][ C0] should_fail_ex+0x4e4/0x640 [ 877.134259][ T7520] kthread+0x370/0x450 [ 877.134266][ C0] should_failslab+0xc2/0x120 [ 877.134282][ T7520] ? __pfx_kthread+0x10/0x10 [ 877.134289][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.134306][ T7520] ret_from_fork+0x72b/0xd50 [ 877.134312][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.134328][ T7520] ? __pfx_ret_from_fork+0x10/0x10 [ 877.134333][ C0] ? sock_alloc_inode+0x26/0x2c0 [ 877.134350][ T7520] ? __switch_to+0x800/0x10f0 [ 877.134362][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.134377][ T7520] ? __pfx_kthread+0x10/0x10 [ 877.134391][ C0] sock_alloc_inode+0x26/0x2c0 [ 877.134401][ T7520] ret_from_fork_asm+0x1a/0x30 [ 877.134429][ T7520] [ 877.134419][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.134436][ T7520] Modules linked in: [ 877.134447][ C0] alloc_inode+0x68/0x250 [ 877.134472][ T7520] ---[ end trace 0000000000000000 ]--- [ 877.134472][ C0] sock_alloc+0x44/0x280 [ 877.134496][ C0] ? security_socket_create+0x7f/0x250 [ 877.134518][ C0] __sock_create+0xc2/0x860 [ 877.134538][ C0] rds_tcp_conn_path_connect+0x304/0xaa0 [ 877.134565][ C0] ? __lock_acquire+0x49f/0x1a40 [ 877.134593][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 877.134619][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.134651][ C0] rds_connect_worker+0x1b4/0x2d0 [ 877.134670][ C0] process_one_work+0xa23/0x1940 [ 877.134701][ C0] ? __pfx_process_one_work+0x10/0x10 [ 877.134731][ C0] ? __pfx_rds_connect_worker+0x10/0x10 [ 877.134757][ C0] worker_thread+0x5ef/0xe50 [ 877.134786][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.134812][ C0] ? kthread+0x13a/0x450 [ 877.134835][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.134860][ C0] kthread+0x370/0x450 [ 877.134883][ C0] ? __pfx_kthread+0x10/0x10 [ 877.134907][ C0] ret_from_fork+0x72b/0xd50 [ 877.134930][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 877.134951][ C0] ? __switch_to+0x800/0x10f0 [ 877.134979][ C0] ? __pfx_kthread+0x10/0x10 [ 877.135004][ C0] ret_from_fork_asm+0x1a/0x30 [ 877.135034][ C0] [ 877.135049][ C1] CPU: 1 UID: 0 PID: 5819 Comm: kworker/u32:3 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.135057][ C0] FAULT_INJECTION: forcing a failure. [ 877.135057][ C0] name failslab, interval 1, probability 100, space 0, times 69 [ 877.135077][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.135084][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.135094][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 877.135111][ C1] Call Trace: [ 877.135115][ C1] [ 877.135119][ C1] dump_stack_lvl+0x100/0x190 [ 877.135131][ C1] should_fail_ex.cold+0x5/0xa [ 877.135142][ C1] should_failslab+0xc2/0x120 [ 877.135157][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.135171][ C1] ? __alloc_skb+0x140/0x710 [ 877.135186][ C1] __alloc_skb+0x140/0x710 [ 877.135198][ C1] ? __alloc_skb+0x5b7/0x710 [ 877.135217][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 877.135238][ C1] ? lock_acquire+0x1b9/0x370 [ 877.135265][ C1] __netdev_alloc_skb+0x7a/0x960 [ 877.135289][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.135312][ C1] ? __lock_acquire+0x49f/0x1a40 [ 877.135341][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.135369][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.135393][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.135421][ C1] __iterate_interfaces+0x2e6/0x650 [ 877.135444][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.135471][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.135493][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.135516][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.135536][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.135554][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 877.135578][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 877.135599][ C1] handle_softirqs+0x1ea/0x9b0 [ 877.135619][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 877.135636][ C1] ? irqtime_account_delta+0x9a/0x110 [ 877.135659][ C1] ? batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.135679][ C1] do_softirq+0xac/0xe0 [ 877.135698][ C1] [ 877.135702][ C1] [ 877.135708][ C1] __local_bh_enable_ip+0xf8/0x120 [ 877.135729][ C1] batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 877.135750][ C1] ? try_to_wake_up+0x158/0x1c90 [ 877.135771][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 877.135792][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.135809][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.135837][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 877.135862][ C1] ? rcu_is_watching+0x12/0xc0 [ 877.135886][ C1] process_one_work+0xa23/0x1940 [ 877.135877][ T7520] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 877.135915][ C1] ? __pfx_process_one_work+0x10/0x10 [ 877.135943][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 877.135968][ C1] worker_thread+0x5ef/0xe50 [ 877.135996][ C1] ? kthread+0x13a/0x450 [ 877.135988][ T7520] Code: fd ab f9 31 ff 89 de e8 35 f7 ab f9 84 db 0f 85 37 0d 00 00 e8 18 fd ab f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 877.136017][ C1] ? __pfx_worker_thread+0x10/0x10 [ 877.136041][ C1] kthread+0x370/0x450 [ 877.136063][ C1] ? __pfx_kthread+0x10/0x10 [ 877.136087][ C1] ret_from_fork+0x72b/0xd50 [ 877.136109][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 877.136131][ C1] ? __switch_to+0x800/0x10f0 [ 877.136157][ C1] ? __pfx_kthread+0x10/0x10 [ 877.136180][ C1] ret_from_fork_asm+0x1a/0x30 [ 877.136208][ C1] [ 877.136221][ C0] CPU: 0 UID: 0 PID: 8382 Comm: kworker/u32:5 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.136250][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.136257][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.136270][ C0] Workqueue: krds_cp_wq#5/0 rds_connect_worker [ 877.136289][ C0] Call Trace: [ 877.136296][ C0] [ 877.136296][ T7520] RSP: 0000:ffffc90003287830 EFLAGS: 00010246 [ 877.136302][ C0] dump_stack_lvl+0x100/0x190 [ 877.136321][ C0] should_fail_ex.cold+0x5/0xa [ 877.136340][ C0] should_failslab+0xc2/0x120 [ 877.136363][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 877.136387][ C0] ? __alloc_skb+0x5b7/0x710 [ 877.136399][ T7520] [ 877.136410][ C0] ? __alloc_skb+0x140/0x710 [ 877.136435][ C0] __alloc_skb+0x140/0x710 [ 877.136457][ C0] ? __alloc_skb+0x5b7/0x710 [ 877.136480][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 877.136535][ C0] ? rcu_is_watching+0x12/0xc0 [ 877.136542][ T7520] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 877.136558][ C0] __netdev_alloc_skb+0x7a/0x960 [ 877.136584][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 877.136609][ C0] ? __lock_acquire+0x49f/0x1a40 [ 877.136639][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 877.136657][ T5140] socket: no more sockets [ 877.136663][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 877.136688][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 877.136693][ T5140] FAULT_INJECTION: forcing a failure. [ 877.136693][ T5140] name failslab, interval 1, probability 100, space 0, times 67 [ 877.136708][ C0] ? do_raw_spin_lock+0x128/0x260 [ 877.136730][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 877.136761][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.136784][ C0] __iterate_interfaces+0x2e6/0x650 [ 877.136806][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.136824][ T7520] RDX: 0000000000000000 RSI: ffffffff885daf48 RDI: ffff88801bc428c0 [ 877.136833][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 877.136860][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 877.136869][ T7520] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 877.136886][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 877.136907][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 877.136927][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 877.136953][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 877.136977][ C0] handle_softirqs+0x1ea/0x9b0 [ 877.136998][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 877.137019][ C0] ? _raw_spin_unlock+0x28/0x50 [ 877.137038][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 877.137063][ C0] __irq_exit_rcu+0x162/0x210 [ 877.137083][ C0] irq_exit_rcu+0x9/0x30 [ 877.137102][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 877.137123][ C0] [ 877.137129][ C0] [ 877.137136][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.137130][ T7520] R10: ffffffff8eded4b3 R11: 0000000000000000 R12: 0000000000000000 [ 877.137157][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 877.137180][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 93 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 96 8d 21 00 48 85 ed 0f 85 27 01 00 00 e8 92 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 877.137198][ C0] RSP: 0000:ffffc90003947798 EFLAGS: 00000293 [ 877.137209][ T7520] R13: dffffc0000000000 R14: ffff88806872f500 R15: 0000000000000000 [ 877.137214][ C0] RAX: 0000000000000000 RBX: 0000000000000061 RCX: ffffffff81e81a8a [ 877.137226][ C0] RDX: ffff8880290da540 RSI: ffffffff81e81a94 RDI: ffff8880290da540 [ 877.137238][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 877.137250][ C0] R10: 0000000000000000 R11: 000000000000756b R12: 1ffff92000728ef5 [ 877.137261][ C0] R13: 0000000000000200 R14: ffff888022492540 R15: ffffc90003947860 [ 877.137277][ C0] ? vprintk_emit+0x66a/0x6b0 [ 877.137299][ C0] ? vprintk_emit+0x674/0x6b0 [ 877.137322][ C0] ? vprintk_emit+0x674/0x6b0 [ 877.137345][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 877.137370][ C0] _printk+0xcf/0x110 [ 877.137387][ C0] ? __pfx__printk+0x10/0x10 [ 877.137407][ C0] ? __pfx____ratelimit+0x10/0x10 [ 877.137430][ C0] should_fail_ex+0x4e4/0x640 [ 877.137459][ C0] should_failslab+0xc2/0x120 [ 877.137483][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.137506][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.137509][ T7520] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 877.137527][ C0] ? sock_alloc_inode+0x26/0x2c0 [ 877.137556][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.137584][ C0] sock_alloc_inode+0x26/0x2c0 [ 877.137612][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.137639][ C0] alloc_inode+0x68/0x250 [ 877.137663][ C0] sock_alloc+0x44/0x280 [ 877.137687][ C0] ? security_socket_create+0x7f/0x250 [ 877.137709][ C0] __sock_create+0xc2/0x860 [ 877.137730][ C0] rds_tcp_conn_path_connect+0x304/0xaa0 [ 877.137760][ C0] ? __lock_acquire+0x49f/0x1a40 [ 877.137789][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 877.137814][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.137847][ C0] rds_connect_worker+0x1b4/0x2d0 [ 877.137867][ C0] process_one_work+0xa23/0x1940 [ 877.137898][ C0] ? __pfx_process_one_work+0x10/0x10 [ 877.137927][ C0] ? __pfx_rds_connect_worker+0x10/0x10 [ 877.137948][ C0] worker_thread+0x5ef/0xe50 [ 877.137977][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.138003][ C0] ? kthread+0x13a/0x450 [ 877.138026][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.138050][ C0] kthread+0x370/0x450 [ 877.138073][ C0] ? __pfx_kthread+0x10/0x10 [ 877.138097][ C0] ret_from_fork+0x72b/0xd50 [ 877.138120][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 877.138143][ C0] ? __switch_to+0x800/0x10f0 [ 877.138171][ C0] ? __pfx_kthread+0x10/0x10 [ 877.138195][ C0] ret_from_fork_asm+0x1a/0x30 [ 877.138225][ C0] [ 877.138237][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.138263][ T5140] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.138269][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.138279][ T5140] Call Trace: [ 877.138287][ T5140] [ 877.138293][ T5140] dump_stack_lvl+0x100/0x190 [ 877.138314][ T5140] should_fail_ex.cold+0x5/0xa [ 877.138329][ T5140] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 877.138351][ T5140] should_failslab+0xc2/0x120 [ 877.138378][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.138400][ T5140] ? _printk+0xcf/0x110 [ 877.138414][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.138440][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.138467][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.138491][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.138515][ T5140] alloc_inode+0x68/0x250 [ 877.138527][ T7520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 877.138537][ T5140] sock_alloc+0x44/0x280 [ 877.138558][ T5140] ? security_socket_create+0x7f/0x250 [ 877.138578][ T5140] __sock_create+0xc2/0x860 [ 877.138595][ T5140] __sys_socket+0x14d/0x260 [ 877.138612][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.138631][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.138649][ T5140] do_syscall_64+0x115/0x840 [ 877.138670][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.138687][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.138705][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.138719][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.138736][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.138753][ T5140] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8979dd4707 [ 877.138765][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.138775][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.138788][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.138797][ T5140] R13: 00007ffe4a8e12d0 R14: 000000000000003a R15: 00007ffe4a8e12d0 [ 877.138814][ T5140] [ 877.138821][ T5140] socket: no more sockets [ 877.138871][ T5140] FAULT_INJECTION: forcing a failure. [ 877.138871][ T5140] name failslab, interval 1, probability 100, space 0, times 65 [ 877.138901][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.138924][ T5140] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.138931][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.138940][ T5140] Call Trace: [ 877.138945][ T5140] [ 877.138952][ T5140] dump_stack_lvl+0x100/0x190 [ 877.138969][ T5140] should_fail_ex.cold+0x5/0xa [ 877.138986][ T5140] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 877.139009][ T5140] should_failslab+0xc2/0x120 [ 877.139031][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.139052][ T5140] ? clockevents_program_event+0x1bf/0x820 [ 877.139070][ T5140] ? lock_release+0x24d/0x310 [ 877.139093][ T5140] ? _printk+0xcf/0x110 [ 877.139109][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.139134][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.139161][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.139187][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.139211][ T5140] alloc_inode+0x68/0x250 [ 877.139232][ T5140] sock_alloc+0x44/0x280 [ 877.139268][ T5140] ? security_socket_create+0x7f/0x250 [ 877.139287][ T5140] __sock_create+0xc2/0x860 [ 877.139303][ T5140] ? sched_clock+0x38/0x60 [ 877.139319][ T5140] __sys_socket+0x14d/0x260 [ 877.139335][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.139352][ T5140] ? lock_release+0x24d/0x310 [ 877.139383][ T5140] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.139403][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.139420][ T5140] do_syscall_64+0x115/0x840 [ 877.139437][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.139452][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.139467][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.139478][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.139493][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.139509][ T5140] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8979dd4707 [ 877.139521][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.139530][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.139541][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.139552][ T5140] R13: 00007ffe4a8e12d0 R14: 0000000000000054 R15: 00007ffe4a8e12d0 [ 877.139569][ T5140] [ 877.139613][ T5140] socket: no more sockets [ 877.139632][ T5140] FAULT_INJECTION: forcing a failure. [ 877.139632][ T5140] name failslab, interval 1, probability 100, space 0, times 64 [ 877.139648][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.139663][ T5140] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.139668][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.139678][ T5140] Call Trace: [ 877.139683][ T5140] [ 877.139688][ T5140] dump_stack_lvl+0x100/0x190 [ 877.139706][ T5140] should_fail_ex.cold+0x5/0xa [ 877.139722][ T5140] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 877.139743][ T5140] should_failslab+0xc2/0x120 [ 877.139766][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.139786][ T5140] ? _printk+0xcf/0x110 [ 877.139800][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.139825][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.139850][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.139868][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.139884][ T5140] alloc_inode+0x68/0x250 [ 877.139898][ T5140] sock_alloc+0x44/0x280 [ 877.139912][ T5140] ? security_socket_create+0x7f/0x250 [ 877.139924][ T5140] __sock_create+0xc2/0x860 [ 877.139935][ T5140] ? sched_clock+0x38/0x60 [ 877.139946][ T5140] __sys_socket+0x14d/0x260 [ 877.139957][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.139968][ T5140] ? lock_release+0x24d/0x310 [ 877.139984][ T5140] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.139997][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.140008][ T5140] do_syscall_64+0x115/0x840 [ 877.140021][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.140032][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.140043][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.140052][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.140062][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.140072][ T5140] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8979dd4707 [ 877.140079][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.140085][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.140092][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.140098][ T5140] R13: 00007ffe4a8e12d0 R14: 000000000000003a R15: 00007ffe4a8e12d0 [ 877.140107][ T5140] [ 877.140117][ T5140] FAULT_INJECTION: forcing a failure. [ 877.140117][ T5140] name failslab, interval 1, probability 100, space 0, times 63 [ 877.140131][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.140145][ T5140] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.140149][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.140156][ T5140] Call Trace: [ 877.140159][ T5140] [ 877.140163][ T5140] dump_stack_lvl+0x100/0x190 [ 877.140174][ T5140] should_fail_ex.cold+0x5/0xa [ 877.140183][ T5140] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 877.140196][ T5140] should_failslab+0xc2/0x120 [ 877.140211][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.140224][ T5140] ? trace_irq_enable.constprop.0+0x122/0x160 [ 877.140242][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.140258][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.140275][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.140291][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.140307][ T5140] alloc_inode+0x68/0x250 [ 877.140320][ T5140] sock_alloc+0x44/0x280 [ 877.140334][ T5140] ? security_socket_create+0x7f/0x250 [ 877.140345][ T5140] __sock_create+0xc2/0x860 [ 877.140355][ T5140] ? sched_clock+0x38/0x60 [ 877.140371][ T5140] __sys_socket+0x14d/0x260 [ 877.140382][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.140393][ T5140] ? lock_release+0x24d/0x310 [ 877.140408][ T5140] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.140421][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.140433][ T5140] do_syscall_64+0x115/0x840 [ 877.140445][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.140456][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.140467][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.140475][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.140485][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.140519][ T5140] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8979dd4707 [ 877.140529][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.140539][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.140550][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.140560][ T5140] R13: 00007ffe4a8e12d0 R14: 0000000000000054 R15: 00007ffe4a8e12d0 [ 877.140577][ T5140] [ 877.140590][ T5140] FAULT_INJECTION: forcing a failure. [ 877.140590][ T5140] name failslab, interval 1, probability 100, space 0, times 62 [ 877.140610][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: klogd Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.140634][ T5140] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.140640][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.140650][ T5140] Call Trace: [ 877.140656][ T5140] [ 877.140663][ T5140] dump_stack_lvl+0x100/0x190 [ 877.140681][ T5140] should_fail_ex.cold+0x5/0xa [ 877.140698][ T5140] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 877.140719][ T5140] should_failslab+0xc2/0x120 [ 877.140741][ T5140] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.140758][ T5140] ? trace_irq_enable.constprop.0+0x122/0x160 [ 877.140776][ T5140] ? sock_alloc_inode+0x26/0x2c0 [ 877.140794][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.140818][ T5140] sock_alloc_inode+0x26/0x2c0 [ 877.140844][ T5140] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.140870][ T5140] alloc_inode+0x68/0x250 [ 877.140890][ T5140] sock_alloc+0x44/0x280 [ 877.140911][ T5140] ? security_socket_create+0x7f/0x250 [ 877.140929][ T5140] __sock_create+0xc2/0x860 [ 877.140944][ T5140] ? sched_clock+0x38/0x60 [ 877.140957][ T5140] __sys_socket+0x14d/0x260 [ 877.140968][ T5140] ? __pfx___sys_socket+0x10/0x10 [ 877.140980][ T5140] ? lock_release+0x24d/0x310 [ 877.140995][ T5140] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.141014][ T5140] __x64_sys_socket+0x72/0xb0 [ 877.141026][ T5140] do_syscall_64+0x115/0x840 [ 877.141038][ T5140] ? clear_bhb_loop+0x40/0x90 [ 877.141050][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.141061][ T5140] RIP: 0033:0x7f8979dd4707 [ 877.141069][ T5140] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 877.141080][ T5140] RSP: 002b:00007ffe4a8e11a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 877.141090][ T5140] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8979dd4707 [ 877.141096][ T5140] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 877.141102][ T5140] RBP: 00007f8979e60560 R08: 0000000000000073 R09: 0000000000000001 [ 877.141109][ T5140] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 877.141115][ T5140] R13: 00007ffe4a8e12d0 R14: 0000000000000078 R15: 00007ffe4a8e12d0 [ 877.141125][ T5140] [ 877.141134][ T5140] FAULT_INJECTION: forcing a failure. [ 877.141134][ T5140] name failslab, interval 1, probability 100, space 0, times 61 [ 877.141136][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: kworker/u32:5 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.141165][ T8382] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.141172][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.141185][ T8382] Workqueue: krds_cp_wq#5/0 rds_connect_worker [ 877.141204][ T8382] Call Trace: [ 877.141211][ T8382] [ 877.141219][ T8382] dump_stack_lvl+0x100/0x190 [ 877.141239][ T8382] should_fail_ex.cold+0x5/0xa [ 877.141256][ T8382] should_failslab+0xc2/0x120 [ 877.141281][ T8382] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.141303][ T8382] ? do_raw_spin_unlock+0x145/0x1e0 [ 877.141320][ T8382] ? sock_alloc_inode+0x26/0x2c0 [ 877.141344][ T8382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.141367][ T8382] sock_alloc_inode+0x26/0x2c0 [ 877.141394][ T8382] ? __pfx_sock_alloc_inode+0x10/0x10 [ 877.141418][ T8382] alloc_inode+0x68/0x250 [ 877.141440][ T8382] sock_alloc+0x44/0x280 [ 877.141461][ T8382] ? security_socket_create+0x7f/0x250 [ 877.141478][ T8382] __sock_create+0xc2/0x860 [ 877.141497][ T8382] rds_tcp_conn_path_connect+0x304/0xaa0 [ 877.141523][ T8382] ? __lock_acquire+0x49f/0x1a40 [ 877.141548][ T8382] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 877.141572][ T8382] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.141597][ T8382] rds_connect_worker+0x1b4/0x2d0 [ 877.141616][ T8382] process_one_work+0xa23/0x1940 [ 877.141646][ T8382] ? __pfx_process_one_work+0x10/0x10 [ 877.141675][ T8382] ? __pfx_rds_connect_worker+0x10/0x10 [ 877.141692][ T8382] worker_thread+0x5ef/0xe50 [ 877.141719][ T8382] ? __pfx_worker_thread+0x10/0x10 [ 877.141743][ T8382] ? kthread+0x13a/0x450 [ 877.141769][ T8382] ? __pfx_worker_thread+0x10/0x10 [ 877.141806][ T8382] kthread+0x370/0x450 [ 877.141825][ T8382] ? __pfx_kthread+0x10/0x10 [ 877.141845][ T8382] ret_from_fork+0x72b/0xd50 [ 877.141866][ T8382] ? __pfx_ret_from_fork+0x10/0x10 [ 877.141886][ T8382] ? __switch_to+0x800/0x10f0 [ 877.141909][ T8382] ? __pfx_kthread+0x10/0x10 [ 877.141932][ T8382] ret_from_fork_asm+0x1a/0x30 [ 877.141960][ T8382] [ 877.142180][T17717] FAULT_INJECTION: forcing a failure. [ 877.142180][T17717] name failslab, interval 1, probability 100, space 0, times 60 [ 877.142210][T17717] CPU: 0 UID: 0 PID: 17717 Comm: syz.1.3284 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.142240][T17717] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.142248][T17717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.142258][T17717] Call Trace: [ 877.142264][T17717] [ 877.142272][T17717] dump_stack_lvl+0x100/0x190 [ 877.142294][T17717] should_fail_ex.cold+0x5/0xa [ 877.142312][T17717] ? __kmalloc_cache_node_noprof+0x6e/0x6c0 [ 877.142338][T17717] should_failslab+0xc2/0x120 [ 877.142364][T17717] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 877.142389][T17717] ? __get_vm_area_node+0x101/0x330 [ 877.142418][T17717] __get_vm_area_node+0x101/0x330 [ 877.142445][T17717] __vmalloc_node_range_noprof+0x228/0x1630 [ 877.142472][T17717] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 877.142494][T17717] ? do_raw_spin_lock+0x128/0x260 [ 877.142516][T17717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 877.142536][T17717] ? debug_mutex_remove_waiter+0xa0/0x320 [ 877.142561][T17717] ? rcu_is_watching+0x12/0xc0 [ 877.142584][T17717] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 877.142603][T17717] ? trace_contention_end+0x126/0x160 [ 877.142622][T17717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 877.142649][T17717] ? __mutex_lock+0x26d/0x1bd0 [ 877.142672][T17717] ? dvb_demux_do_ioctl+0x108/0x1200 [ 877.142693][T17717] ? __pfx___mutex_lock+0x10/0x10 [ 877.142716][T17717] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 877.142735][T17717] __vmalloc_node_noprof+0xad/0xf0 [ 877.142771][T17717] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 877.142793][T17717] dvb_dmxdev_filter_start+0x914/0xdd0 [ 877.142816][T17717] ? trace_irq_enable.constprop.0+0x122/0x160 [ 877.142848][T17717] dvb_demux_do_ioctl+0xe64/0x1200 [ 877.142872][T17717] dvb_usercopy+0x167/0x340 [ 877.142900][T17717] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 877.142921][T17717] ? __pfx_dvb_usercopy+0x10/0x10 [ 877.142953][T17717] ? __fget_files+0x21f/0x3d0 [ 877.142974][T17717] dvb_demux_ioctl+0x29/0x40 [ 877.142990][T17717] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 877.143020][T17717] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 877.143044][T17717] __do_fast_syscall_32+0xe7/0x970 [ 877.143067][T17717] do_fast_syscall_32+0x32/0x70 [ 877.143092][T17717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 877.143117][T17717] RIP: 0023:0xf7f23fec [ 877.143141][T17717] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 877.143150][T17717] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 877.143169][T17717] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000403c6f2b [ 877.143182][T17717] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.143194][T17717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 877.143207][T17717] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 877.143219][T17717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.143238][T17717] [ 877.143284][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.1.3284 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.143309][T17715] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.143315][T17715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.143327][T17715] Call Trace: [ 877.143332][T17715] [ 877.143338][T17715] dump_stack_lvl+0x100/0x190 [ 877.143360][T17715] should_fail_ex.cold+0x5/0xa [ 877.143378][T17715] should_failslab+0xc2/0x120 [ 877.143402][T17715] kmem_cache_alloc_noprof+0x91/0x6a0 [ 877.143424][T17715] ? jbd2__journal_start+0x194/0x6a0 [ 877.143475][T17715] jbd2__journal_start+0x194/0x6a0 [ 877.143497][T17715] __ext4_journal_start_sb+0x367/0x670 [ 877.143523][T17715] ? ext4_dirty_inode+0xa1/0x130 [ 877.143551][T17715] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 877.143577][T17715] ext4_dirty_inode+0xa1/0x130 [ 877.143602][T17715] ? rcu_is_watching+0x12/0xc0 [ 877.143623][T17715] __mark_inode_dirty+0x1f3/0x16e0 [ 877.143651][T17715] file_update_time_flags+0x46b/0x500 [ 877.143674][T17715] ext4_page_mkwrite+0x324/0x1850 [ 877.143703][T17715] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 877.143732][T17715] do_page_mkwrite+0x17a/0x440 [ 877.143776][T17715] ? __pfx_filemap_map_pages+0x10/0x10 [ 877.143798][T17715] do_fault+0x3b5/0x1750 [ 877.143824][T17715] __handle_mm_fault+0x187d/0x2a00 [ 877.143844][T17715] ? reacquire_held_locks+0xce/0x1e0 [ 877.143870][T17715] ? __pfx___handle_mm_fault+0x10/0x10 [ 877.143889][T17715] ? lock_vma_under_rcu+0x17c/0x590 [ 877.143911][T17715] handle_mm_fault+0x37b/0xa30 [ 877.143930][T17715] do_user_addr_fault+0x5a3/0x12f0 [ 877.143958][T17715] exc_page_fault+0x6f/0xd0 [ 877.143979][T17715] asm_exc_page_fault+0x26/0x30 [ 877.143997][T17715] RIP: 0023:0xf702f07e [ 877.144010][T17715] Code: 18 01 00 00 ba 08 00 00 00 89 e8 e8 5c a3 fe ff 8b 45 20 8b 4c 24 08 8b 5c 24 0c 83 44 24 14 01 8d 50 f8 83 45 18 08 89 55 20 <89> 48 f8 89 58 fc 83 c6 01 3b 77 04 0f 82 b0 fe ff ff 80 7d 34 00 [ 877.144026][T17715] RSP: 002b:00000000ffa845e0 EFLAGS: 00010202 [ 877.144041][T17715] RAX: 0000000033012000 RBX: 00000000ffffffff RCX: 0000000081e8c0d1 [ 877.144053][T17715] RDX: 0000000033011ff8 RSI: 00000000000005f7 RDI: 00000000f73e5118 [ 877.144065][T17715] RBP: 00000000f7f15610 R08: 0000000000000000 R09: 0000000000000000 [ 877.144076][T17715] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 877.144088][T17715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.144104][T17715] [ 877.144133][T12863] CPU: 3 UID: 0 PID: 12863 Comm: kworker/3:1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.144175][T12863] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.144183][T12863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.144194][T12863] Workqueue: events nsim_fib_event_work [ 877.144216][T12863] Call Trace: [ 877.144222][T12863] [ 877.144230][T12863] dump_stack_lvl+0x100/0x190 [ 877.144255][T12863] should_fail_ex.cold+0x5/0xa [ 877.144272][T12863] should_failslab+0xc2/0x120 [ 877.144296][T12863] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.144314][T12863] ? nsim_fib_event_work+0x156d/0x6310 [ 877.144334][T12863] nsim_fib_event_work+0x156d/0x6310 [ 877.144352][T12863] ? __lock_acquire+0x49f/0x1a40 [ 877.144380][T12863] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.144400][T12863] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.144426][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.144448][T12863] ? rcu_is_watching+0x12/0xc0 [ 877.144470][T12863] process_one_work+0xa23/0x1940 [ 877.144522][T12863] ? __pfx_process_one_work+0x10/0x10 [ 877.144550][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.144568][T12863] worker_thread+0x5ef/0xe50 [ 877.144595][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.144632][T12863] ? kthread+0x13a/0x450 [ 877.144650][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.144672][T12863] kthread+0x370/0x450 [ 877.144694][T12863] ? __pfx_kthread+0x10/0x10 [ 877.144717][T12863] ret_from_fork+0x72b/0xd50 [ 877.144737][T12863] ? __pfx_ret_from_fork+0x10/0x10 [ 877.144758][T12863] ? __switch_to+0x800/0x10f0 [ 877.144784][T12863] ? __pfx_kthread+0x10/0x10 [ 877.144807][T12863] ret_from_fork_asm+0x1a/0x30 [ 877.144836][T12863] [ 877.144925][T12863] FAULT_INJECTION: forcing a failure. [ 877.144925][T12863] name failslab, interval 1, probability 100, space 0, times 57 [ 877.145177][T17715] FAULT_INJECTION: forcing a failure. [ 877.145177][T17715] name failslab, interval 1, probability 100, space 0, times 57 [ 877.145204][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.1.3284 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.145228][T17715] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.145235][T17715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.145246][T17715] Call Trace: [ 877.145252][T17715] [ 877.145260][T17715] dump_stack_lvl+0x100/0x190 [ 877.145280][T17715] should_fail_ex.cold+0x5/0xa [ 877.145297][T17715] ? fs_reclaim_acquire+0x70/0x100 [ 877.145323][T17715] should_failslab+0xc2/0x120 [ 877.145347][T17715] kmem_cache_alloc_noprof+0x91/0x6a0 [ 877.145370][T17715] ? jbd2__journal_start+0x194/0x6a0 [ 877.145394][T17715] jbd2__journal_start+0x194/0x6a0 [ 877.145416][T17715] __ext4_journal_start_sb+0x367/0x670 [ 877.145441][T17715] ? ext4_dirty_inode+0xa1/0x130 [ 877.145465][T17715] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 877.145491][T17715] ext4_dirty_inode+0xa1/0x130 [ 877.145516][T17715] ? rcu_is_watching+0x12/0xc0 [ 877.145536][T17715] __mark_inode_dirty+0x1f3/0x16e0 [ 877.145564][T17715] file_update_time_flags+0x46b/0x500 [ 877.145587][T17715] ext4_page_mkwrite+0x324/0x1850 [ 877.145615][T17715] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 877.145630][T17544] FAULT_INJECTION: forcing a failure. [ 877.145630][T17544] name failslab, interval 1, probability 100, space 0, times 57 [ 877.145641][T17715] ? inode_to_bdi+0x9e/0x160 [ 877.145663][T17715] ? rcu_is_watching+0x12/0xc0 [ 877.145684][T17715] do_page_mkwrite+0x17a/0x440 [ 877.145708][T17715] ? __pfx_filemap_map_pages+0x10/0x10 [ 877.145725][T17715] do_fault+0x3b5/0x1750 [ 877.145751][T17715] __handle_mm_fault+0x187d/0x2a00 [ 877.145778][T17715] ? __pfx___handle_mm_fault+0x10/0x10 [ 877.145796][T17715] ? __pfx_vma_start_read+0x10/0x10 [ 877.145812][T17715] ? rcu_is_watching+0x12/0xc0 [ 877.145836][T17715] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 877.145861][T17715] handle_mm_fault+0x37b/0xa30 [ 877.145881][T17715] do_user_addr_fault+0x5a3/0x12f0 [ 877.145909][T17715] exc_page_fault+0x6f/0xd0 [ 877.145948][T17715] asm_exc_page_fault+0x26/0x30 [ 877.145966][T17715] RIP: 0023:0xf702f07e [ 877.145980][T17715] Code: 18 01 00 00 ba 08 00 00 00 89 e8 e8 5c a3 fe ff 8b 45 20 8b 4c 24 08 8b 5c 24 0c 83 44 24 14 01 8d 50 f8 83 45 18 08 89 55 20 <89> 48 f8 89 58 fc 83 c6 01 3b 77 04 0f 82 b0 fe ff ff 80 7d 34 00 [ 877.145998][T17715] RSP: 002b:00000000ffa845e0 EFLAGS: 00010202 [ 877.146013][T17715] RAX: 0000000033011000 RBX: 00000000ffffffff RCX: 0000000081b92c45 [ 877.146025][T17715] RDX: 0000000033010ff8 RSI: 000000000000dcff RDI: 00000000f73e5118 [ 877.146037][T17715] RBP: 00000000f7f15610 R08: 0000000000000000 R09: 0000000000000000 [ 877.146048][T17715] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 877.146060][T17715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.146077][T17715] [ 877.148028][T12863] CPU: 3 UID: 0 PID: 12863 Comm: kworker/3:1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 877.148071][T12863] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 877.148079][T12863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 877.148091][T12863] Workqueue: events nsim_fib_event_work [ 877.148111][T12863] Call Trace: [ 877.148117][T12863] [ 877.148125][T12863] dump_stack_lvl+0x100/0x190 [ 877.148144][T12863] should_fail_ex.cold+0x5/0xa [ 877.148160][T12863] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 877.148179][T12863] should_failslab+0xc2/0x120 [ 877.148203][T12863] __kmalloc_cache_noprof+0x91/0x6c0 [ 877.148221][T12863] ? nsim_fib_event_work+0xfdd/0x6310 [ 877.148246][T12863] nsim_fib_event_work+0xfdd/0x6310 [ 877.148264][T12863] ? __lock_acquire+0x49f/0x1a40 [ 877.148291][T12863] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 877.148311][T12863] ? debug_object_deactivate+0x2e4/0x3b0 [ 877.148338][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.148357][T12863] ? rcu_is_watching+0x12/0xc0 [ 877.148380][T12863] process_one_work+0xa23/0x1940 [ 877.148410][T12863] ? __pfx_process_one_work+0x10/0x10 [ 877.148439][T12863] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 877.148457][T12863] worker_thread+0x5ef/0xe50 [ 877.148485][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.148534][T12863] ? kthread+0x13a/0x450 [ 877.148557][T12863] ? __pfx_worker_thread+0x10/0x10 [ 877.148581][T12863] kthread+0x370/0x450 [ 877.148603][T12863] ? __pfx_kthread+0x10/0x10 [ 877.148626][T12863] ret_from_fork+0x72b/0xd50 [ 877.148648][T12863] ? __pfx_ret_from_fork+0x10/0x10 [ 877.148670][T12863] ? __switch_to+0x800/0x10f0 [ 877.148696][T12863] ? __pfx_kthread+0x10/0x10 [ 877.148701][ T10] FAULT_INJECTION: forcing a failure. [ 877.148701][ T10] name failslab, interval 1, probability 100, space 0, times 56 [ 877.148719][T12863] ret_from_fork_asm+0x1a/0x30 [ 877.148747][T12863] [ 877.149274][ T7520] CR2: 00000000f720e853 CR3: 0000000071303000 CR4: 0000000000352ef0 [ 877.150121][ T7520] Kernel panic - not syncing: Fatal exception [ 878.245442][ T7520] Shutting down cpus with NMI [ 878.246175][ T7520] Kernel Offset: disabled