last executing test programs: 40.576142793s ago: executing program 3 (id=411): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x790) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) (async) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)) (async) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x790) (async) 40.495571215s ago: executing program 3 (id=412): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) (async) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) userfaultfd(0x1) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f00000000c0)={0x0, 0xb2f2, 0x2000, 0x2, 0xfffffffd}, &(0x7f0000ffe000), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4, 0xffffffffffffffff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000000000000000010000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) listen(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x100006) creat(&(0x7f0000000680)='./file0\x00', 0x84) (async) creat(&(0x7f0000000680)='./file0\x00', 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$char_usb(r10, &(0x7f0000000f80)="ce56e8", 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000340)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x7, 0x2, 0x4, 0x20, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x3e68d11b, 0x5f, &(0x7f0000000400)=""/95, 0x40f00, 0x14, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000580)={0x9, 0x4001}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x3, 0xfffff55e, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740), &(0x7f0000000780)=[{0x5, 0x1, 0x1, 0x3}, {0x1, 0x3, 0xf, 0x6}, {0x0, 0x2, 0x10, 0x2}, {0x5, 0x5, 0x0, 0x6}, {0x5, 0x4, 0xd, 0x4}], 0x10, 0x5}, 0x94) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435330386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) (async) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435330386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0xfff, 0x9, 0x0, 0x1, 0x68f, 0x6, 0x4, 0x6, 0x4, 0x6, 0x4, 0x7, 0x4, 0x5, 0x10, 0xe, {0x0, 0x38d}, 0xae, 0x9}}) 39.673507019s ago: executing program 3 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x311}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ce}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x317}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008040}, 0x48041) syz_emit_ethernet(0x1cb, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x195, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}, {"3d98cdfe9392d8e60a6e8ef4f532173b18d988725a52d655fee80a385a3bf31d10b1deebfdbed8061de65bb3e22cd358ed5d6a1df53d7f0f823393fd974b1b457fb5541a8651df3b54f4e0530dd9b132f30d07330d11397c1771ec6a640c8d5548366756367e96513927696ccb0be225f274540b50051e5a98caa6efe57c56000000ab02bc7bd3c79cbee70eef83f59f5f72e19cc7cd7bb8e35325723b82c9fba62c23398b2690c0a658f8adc9795f6b45c73dc887737585c7895c60afc52f1fdd84c811638e7a82631fd53a8dc22f6996f7bd2f5994444f2c3075bd13ec241853ccdbbaf5e6b97fe5c8dd2d8a"}}}}}}}, 0x0) r2 = socket(0x2, 0x3, 0x6) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8ab43, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000540)='vxfs\x00', 0x801, &(0x7f0000000580)='/dev/kvm\x00') (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000100)=0x3) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f00000002c0)={0x20003, 0x0, {[0x5, 0x5, 0x40004, 0xa, 0x8, 0x6, 0xffffffff, 0x20]}}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 39.505369073s ago: executing program 3 (id=421): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x5c, r3, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x3000000}, 0x40810) getresuid(&(0x7f00000006c0), &(0x7f0000000940), &(0x7f0000000980)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x4e24, 0x9, 0x4e23, 0x7f, 0xa, 0x0, 0x0, 0x33, r2, r5}, {0x8, 0x812d, 0x5, 0x41f3, 0x5, 0x9, 0x6ff8, 0x1e}, {0x1, 0x83, 0xe, 0x10001}, 0x2d1d607d, 0x6e6bbd, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0x2, @in6=@local, 0x3507, 0x0, 0x1, 0x8, 0x5, 0x1000, 0x5}}, 0xe8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fanotify_init(0x8, 0x101000) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[], 0x40) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) pwritev2(r6, &(0x7f0000000880)=[{&(0x7f0000000140)="85e409452efa5043f67e401aadcf2711f24c409e355b7030df50df628e5b2e05e3d1b80a4562b5861fb9b54f08a48498d4551285756b27d8416102094a110316e6ee0f5bed907990a010aecc9b8b18c33e842ae81d489788398462db218fef739e9f1e6645e57d59da554b02febcd80abe041335b5c71b5f88b5eee62e414ec105c08ae1ff8b49ba75f40a22c0f0980c7d2d065d759fb7a436913133c95c956ab381c92846425e75eeb1c5155b091b5d7b62b7c24459e7c8951298b43b3e3071cfce02b12cfac48836302716938471c1d0919ad1a6cb8b9204b65c7f530ccd77fa98d891a0ab60a313ee0b6ac4b30221f9eea5", 0xf3}, {&(0x7f0000000240)="d5333dbb273cc61f4fe21ce57ff6d19cab363e22b3b8be53e1778dcab72d35e481a9fe1890a3cd1f401017ffab9e91d6c1ed85868588749a3f4591650f9f8029094b0861d1fe5c9120a5e1a506922c3db2cd5cb271bd51f9d1baeae0729fa2ec25a7b49f44ef69899a487a46b9cf795547031ac1121b338668ee3096a79a32415ef3fc5bc8bb481cb115791ac4a276031c5b26b56ace774de8ce58da2f67a69ed6361678b5df3e40729a28bc3760a33af53847088588ee529f1320389436e28c8596b4b159f222f7186a3d836ed45adb13004bf0676f", 0xd6}, {&(0x7f0000000340)="4c1f0466a9d8ea2548d59e7323c3e68d046656161b6964553802a20d7eff9c02493ed966a17491b6a1261cc33ac8b155e4beee8d3709dd1641", 0x39}, {&(0x7f0000000380)="b266b313f298c669a3ffdd46c86c41818818273d802efe6be7ef3a0cd91ba644feef797cffe875a6dfc52dfe22fc341dfbf1076220e53e2ccf44bc32c3d08fadb5a936e8d21c1085a97deeba6a41", 0x4e}, {&(0x7f0000000400)="b127ec569ff325a19af3301b25f5b9f2be909a8c94bbe4ee2bea852654fa24a076618b4bc0e8a0ecfce7c77dacb1abd05fcdb4866a8b9f3a0e9ddc5ebc28beb5df7b64cebc67361cf71f2f7746c445516b5603b01e52a455a83bc22ebcaae4a717ddc53eb23f9fd91b5fe660eb00b457aefa01d66e51b9239b753a9bb63ad696b1c37d3e0daae6653522a59b3cdfc034135bf30a316cb48cbb20088cca34d5d6da9506b6cb0801ade3d206a453ec321e44", 0xb1}, {&(0x7f00000004c0)="4775b1d291f1a6ac53ef598af19625e2c09b77959ec4657cf99358150d89e80e11c9d012b27acd11907725980abdf17797c107468a26d11110079ee2aef4295b0e8bdf7ba619f0707ef7cb74d5f81805b79b0656462825f98cf58c4704929e792157215b851b9c2e33b5988711ffa0b28b405a76c5ecd70badd982993ab6a61cb1cf8721150532cfdf7eb007627f73962b701ecc77c16b38112ee60faeb1364eaf2f07d8091dc6e3168bb3aeda059f7ef7d7221eaaf03eddf0cfc5172d7fcbf5d459d9d11a7952e2bbb3bbfc74600f7b", 0xd0}, {&(0x7f00000005c0)="2f27b8d0605120084ee39991d5193c118c030b59bb14f2bffe7485f51bc769cc58c7b058509550bcc4297aa827ef5f3ee43a6968ba56acde54165c4e4b54b54a0bada4f2f19cbb5fce452ae345e726445080c30c3b1a6db71bfc9b8d4e6528e5397608b3d0b39df625340d073050fe637bd741c7f72ed441679303d9e74a9cc3e958bd5b4815cda93228e8eab1cc203f06338cf1923a0e7da46e4213cc788d3e109592f5b8d478b488018dfe8927321f20a4c30fd43fcbd474a19dd78c5bdd9fccdd47c8035f8c34593d4b518fa6b01a9bba312bad0c9adf97379a08d642d5d1a2cc3938ecd9d07d723f74913339dcc64d0830", 0xf3}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="78b9cb8cde7546d6b9e2f7ff9366841aca29e67a06916d02cd03178d8910d5e7ca48684e3d4f5809ab3282a07f5a432a557836146e6bbf759389df15", 0x3c}, {&(0x7f0000000740)="d3a1efb85a678e395a4320ca54bb0a048d4f1833bd9c0dd9e681e840a82b72511091c269f0efcd8b7a73255f491adaa1cb77efa6bfbb1ab5a05a7f957d048974d0ba3bc4d23852ac474ddde61be360f3854ca1d4205dfc6f54dbfe69af376f579ac94dcbab4d43b5ddca9909ea2692238a2e57512596489ff18b63a38630fa11bf45f205964a2e79aa4675d520dcdead8268caf9e5173b5845e6ceb747fa2b0109525650092bad0760c4e02bb8a299e1e32ad5142a2d643057be69676ca271578f71df271d7393528b3ae03bc56c59adaaf31fd67c5b66965bdcecb1d67d436ee69a3dbf12eb255de4c4393c28bb6f2083980097177d44", 0xf7}], 0xa, 0x8, 0x0, 0x1) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x35, {0x7, 0xc, 0x2040000, 0x3, 0xfffffffd, 0x80000000}}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x4) ioctl$UI_DEV_CREATE(r6, 0x5501) 39.445561022s ago: executing program 3 (id=422): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = getpgrp(0xffffffffffffffff) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (async) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x2}}}, 0x78) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={0x0}) r2 = socket$unix(0x1, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,r/Ono=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x6000, 0x1, &(0x7f00000003c0)) r5 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f00000000c0)='personality\x00') fstat(0xffffffffffffffff, &(0x7f0000000680)) getgid() (async) getgid() syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000800)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x3a9}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x19b, 0x5}}, @wrmsr={0x65, 0x20, {0x6b, 0x7}}, @nested_load_syzos={0x136, 0x48, {0x0, 0x2, [@nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x2}]}}, @wr_drn={0x68, 0x20, {0x7, 0x9}}], 0xf0}) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x6, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, &(0x7f00000008c0), 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x6000000, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x6, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, &(0x7f00000008c0), 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x6000000, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) r6 = fanotify_init(0x8, 0x40000) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x1, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x1, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x202, 0x810000b, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r6, 0x202, 0x810000b, 0xffffffffffffffff, 0x0) 39.353894976s ago: executing program 3 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x22}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xa3786d37e20239b}, 0x1000c014) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0x8001, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x2, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x3, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r7, &(0x7f00000000c0), &(0x7f0000000140)=0x14) 12.230862919s ago: executing program 32 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x22}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x28}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xa3786d37e20239b}, 0x1000c014) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0x8001, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x2, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x3, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r7, &(0x7f00000000c0), &(0x7f0000000140)=0x14) 7.80538009s ago: executing program 0 (id=633): rt_sigpending(&(0x7f0000000040), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000bb3000/0x1000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x7, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)='.\"', 0x2}], 0x1}, 0x4008000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) write$uinput_user_dev(r2, &(0x7f0000000440)={'syz0\x00', {0x9, 0x8043, 0x7, 0x10}, 0x40, [0x9, 0x8, 0x7, 0x5, 0xe, 0x3, 0x0, 0x3, 0x7, 0x0, 0x3ff, 0x3, 0x8, 0x2, 0xffffffff, 0xb0c, 0x3, 0x5, 0x1000, 0x8001, 0x800, 0x4, 0x5, 0x80000001, 0xb, 0x0, 0x0, 0xffff, 0x5, 0x101, 0x6, 0x72, 0x1ff, 0x0, 0x5, 0x1ff, 0x8, 0x36f, 0x4, 0x6, 0x6, 0x80, 0x2, 0x0, 0x0, 0x7, 0x0, 0x9, 0x81, 0x100, 0x9, 0x6, 0xfffffffe, 0x7, 0xe, 0x8, 0x7, 0x39, 0x2, 0xe, 0x3, 0x2, 0x8, 0x10001], [0x4, 0x5, 0x4, 0xd, 0x0, 0x5, 0x0, 0x3, 0x3, 0x7f, 0x8, 0xfffffffe, 0xffff, 0x4, 0x7, 0x1bf4, 0xf, 0x5, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x9, 0x8, 0xfffff8f4, 0x77c, 0xf24, 0x9, 0x268e, 0x7f, 0x2, 0x97f, 0x0, 0xd53, 0x10000, 0x2, 0x7, 0x2, 0x4, 0x4, 0x5a7, 0x1, 0xfffffffb, 0xffffff9f, 0x80000000, 0x0, 0xfff, 0x3, 0x4, 0x1000, 0xf, 0x10000, 0x0, 0x7, 0xb, 0x9, 0x1, 0xfffffff9, 0xd67, 0x0, 0x9, 0x5, 0x1], [0x5, 0x8, 0x5, 0x8, 0x51e, 0x6, 0x8ca, 0x8, 0x9, 0x1, 0xa, 0x10001, 0x4, 0xff, 0x4, 0x7, 0x6, 0x80000001, 0x6, 0x8, 0x7fffffff, 0x7, 0x0, 0x4, 0x2, 0x9, 0x2, 0xe, 0x9, 0x401, 0x3, 0xd, 0x5, 0x8, 0x40000000, 0xffe000, 0x3ff, 0x7, 0x5, 0x4, 0xc38c, 0xb8000000, 0x6, 0x9, 0x3, 0x2, 0x8, 0x1, 0x4d3f, 0x3, 0x63, 0x2, 0xfffffffe, 0x7, 0x2, 0x400, 0xf0, 0x5, 0x6, 0x32, 0x7, 0x1, 0xd849, 0x8], [0x6, 0x4, 0x6, 0xfffffffd, 0x6, 0x8175, 0x9, 0x9, 0x9, 0xcd, 0xa0, 0x787, 0x5, 0x7fffffff, 0xfffffffc, 0x5, 0x8, 0x40, 0x5, 0x5, 0x0, 0x0, 0x9, 0xff, 0x80000, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8000, 0x4, 0x2, 0x1, 0xb9, 0x400, 0x0, 0x3, 0x4888e163, 0x0, 0x2, 0x9, 0x80, 0xc, 0x0, 0xbd, 0x4, 0x81, 0xff, 0xff, 0x1, 0x5, 0x5b94, 0xe, 0xc, 0x7, 0x7, 0x401, 0xb, 0x7, 0x100, 0xb3, 0xb, 0xa0]}, 0x45c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 7.736066835s ago: executing program 0 (id=634): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x7) (async) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x7) 7.734511963s ago: executing program 0 (id=636): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x1, 0x0, 0xf, 0x9, 0x2d, 0xd, 0x6, 0x3, 0x8, 0x8, 0x7, 0xff, 0x2}, 0xe) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466bfbaf80c0cf2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601800000", 0x69}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466bfbaf80c0cf2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601800000", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.143615451s ago: executing program 0 (id=648): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x44d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x4c) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140044682500009c000000344900000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c020) 1.806001826s ago: executing program 1 (id=660): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, r0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100), 0x5) bind$rxrpc(r1, &(0x7f0000000500)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x18) (async, rerun: 64) listen(r1, 0x5) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='nfsd 127.0.0.1 999999999\n', 0x19) read(r2, &(0x7f0000000100), 0x100) r3 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r3, &(0x7f0000000540)="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", 0x1ac, 0x0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) (async) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 1.705184976s ago: executing program 1 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.704878629s ago: executing program 1 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b90d0000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000100000008000800000000000800090001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.635787086s ago: executing program 1 (id=663): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20088888}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4814) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20088888}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4814) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 1.624000596s ago: executing program 1 (id=664): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) write$char_usb(r4, &(0x7f0000000240)="9669", 0x2) (async) write$char_usb(r4, &(0x7f0000000240)="9669", 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0xfd}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.139676766s ago: executing program 2 (id=671): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='100 1\x00', 0x6) r1 = open(&(0x7f0000000000)='./sys/bus/netdevsim/devices/netdevsim100/numvfs\x00', 0x280400, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=':r', 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11020000000000000000030000003000018006"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x86, 0x6, 0x406f, {{0xc, 0x4, 0x3, 0xf, 0x30, 0x66, 0x0, 0x9b, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x7, "d15083fcff"}, @end, @rr={0x7, 0x13, 0x14, [@remote, @broadcast, @private=0xa010101, @multicast1]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim100/numvfs\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\x00', 0x2) close(r7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES8=r2, @ANYRES16=r7], 0x24}}, 0x40000e5) 945.551129ms ago: executing program 4 (id=674): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x5cd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, 0xffffffffffffffff, 0xc369d000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 323.512737ms ago: executing program 4 (id=675): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x40040}], 0x1, 0x40) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), 0x38}, 0x40000061) sendto$phonet(r5, &(0x7f0000000400)="7d83150a802c334adab5c587869ba225a59b0ac90ab63bdf57205f89bbb18be3d7d341668fd08671c4ce6542a30550fa28381012c9eb1cc1418521d9ddff8c48aac5638d542a1170a8461d2d630de63991a617271b6aeebd37377cc441f3f088ffc62d8a6dfd36ae83653eaa46d7f23905fc93012cecf25beb4a3c1ba92490cc458c380d8e8dcb705ad94471e720c2bfb128ee62159a4a0eb2", 0x99, 0x4004021, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 212.78227ms ago: executing program 2 (id=676): socket$unix(0x1, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='pim6reg1\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddb4b6ee237852c991f0300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x2800c880}, 0x10004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000000)={0x18, 0x18, 0x5, 0x3, 0x3}) bind$bt_hci(r5, &(0x7f0000000040), 0x6) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x1}, 0x6) write(r0, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) 212.526569ms ago: executing program 2 (id=677): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioperm(0x0, 0x8001, 0x9) (async, rerun: 32) ioperm(0x0, 0x80, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x25dfcbff, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0, 0x2}}, 0x50}}, 0x1001) 201.253729ms ago: executing program 0 (id=648): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x44d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x4c) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140044682500009c000000344900000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c020) 145.767529ms ago: executing program 4 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) 145.42866ms ago: executing program 2 (id=679): r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) close(0x3) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c070000006a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=0x1, @ANYBLOB='\x00'/17], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0xfe33) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r9, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="5e2e0900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100070000000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 143.357538ms ago: executing program 4 (id=680): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) 85.077134ms ago: executing program 1 (id=681): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="63000e0080000000080211000000080211000000080211000000f0ff080000000000000064000100000601010101010101000406b3020d00ff01050307c7062d1aff021d00000000000000a60200fe00040000000000090000000372060303030303030008000c006400000008000d0000000000b512ba0cb33de58894f9872d903de85b6443e74c630fd56c54534ca19833f76a6a497f8d1884ee4d791dfffd75972ca1e2056d30e8586b4eb5bbbbae97f7418b6c7e8f46bad6b3e0e391e9801e11"], 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000840)) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x182000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) timer_settime(r7, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_delete(r6) write(r2, &(0x7f0000000000)="a78b451e40d5ab650c59c2491a707c52", 0x10) socket(0x2a, 0x2, 0x9) 83.241442ms ago: executing program 4 (id=682): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000080)) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'bridge0\x00'}}]}}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) syz_pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f00000001c0)='net/ip_tables_targets\x00') (async) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/ip_tables_targets\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x2, 0x0, 0x5, 0x7, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) 80.001173ms ago: executing program 2 (id=683): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000480)={0x18, &(0x7f00000001c0)=[{0x3e, '\x00', @buffer={"cbc479909d3ecf555e2f3348f4b1ff4ee732f3a21e82a2e2c522b2a4d0f2d2f6", 0x20}, 0x8000}, {0x30, '\x00', @data=0x83e, 0xb4}, {0xe, '\x00', @buffer={"8acb0ff8caf027420913cfa959fd1d3ba3fdd333540594104f3e0df6257220b1", 0x20}, 0xd6}, {0x38, '\x00', @data=0x5, 0x4c}, {0x61, '\x00', @data=0x2, 0x6}, {0x7, '\x00', @data=0x9, 0x2}, {0x19, '\x00', @buffer={"fa14ade38e81480ae9d7788eb20febbae790e1df2ca13a13daed58018fb45776", 0x20}, 0x1ff}, {0x4, '\x00', @st={0x4, [{0x3, @uvalue=0xfffffffffffffff8}, {0x1, @svalue=0x4}, {0x1, @uvalue=0xe9a}, {0x3, @svalue}]}, 0x3}, {0x8, '\x00', @st={0x4, [{0x0, @svalue=0x3}, {0x0, @uvalue=0x2}, {0x1, @svalue=0xfff}, {0x2, @uvalue=0x9}]}, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.976862ms ago: executing program 4 (id=684): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,access=any']) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) 1.975336ms ago: executing program 2 (id=685): stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xe0021, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffff4}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}], [{@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x92040, 0x2) umount2(&(0x7f0000000300)='./file0\x00', 0x2) lsetxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'L+', 0x3ff}, 0x16, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x250201, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f00000004c0)={0x20, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) mount$fuseblk(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x58021, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions}, {@blksize}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x101}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_eq={'euid', 0x3d, r0}}, {@smackfsroot={'smackfsroot', 0x3d, ']'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, 'max_read'}}, {@obj_role={'obj_role', 0x3d, '{\\-!!'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'rootmode'}}, {@smackfsroot={'smackfsroot', 0x3d, '-}]:{'}}]}}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0), 0x102, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = dup3(r5, r4, 0x80000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$TUNSETGROUP(r7, 0x400454ce, r8) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000880)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000008c0)={0x48, 0x1, r9, 0x0, 0x4, 0x81}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000940)={0x18, 0x2, 0x5, 0x9}) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000980)={'filter\x00', 0xb, "51118fb3c97d58af3e42b5"}, &(0x7f00000009c0)=0x2f) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x3, 0x0, 0x0, 0x8000000000000000, 0xb7, &(0x7f0000000a00)="d77d72bea0d34c0afe9b74753f083d029d03a2f9dd1d6e641d159ee07a10fe7aadf938e520c0ae1369a61593bccb68d0c5b723add7917df6fff405bfa17162405d728f7624b93109b9282ef47213f5312ac249efef50c16580256bb7c001a6a141269c220b50597ba08f236e4b65018cc88744bcd5881a7e383a50a374ae733fa1e397bc6d2e93fd746a7aed8c27d48a851e171a62d3996593c3a9982909a80b0fd821f51a0772072f4ee825db11ed243a749d089e7f4c"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/key-users\x00', 0x0, 0x0) r10 = openat2(r7, &(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)={0x30000, 0x3c, 0xa}, 0x18) ioctl$SNDCTL_SYNTH_ID(r7, 0xc08c5114, &(0x7f0000000c00)={"cf711aff951df808f6011fc06275b464b600642f8974d05bf479c70398d0", 0x4, 0x2, 0x401, 0x9620, 0x9, 0x89, 0x5d, 0x5, [0x3, 0xff, 0xe16, 0x0, 0x5, 0x7, 0x0, 0x5, 0x2, 0x7, 0xc, 0x80, 0x1, 0x73, 0x7, 0x4, 0x8, 0x401]}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r10, 0x3ba0, &(0x7f0000000d00)={0x48, 0x4, 0x0, 0x0, 0x34, &(0x7f0000000cc0)="d7aa8798831ff4f23bb8bd0433eed8661709da9556864eaa0c96698e9a7c7e307f284ee2684dac322522f8d5d5266da2b89c38cb", 0x98a9}) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r10, &(0x7f0000000d80)={@void, @void, @x25={0x3, 0x80, 0xb}}, 0x3) pivot_root(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='./file0\x00') 0s ago: executing program 0 (id=686): r0 = socket$inet(0x2, 0x800, 0x49) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) kernel console output (not intermixed with test programs): 34][ T5134] __sys_connect_file+0x141/0x1a0 [ 434.309147][ T5134] __sys_connect+0x141/0x170 [ 434.309159][ T5134] ? __pfx___sys_connect+0x10/0x10 [ 434.309179][ T5134] __x64_sys_connect+0x72/0xb0 [ 434.309191][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.309203][ T5134] do_syscall_64+0x115/0x870 [ 434.309214][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.309228][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.309239][ T5134] RIP: 0033:0x7f34c196d407 [ 434.309247][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.309258][ T5134] RSP: 002b:00007ffebdc5e690 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 434.309267][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.309274][ T5134] RDX: 000000000000006e RSI: 00007f34c1a74560 RDI: 0000000000000003 [ 434.309281][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000000 R09: 0000000000000000 [ 434.309287][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.309293][ T5134] R13: 000000000000000c R14: 000000000000002e R15: 00007ffebdc5e800 [ 434.309307][ T5134] [ 434.309423][ T5134] FAULT_INJECTION: forcing a failure. [ 434.309423][ T5134] name failslab, interval 1, probability 10, space 0, times 58 [ 434.311226][ T55] CPU: 2 UID: 0 PID: 55 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.311252][ T55] Tainted: [L]=SOFTLOCKUP [ 434.311259][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.311270][ T55] Workqueue: events rht_deferred_worker [ 434.311293][ T55] Call Trace: [ 434.311299][ T55] [ 434.311326][ T55] dump_stack_lvl+0x100/0x190 [ 434.311348][ T55] should_fail_ex.cold+0x5/0xa [ 434.311366][ T55] should_failslab+0xc2/0x120 [ 434.311385][ T55] __kvmalloc_node_noprof+0x116/0x970 [ 434.311405][ T55] ? bucket_table_alloc.isra.0+0x88/0x460 [ 434.311426][ T55] bucket_table_alloc.isra.0+0x88/0x460 [ 434.311445][ T55] rhashtable_rehash_alloc+0x68/0x160 [ 434.311463][ T55] rht_deferred_worker+0x1872/0x1fd0 [ 434.311488][ T55] ? rcu_is_watching+0x12/0xc0 [ 434.311514][ T55] process_one_work+0xa23/0x1940 [ 434.311539][ T55] ? __pfx_process_one_work+0x10/0x10 [ 434.311561][ T55] ? __pfx_rht_deferred_worker+0x10/0x10 [ 434.311581][ T55] worker_thread+0x5ef/0xe50 [ 434.311604][ T55] ? kthread+0x13a/0x450 [ 434.311618][ T55] ? __pfx_worker_thread+0x10/0x10 [ 434.311632][ T55] kthread+0x370/0x450 [ 434.311645][ T55] ? __pfx_kthread+0x10/0x10 [ 434.311661][ T55] ret_from_fork+0x72b/0xd50 [ 434.311682][ T55] ? __pfx_ret_from_fork+0x10/0x10 [ 434.311704][ T55] ? __switch_to+0x800/0x10f0 [ 434.311720][ T55] ? __pfx_kthread+0x10/0x10 [ 434.311735][ T55] ret_from_fork_asm+0x1a/0x30 [ 434.311766][ T55] [ 434.311794][ T5525] CPU: 3 UID: 0 PID: 5525 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.311811][ T5525] Tainted: [L]=SOFTLOCKUP [ 434.311816][ T5525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.311823][ T5525] Workqueue: events nsim_fib_event_work [ 434.311843][ T5525] Call Trace: [ 434.311847][ T5525] [ 434.311852][ T5525] dump_stack_lvl+0x100/0x190 [ 434.311867][ T5525] should_fail_ex.cold+0x5/0xa [ 434.311881][ T5525] should_failslab+0xc2/0x120 [ 434.311896][ T5525] __kmalloc_cache_noprof+0x91/0x6c0 [ 434.311928][ T5525] ? __kasan_kmalloc+0xaa/0xb0 [ 434.311942][ T5525] ? nsim_fib6_rt_nh_add+0x4a/0x290 [ 434.311961][ T5525] nsim_fib6_rt_nh_add+0x4a/0x290 [ 434.311979][ T5525] nsim_fib_event_work+0x16ed/0x6310 [ 434.312002][ T5525] ? debug_object_deactivate+0x2e4/0x3b0 [ 434.312019][ T5525] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 434.312040][ T5525] ? rcu_is_watching+0x12/0xc0 [ 434.312060][ T5525] process_one_work+0xa23/0x1940 [ 434.312078][ T5525] ? __pfx_process_one_work+0x10/0x10 [ 434.312095][ T5525] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 434.312114][ T5525] worker_thread+0x5ef/0xe50 [ 434.312131][ T5525] ? kthread+0x13a/0x450 [ 434.312141][ T5525] ? __pfx_worker_thread+0x10/0x10 [ 434.312153][ T5525] kthread+0x370/0x450 [ 434.312163][ T5525] ? __pfx_kthread+0x10/0x10 [ 434.312175][ T5525] ret_from_fork+0x72b/0xd50 [ 434.312192][ T5525] ? __pfx_ret_from_fork+0x10/0x10 [ 434.312209][ T5525] ? __switch_to+0x800/0x10f0 [ 434.312220][ T5525] ? __pfx_kthread+0x10/0x10 [ 434.312232][ T5525] ret_from_fork_asm+0x1a/0x30 [ 434.312256][ T5525] [ 434.312514][ T5525] FAULT_INJECTION: forcing a failure. [ 434.312514][ T5525] name failslab, interval 1, probability 10, space 0, times 56 [ 434.313114][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.313130][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.313134][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.313140][ T5134] Call Trace: [ 434.313143][ T5134] [ 434.313147][ T5134] dump_stack_lvl+0x100/0x190 [ 434.313162][ T5134] should_fail_ex.cold+0x5/0xa [ 434.313175][ T5134] should_failslab+0xc2/0x120 [ 434.313190][ T5134] __kmalloc_noprof+0xfc/0x820 [ 434.313203][ T5134] ? tomoyo_encode2+0xfb/0x3c0 [ 434.313217][ T5134] tomoyo_encode2+0xfb/0x3c0 [ 434.313229][ T5134] tomoyo_unix_entry+0x343/0x640 [ 434.313248][ T5134] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 434.313271][ T5134] ? rcu_is_watching+0x12/0xc0 [ 434.313289][ T5134] ? trace_kmem_cache_alloc+0xdd/0x100 [ 434.313306][ T5134] tomoyo_socket_connect_permission+0x31a/0x360 [ 434.313318][ T5134] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 434.313333][ T5134] ? __might_fault+0xc5/0x140 [ 434.313348][ T5134] security_socket_connect+0xd3/0x230 [ 434.313365][ T5134] __sys_connect_file+0x8f/0x1a0 [ 434.313378][ T5134] __sys_connect+0x141/0x170 [ 434.313390][ T5134] ? __pfx___sys_connect+0x10/0x10 [ 434.313411][ T5134] __x64_sys_connect+0x72/0xb0 [ 434.313422][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.313434][ T5134] do_syscall_64+0x115/0x870 [ 434.313446][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.313460][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.313471][ T5134] RIP: 0033:0x7f34c196d407 [ 434.313480][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.313490][ T5134] RSP: 002b:00007ffebdc5e690 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 434.313500][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.313507][ T5134] RDX: 000000000000006e RSI: 00007f34c1a74560 RDI: 0000000000000003 [ 434.313514][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000000 R09: 0000000000000000 [ 434.313520][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.313526][ T5134] R13: 000000000000000c R14: 000000000000002c R15: 00007ffebdc5e800 [ 434.313540][ T5134] [ 434.313654][ T5134] FAULT_INJECTION: forcing a failure. [ 434.313654][ T5134] name failslab, interval 1, probability 10, space 0, times 55 [ 434.316758][ T8435] FAULT_INJECTION: forcing a failure. [ 434.316758][ T8435] name failslab, interval 1, probability 10, space 0, times 55 [ 434.317955][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.317972][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.317975][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.317982][ T5134] Call Trace: [ 434.317986][ T5134] [ 434.317990][ T5134] dump_stack_lvl+0x100/0x190 [ 434.318006][ T5134] should_fail_ex.cold+0x5/0xa [ 434.318020][ T5134] should_failslab+0xc2/0x120 [ 434.318035][ T5134] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 434.318049][ T5134] ? sock_alloc_inode+0x26/0x2c0 [ 434.318066][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.318083][ T5134] sock_alloc_inode+0x26/0x2c0 [ 434.318099][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.318114][ T5134] alloc_inode+0x68/0x250 [ 434.318132][ T5134] sock_alloc+0x44/0x280 [ 434.318146][ T5134] ? security_socket_create+0x7f/0x250 [ 434.318162][ T5134] __sock_create+0xc2/0x860 [ 434.318180][ T5134] ? sched_clock+0x38/0x60 [ 434.318196][ T5134] __sys_socket+0x14d/0x260 [ 434.318206][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.318217][ T5134] ? rcu_is_watching+0x12/0xc0 [ 434.318234][ T5134] ? trace_csd_function_exit+0x73/0x1f0 [ 434.318268][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.318278][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.318290][ T5134] do_syscall_64+0x115/0x870 [ 434.318302][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.318316][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.318328][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.318337][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.318348][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.318358][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.318365][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.318372][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.318378][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.318384][ T5134] R13: 00007ffebdc5e800 R14: 0000000000000030 R15: 00007ffebdc5e800 [ 434.318398][ T5134] [ 434.318404][ T5134] socket: no more sockets [ 434.319783][ T5525] CPU: 3 UID: 0 PID: 5525 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.319800][ T5525] Tainted: [L]=SOFTLOCKUP [ 434.319804][ T5525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.319812][ T5525] Workqueue: events nsim_fib_event_work [ 434.319830][ T5525] Call Trace: [ 434.319835][ T5525] [ 434.319839][ T5525] dump_stack_lvl+0x100/0x190 [ 434.319854][ T5525] should_fail_ex.cold+0x5/0xa [ 434.319868][ T5525] should_failslab+0xc2/0x120 [ 434.319896][ T5525] __kmalloc_cache_noprof+0x91/0x6c0 [ 434.319917][ T5525] ? nsim_fib_event_work+0x156d/0x6310 [ 434.319937][ T5525] nsim_fib_event_work+0x156d/0x6310 [ 434.319959][ T5525] ? debug_object_deactivate+0x2e4/0x3b0 [ 434.319977][ T5525] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 434.319997][ T5525] ? rcu_is_watching+0x12/0xc0 [ 434.320017][ T5525] process_one_work+0xa23/0x1940 [ 434.320036][ T5525] ? __pfx_process_one_work+0x10/0x10 [ 434.320052][ T5525] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 434.320071][ T5525] worker_thread+0x5ef/0xe50 [ 434.320089][ T5525] ? kthread+0x13a/0x450 [ 434.320100][ T5525] ? __pfx_worker_thread+0x10/0x10 [ 434.320111][ T5525] kthread+0x370/0x450 [ 434.320121][ T5525] ? __pfx_kthread+0x10/0x10 [ 434.320133][ T5525] ret_from_fork+0x72b/0xd50 [ 434.320150][ T5525] ? __pfx_ret_from_fork+0x10/0x10 [ 434.320167][ T5525] ? __switch_to+0x800/0x10f0 [ 434.320179][ T5525] ? __pfx_kthread+0x10/0x10 [ 434.320190][ T5525] ret_from_fork_asm+0x1a/0x30 [ 434.320214][ T5525] [ 434.320319][ T8435] CPU: 2 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.320342][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.320348][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.320357][ T8435] Call Trace: [ 434.320362][ T8435] [ 434.320368][ T8435] dump_stack_lvl+0x100/0x190 [ 434.320404][ T8435] should_fail_ex.cold+0x5/0xa [ 434.320436][ T8435] should_failslab+0xc2/0x120 [ 434.320456][ T8435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.320475][ T8435] ? trace_kmem_cache_alloc+0xdd/0x100 [ 434.320495][ T8435] ? security_file_alloc+0x34/0x2c0 [ 434.320513][ T8435] security_file_alloc+0x34/0x2c0 [ 434.320527][ T8435] init_file+0x95/0x480 [ 434.320545][ T8435] alloc_empty_file+0x79/0x1c0 [ 434.320564][ T8435] path_openat+0xe7/0x4280 [ 434.320578][ T8435] ? __kasan_slab_alloc+0x89/0x90 [ 434.320595][ T8435] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 434.320611][ T8435] ? do_getname+0x35/0x390 [ 434.320627][ T8435] ? do_sys_openat2+0xc7/0x1e0 [ 434.320645][ T8435] ? __x64_sys_openat+0x12d/0x210 [ 434.320662][ T8435] ? do_syscall_64+0x115/0x870 [ 434.320677][ T8435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.320698][ T8435] ? __pfx_path_openat+0x10/0x10 [ 434.320718][ T8435] do_file_open+0x20e/0x430 [ 434.320735][ T8435] ? __pfx_do_file_open+0x10/0x10 [ 434.320764][ T8435] ? alloc_fd+0x471/0x7a0 [ 434.320781][ T8435] ? do_getname+0x191/0x390 [ 434.320801][ T8435] do_sys_openat2+0x10f/0x1e0 [ 434.320820][ T8435] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.320840][ T8435] ? raw_ioctl+0x26f/0x2b80 [ 434.320865][ T8435] __x64_sys_openat+0x12d/0x210 [ 434.320884][ T8435] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.320910][ T8435] do_syscall_64+0x115/0x870 [ 434.320925][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.320942][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.320957][ T8435] RIP: 0033:0x7f1fd455e6ce [ 434.320969][ T8435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.320987][ T8435] RSP: 002b:00007f1fd5520b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.321000][ T8435] RAX: ffffffffffffffda RBX: 00007f1fd55216c0 RCX: 00007f1fd455e6ce [ 434.321010][ T8435] RDX: 0000000000200000 RSI: 00007f1fd5520c00 RDI: ffffffffffffff9c [ 434.321019][ T8435] RBP: 00007f1fd5520c00 R08: 0000000000000000 R09: 0000000000000000 [ 434.321027][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 434.321037][ T8435] R13: 00007f1fd4826038 R14: 00007f1fd4825fa0 R15: 00007ffec9adbba8 [ 434.321057][ T8435] [ 434.322315][ T8435] FAULT_INJECTION: forcing a failure. [ 434.322315][ T8435] name failslab, interval 1, probability 10, space 0, times 49 [ 434.322677][ T5134] FAULT_INJECTION: forcing a failure. [ 434.322677][ T5134] name failslab, interval 1, probability 10, space 0, times 49 [ 434.324154][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.324172][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.324176][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.324182][ T8435] Call Trace: [ 434.324186][ T8435] [ 434.324191][ T8435] dump_stack_lvl+0x100/0x190 [ 434.324206][ T8435] should_fail_ex.cold+0x5/0xa [ 434.324220][ T8435] should_failslab+0xc2/0x120 [ 434.324235][ T8435] __kmalloc_noprof+0xfc/0x820 [ 434.324248][ T8435] ? rcu_is_watching+0x12/0xc0 [ 434.324278][ T8435] ? tomoyo_realpath_from_path+0xb6/0x690 [ 434.324293][ T8435] tomoyo_realpath_from_path+0xb6/0x690 [ 434.324307][ T8435] tomoyo_path_number_perm+0x23c/0x580 [ 434.324323][ T8435] ? tomoyo_path_number_perm+0x22e/0x580 [ 434.324340][ T8435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.324369][ T8435] ? find_held_lock+0x2b/0x80 [ 434.324387][ T8435] ? __fget_files+0x215/0x3d0 [ 434.324397][ T8435] ? hook_file_ioctl_common+0x140/0x440 [ 434.324410][ T8435] ? __fget_files+0x215/0x3d0 [ 434.324423][ T8435] ? __fget_files+0x21f/0x3d0 [ 434.324436][ T8435] security_file_ioctl+0xd3/0x230 [ 434.324454][ T8435] __x64_sys_ioctl+0xb7/0x210 [ 434.324472][ T8435] do_syscall_64+0x115/0x870 [ 434.324484][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.324497][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.324509][ T8435] RIP: 0033:0x7f1fd459db2b [ 434.324518][ T8435] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 434.324529][ T8435] RSP: 002b:00007f1fd551ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.324540][ T8435] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f1fd459db2b [ 434.324547][ T8435] RDX: 00007f1fd551ffd0 RSI: 0000000041015500 RDI: 0000000000000006 [ 434.324553][ T8435] RBP: 00007f1fd551ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 434.324560][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1fd551efa0 [ 434.324566][ T8435] R13: 0000200000000a40 R14: 0000000000000005 R15: 00000000000010d0 [ 434.324585][ T8435] [ 434.324666][ T8435] FAULT_INJECTION: forcing a failure. [ 434.324666][ T8435] name failslab, interval 1, probability 10, space 0, times 48 [ 434.325765][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.325782][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.325786][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.325792][ T5134] Call Trace: [ 434.325796][ T5134] [ 434.325800][ T5134] dump_stack_lvl+0x100/0x190 [ 434.325815][ T5134] should_fail_ex.cold+0x5/0xa [ 434.325828][ T5134] should_failslab+0xc2/0x120 [ 434.325843][ T5134] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 434.325857][ T5134] ? __alloc_skb+0x5b7/0x710 [ 434.325870][ T5134] ? __alloc_skb+0x140/0x710 [ 434.325884][ T5134] __alloc_skb+0x140/0x710 [ 434.325896][ T5134] ? __alloc_skb+0x5b7/0x710 [ 434.325908][ T5134] ? __pfx___alloc_skb+0x10/0x10 [ 434.325921][ T5134] ? trace_sched_exit_tp+0x120/0x160 [ 434.325944][ T5134] alloc_skb_with_frags+0xdd/0x760 [ 434.325958][ T5134] ? find_held_lock+0x2b/0x80 [ 434.325975][ T5134] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 434.325989][ T5134] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 434.326005][ T5134] sock_alloc_send_pskb+0x801/0x980 [ 434.326005][ T8461] FAULT_INJECTION: forcing a failure. [ 434.326005][ T8461] name failslab, interval 1, probability 10, space 0, times 48 [ 434.326019][ T5134] ? avc_has_perm+0x135/0x1e0 [ 434.326033][ T5134] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 434.326045][ T5134] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 434.326049][ T7553] FAULT_INJECTION: forcing a failure. [ 434.326049][ T7553] name failslab, interval 1, probability 10, space 0, times 48 [ 434.326062][ T5134] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 434.326079][ T5134] ? __rcu_read_unlock+0x26a/0x5e0 [ 434.326098][ T5134] unix_dgram_sendmsg+0x3c7/0x1810 [ 434.326117][ T5134] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 434.326133][ T5134] ? selinux_socket_sendmsg+0x198/0x2f0 [ 434.326152][ T5134] __sys_sendto+0x48b/0x4e0 [ 434.326163][ T5134] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 434.326177][ T5134] ? __pfx___sys_sendto+0x10/0x10 [ 434.326193][ T5134] ? __sys_connect+0xe4/0x170 [ 434.326209][ T5134] ? xfd_validate_state+0x129/0x190 [ 434.326228][ T5134] __x64_sys_sendto+0xe0/0x1c0 [ 434.326240][ T5134] ? do_syscall_64+0x90/0x870 [ 434.326252][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.326265][ T5134] do_syscall_64+0x115/0x870 [ 434.326276][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.326290][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.326302][ T5134] RIP: 0033:0x7f34c196d407 [ 434.326311][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.326321][ T5134] RSP: 002b:00007ffebdc5e6c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 434.326331][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.326338][ T5134] RDX: 0000000000000056 RSI: 00007ffebdc5e800 RDI: 0000000000000003 [ 434.326344][ T5134] RBP: 00007ffebdc5ec30 R08: 0000000000000000 R09: 0000000000000000 [ 434.326351][ T5134] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffebdc5ec48 [ 434.326357][ T5134] R13: 00007ffebdc5e800 R14: 000000000000003b R15: 00007ffebdc5e800 [ 434.326371][ T5134] [ 434.327042][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.327058][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.327062][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.327069][ T8435] Call Trace: [ 434.327073][ T8435] [ 434.327078][ T8435] dump_stack_lvl+0x100/0x190 [ 434.327093][ T8435] should_fail_ex.cold+0x5/0xa [ 434.327106][ T8435] should_failslab+0xc2/0x120 [ 434.327116][ T5134] FAULT_INJECTION: forcing a failure. [ 434.327116][ T5134] name failslab, interval 1, probability 10, space 0, times 45 [ 434.327121][ T8435] __kmalloc_noprof+0xfc/0x820 [ 434.327135][ T8435] ? rcu_is_watching+0x12/0xc0 [ 434.327164][ T8435] ? tomoyo_realpath_from_path+0xb6/0x690 [ 434.327179][ T8435] tomoyo_realpath_from_path+0xb6/0x690 [ 434.327194][ T8435] tomoyo_path_number_perm+0x23c/0x580 [ 434.327209][ T8435] ? tomoyo_path_number_perm+0x22e/0x580 [ 434.327227][ T8435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.327259][ T8435] ? find_held_lock+0x2b/0x80 [ 434.327276][ T8435] ? __fget_files+0x215/0x3d0 [ 434.327286][ T8435] ? hook_file_ioctl_common+0x140/0x440 [ 434.327299][ T8435] ? __fget_files+0x215/0x3d0 [ 434.327333][ T8435] ? __fget_files+0x21f/0x3d0 [ 434.327349][ T8435] security_file_ioctl+0xd3/0x230 [ 434.327368][ T8435] __x64_sys_ioctl+0xb7/0x210 [ 434.327386][ T8435] do_syscall_64+0x115/0x870 [ 434.327398][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.327412][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.327423][ T8435] RIP: 0033:0x7f1fd459db2b [ 434.327432][ T8435] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 434.327443][ T8435] RSP: 002b:00007f1fd551ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.327454][ T8435] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f1fd459db2b [ 434.327461][ T8435] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 434.327467][ T8435] RBP: 00007f1fd551ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 434.327474][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.327480][ T8435] R13: 0000200000000a40 R14: 0000000000000005 R15: 00000000000010d0 [ 434.327494][ T8435] [ 434.327502][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.327518][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.327521][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.327527][ T5134] Call Trace: [ 434.327531][ T5134] [ 434.327535][ T5134] dump_stack_lvl+0x100/0x190 [ 434.327550][ T5134] should_fail_ex.cold+0x5/0xa [ 434.327549][ T8435] FAULT_INJECTION: forcing a failure. [ 434.327549][ T8435] name failslab, interval 1, probability 10, space 0, times 44 [ 434.327563][ T5134] should_failslab+0xc2/0x120 [ 434.327578][ T5134] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 434.327596][ T5134] ? sock_alloc_inode+0x26/0x2c0 [ 434.327614][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.327630][ T5134] sock_alloc_inode+0x26/0x2c0 [ 434.327646][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.327662][ T5134] alloc_inode+0x68/0x250 [ 434.327677][ T5134] sock_alloc+0x44/0x280 [ 434.327691][ T5134] ? security_socket_create+0x7f/0x250 [ 434.327719][ T5134] __sock_create+0xc2/0x860 [ 434.327741][ T5134] __sys_socket+0x14d/0x260 [ 434.327752][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.327766][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.327776][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.327789][ T5134] do_syscall_64+0x115/0x870 [ 434.327800][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.327814][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.327825][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.327834][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.327844][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.327854][ T5134] RAX: ffffffffffffffda RBX: 000000000000004a RCX: 00007f34c19e8707 [ 434.327861][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.327867][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000000 R09: 0000000000000000 [ 434.327874][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.327880][ T5134] R13: 00007ffebdc5e800 R14: 000000000000002f R15: 00007ffebdc5e800 [ 434.327894][ T5134] [ 434.327904][ T7553] CPU: 2 UID: 0 PID: 7553 Comm: syz.0.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.327921][ T5134] socket: no more sockets [ 434.327926][ T7553] Tainted: [L]=SOFTLOCKUP [ 434.327932][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.327940][ T7553] Call Trace: [ 434.327945][ T7553] [ 434.327951][ T7553] dump_stack_lvl+0x100/0x190 [ 434.327970][ T7553] should_fail_ex.cold+0x5/0xa [ 434.327995][ T7553] should_failslab+0xc2/0x120 [ 434.328014][ T7553] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 434.328032][ T7553] ? __alloc_skb+0x140/0x710 [ 434.328052][ T7553] __alloc_skb+0x140/0x710 [ 434.328067][ T7553] ? __alloc_skb+0x5b7/0x710 [ 434.328082][ T7553] ? __pfx___alloc_skb+0x10/0x10 [ 434.328089][ T5134] FAULT_INJECTION: forcing a failure. [ 434.328089][ T5134] name failslab, interval 1, probability 10, space 0, times 43 [ 434.328099][ T7553] ? mgmt_send_event_skb+0x2fb/0x460 [ 434.328119][ T7553] mgmt_send_event+0x44/0x180 [ 434.328137][ T7553] mgmt_index_removed+0x225/0x310 [ 434.328159][ T7553] ? __pfx_mgmt_index_removed+0x10/0x10 [ 434.328190][ T7553] hci_unregister_dev+0x57f/0x690 [ 434.328209][ T7553] vhci_release+0x17d/0x230 [ 434.328224][ T7553] ? __pfx_vhci_release+0x10/0x10 [ 434.328239][ T7553] __fput+0x3ff/0xb50 [ 434.328261][ T7553] task_work_run+0x150/0x240 [ 434.328278][ T7553] ? __pfx_task_work_run+0x10/0x10 [ 434.328300][ T7553] do_exit+0x951/0x2ae0 [ 434.328326][ T7553] ? __pfx_do_exit+0x10/0x10 [ 434.328347][ T7553] ? cgroup_update_frozen_flag+0x125/0x240 [ 434.328374][ T7553] ? find_held_lock+0x2b/0x80 [ 434.328396][ T7553] ? get_signal+0x184f/0x21e0 [ 434.328418][ T7553] do_group_exit+0xd5/0x2a0 [ 434.328434][ T7553] get_signal+0x1ec7/0x21e0 [ 434.328460][ T7553] ? __pfx_get_signal+0x10/0x10 [ 434.328478][ T7553] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 434.328500][ T7553] arch_do_signal_or_restart+0x91/0x7e0 [ 434.328517][ T7553] ? get_timespec64+0x147/0x240 [ 434.328534][ T7553] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 434.328557][ T7553] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 434.328579][ T7553] exit_to_user_mode_loop+0x139/0x6f0 [ 434.328599][ T7553] ? rcu_is_watching+0x12/0xc0 [ 434.328622][ T7553] do_syscall_64+0x666/0x870 [ 434.328638][ T7553] ? clear_bhb_loop+0x40/0x90 [ 434.328655][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.328670][ T7553] RIP: 0033:0x7fe19355e6ce [ 434.328682][ T7553] Code: Unable to access opcode bytes at 0x7fe19355e6a4. [ 434.328688][ T7553] RSP: 002b:00007fe19442df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 434.328702][ T7553] RAX: fffffffffffffdfc RBX: 00007fe19442e6c0 RCX: 00007fe19355e6ce [ 434.328711][ T7553] RDX: 00007fe19442dfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.328720][ T7553] RBP: 00007fe193633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.328728][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.328737][ T7553] R13: 00007fe193826128 R14: 00007fe193826090 R15: 00007ffe19ad5128 [ 434.328757][ T7553] [ 434.328764][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.328778][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.328782][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.328789][ T5134] Call Trace: [ 434.328792][ T5134] [ 434.328796][ T5134] dump_stack_lvl+0x100/0x190 [ 434.328810][ T5134] should_fail_ex.cold+0x5/0xa [ 434.328823][ T5134] should_failslab+0xc2/0x120 [ 434.328838][ T5134] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 434.328851][ T5134] ? __alloc_skb+0x5b7/0x710 [ 434.328863][ T5134] ? __alloc_skb+0x140/0x710 [ 434.328878][ T5134] __alloc_skb+0x140/0x710 [ 434.328890][ T5134] ? __alloc_skb+0x5b7/0x710 [ 434.328902][ T5134] ? __pfx___alloc_skb+0x10/0x10 [ 434.328915][ T5134] ? __x64_sys_connect+0x72/0xb0 [ 434.328929][ T5134] alloc_skb_with_frags+0xdd/0x760 [ 434.328944][ T5134] ? find_held_lock+0x2b/0x80 [ 434.328961][ T5134] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 434.328974][ T5134] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 434.328990][ T5134] sock_alloc_send_pskb+0x801/0x980 [ 434.329004][ T5134] ? avc_has_perm+0x135/0x1e0 [ 434.329018][ T5134] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 434.329029][ T5134] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 434.329046][ T5134] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 434.329068][ T5134] unix_dgram_sendmsg+0x3c7/0x1810 [ 434.329086][ T5134] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 434.329102][ T5134] ? selinux_socket_sendmsg+0x198/0x2f0 [ 434.329121][ T5134] __sys_sendto+0x48b/0x4e0 [ 434.329132][ T5134] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 434.329147][ T5134] ? __pfx___sys_sendto+0x10/0x10 [ 434.329175][ T5134] ? __sys_connect+0xe4/0x170 [ 434.329197][ T5134] __x64_sys_sendto+0xe0/0x1c0 [ 434.329209][ T5134] ? do_syscall_64+0x90/0x870 [ 434.329221][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.329233][ T5134] do_syscall_64+0x115/0x870 [ 434.329245][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.329258][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.329270][ T5134] RIP: 0033:0x7f34c196d407 [ 434.329278][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.329288][ T5134] RSP: 002b:00007ffebdc5e6c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 434.329298][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.329305][ T5134] RDX: 00000000000000f9 RSI: 00007ffebdc5e800 RDI: 0000000000000003 [ 434.329311][ T5134] RBP: 00007ffebdc5ec30 R08: 0000000000000000 R09: 0000000000000000 [ 434.329318][ T5134] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffebdc5ec48 [ 434.329324][ T5134] R13: 00007ffebdc5e800 R14: 00000000000000de R15: 00007ffebdc5e800 [ 434.329338][ T5134] [ 434.329361][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.4.635 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.329379][ T8461] Tainted: [L]=SOFTLOCKUP [ 434.329382][ T8461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.329389][ T8461] Call Trace: [ 434.329393][ T8461] [ 434.329397][ T8461] dump_stack_lvl+0x100/0x190 [ 434.329413][ T8461] should_fail_ex.cold+0x5/0xa [ 434.329427][ T8461] should_failslab+0xc2/0x120 [ 434.329441][ T8461] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 434.329456][ T8461] ? __alloc_skb+0x140/0x710 [ 434.329471][ T8461] __alloc_skb+0x140/0x710 [ 434.329485][ T8461] ? __alloc_skb+0x5b7/0x710 [ 434.329502][ T5134] FAULT_INJECTION: forcing a failure. [ 434.329502][ T5134] name failslab, interval 1, probability 10, space 0, times 40 [ 434.329503][ T8461] ? __pfx___alloc_skb+0x10/0x10 [ 434.329529][ T8461] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 434.329549][ T8461] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 434.329574][ T8461] __ipv6_dev_mc_dec+0x297/0x340 [ 434.329602][ T8461] ipv6_mc_destroy_dev+0x2cd/0x690 [ 434.329627][ T8461] ? __local_bh_enable_ip+0x9e/0x120 [ 434.329653][ T8461] addrconf_ifdown.isra.0+0x148a/0x1b70 [ 434.329670][ T8461] ? trace_contention_end+0x126/0x160 [ 434.329701][ T8461] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 434.329730][ T8461] addrconf_notify+0x4a3/0x1ba0 [ 434.329754][ T8461] ? __pfx_tls_dev_event+0x10/0x10 [ 434.329775][ T8461] ? __pfx_addrconf_notify+0x10/0x10 [ 434.329796][ T8461] ? ip6mr_device_event+0x1c4/0x230 [ 434.329820][ T8461] notifier_call_chain+0x99/0x3f0 [ 434.329843][ T8461] call_netdevice_notifiers_info+0xbe/0x110 [ 434.329869][ T8461] unregister_netdevice_many_notify+0x1141/0x2140 [ 434.329896][ T8461] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 434.329919][ T8461] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.329944][ T8461] ? linkwatch_fire_event+0x211/0x270 [ 434.329965][ T8461] ? netif_carrier_off+0xa8/0xc0 [ 434.329995][ T8461] unregister_netdevice_queue+0x30b/0x3c0 [ 434.330018][ T8461] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 434.330039][ T8461] ? linkwatch_schedule_work+0x16f/0x1a0 [ 434.330064][ T8461] ? linkwatch_fire_event+0x74/0x270 [ 434.330089][ T8461] __tun_detach+0x1371/0x16e0 [ 434.330133][ T8461] ? __pfx_tun_chr_close+0x10/0x10 [ 434.330157][ T8461] tun_chr_close+0xc2/0x220 [ 434.330178][ T8461] ? __pfx_tun_chr_close+0x10/0x10 [ 434.330201][ T8461] __fput+0x3ff/0xb50 [ 434.330227][ T8461] task_work_run+0x150/0x240 [ 434.330246][ T8461] ? __pfx_task_work_run+0x10/0x10 [ 434.330265][ T8461] ? do_raw_spin_unlock+0x145/0x1e0 [ 434.330289][ T8461] do_exit+0x951/0x2ae0 [ 434.330317][ T8461] ? __pfx_do_exit+0x10/0x10 [ 434.330342][ T8461] ? do_raw_spin_lock+0x128/0x260 [ 434.330364][ T8461] ? find_held_lock+0x2b/0x80 [ 434.330386][ T8461] ? get_signal+0x7e0/0x21e0 [ 434.330407][ T8461] do_group_exit+0xd5/0x2a0 [ 434.330425][ T8461] get_signal+0x1ec7/0x21e0 [ 434.330456][ T8461] ? __pfx_get_signal+0x10/0x10 [ 434.330497][ T8461] arch_do_signal_or_restart+0x91/0x7e0 [ 434.330517][ T8461] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 434.330535][ T8461] ? __sock_create+0xa3/0x860 [ 434.330563][ T8461] ? __sys_socket+0xac/0x260 [ 434.330582][ T8461] exit_to_user_mode_loop+0x139/0x6f0 [ 434.330601][ T8461] ? rcu_is_watching+0x12/0xc0 [ 434.330627][ T8461] do_syscall_64+0x666/0x870 [ 434.330645][ T8461] ? clear_bhb_loop+0x40/0x90 [ 434.330665][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.330681][ T8461] RIP: 0033:0x7f8a0ef9de99 [ 434.330697][ T8461] Code: Unable to access opcode bytes at 0x7f8a0ef9de6f. [ 434.330704][ T8461] RSP: 002b:00007f8a0fdd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 434.330709][ T7553] FAULT_INJECTION: forcing a failure. [ 434.330709][ T7553] name failslab, interval 1, probability 10, space 0, times 40 [ 434.330720][ T8461] RAX: ffffffffffffffe9 RBX: 00007f8a0f225fa0 RCX: 00007f8a0ef9de99 [ 434.330731][ T8461] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 434.330740][ T8461] RBP: 00007f8a0f033eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.330749][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.330759][ T8461] R13: 00007f8a0f226038 R14: 00007f8a0f225fa0 R15: 00007ffc6a8b64f8 [ 434.330782][ T8461] [ 434.330791][ T7553] CPU: 2 UID: 0 PID: 7553 Comm: syz.0.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.330810][ T7553] Tainted: [L]=SOFTLOCKUP [ 434.330815][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.330823][ T7553] Call Trace: [ 434.330827][ T7553] [ 434.330832][ T7553] dump_stack_lvl+0x100/0x190 [ 434.330850][ T7553] should_fail_ex.cold+0x5/0xa [ 434.330867][ T7553] should_failslab+0xc2/0x120 [ 434.330886][ T7553] __kmalloc_noprof+0xfc/0x820 [ 434.330902][ T7553] ? kobject_get_path+0xcf/0x2c0 [ 434.330925][ T7553] kobject_get_path+0xcf/0x2c0 [ 434.330948][ T7553] kobject_uevent_env+0x287/0x18b0 [ 434.330972][ T7553] ? bus_to_subsys+0x114/0x150 [ 434.331008][ T7553] device_del+0x605/0x9b0 [ 434.331027][ T7553] ? __pfx_device_del+0x10/0x10 [ 434.331043][ T7553] ? kfree_const+0x5f/0x70 [ 434.331060][ T7553] ? kobject_put+0xb9/0x640 [ 434.331082][ T7553] hci_unregister_dev+0x38a/0x690 [ 434.331104][ T7553] vhci_release+0x17d/0x230 [ 434.331133][ T7553] ? __pfx_vhci_release+0x10/0x10 [ 434.331149][ T7553] __fput+0x3ff/0xb50 [ 434.331170][ T7553] task_work_run+0x150/0x240 [ 434.331187][ T7553] ? __pfx_task_work_run+0x10/0x10 [ 434.331210][ T7553] do_exit+0x951/0x2ae0 [ 434.331240][ T7553] ? __pfx_do_exit+0x10/0x10 [ 434.331266][ T7553] ? cgroup_update_frozen_flag+0x125/0x240 [ 434.331290][ T7553] ? find_held_lock+0x2b/0x80 [ 434.331337][ T7553] ? get_signal+0x184f/0x21e0 [ 434.331359][ T7553] do_group_exit+0xd5/0x2a0 [ 434.331387][ T7553] get_signal+0x1ec7/0x21e0 [ 434.331415][ T7553] ? __pfx_get_signal+0x10/0x10 [ 434.331433][ T7553] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 434.331453][ T7553] arch_do_signal_or_restart+0x91/0x7e0 [ 434.331469][ T7553] ? get_timespec64+0x147/0x240 [ 434.331487][ T7553] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 434.331509][ T7553] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 434.331530][ T7553] exit_to_user_mode_loop+0x139/0x6f0 [ 434.331549][ T7553] ? rcu_is_watching+0x12/0xc0 [ 434.331572][ T7553] do_syscall_64+0x666/0x870 [ 434.331587][ T7553] ? clear_bhb_loop+0x40/0x90 [ 434.331600][ T8204] FAULT_INJECTION: forcing a failure. [ 434.331600][ T8204] name failslab, interval 1, probability 10, space 0, times 39 [ 434.331605][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.331619][ T7553] RIP: 0033:0x7fe19355e6ce [ 434.331631][ T7553] Code: Unable to access opcode bytes at 0x7fe19355e6a4. [ 434.331638][ T7553] RSP: 002b:00007fe19442df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 434.331651][ T7553] RAX: fffffffffffffdfc RBX: 00007fe19442e6c0 RCX: 00007fe19355e6ce [ 434.331660][ T7553] RDX: 00007fe19442dfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.331669][ T7553] RBP: 00007fe193633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.331677][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.331686][ T7553] R13: 00007fe193826128 R14: 00007fe193826090 R15: 00007ffe19ad5128 [ 434.331705][ T7553] [ 434.331714][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.331731][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.331734][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.331740][ T8435] Call Trace: [ 434.331745][ T8435] [ 434.331750][ T8435] dump_stack_lvl+0x100/0x190 [ 434.331776][ T8435] should_fail_ex.cold+0x5/0xa [ 434.331794][ T8435] should_failslab+0xc2/0x120 [ 434.331810][ T8435] __kmalloc_cache_noprof+0x91/0x6c0 [ 434.331829][ T8435] ? bus_add_driver+0x92/0x5b0 [ 434.331846][ T8435] bus_add_driver+0x92/0x5b0 [ 434.331860][ T8435] driver_register+0x1e2/0x360 [ 434.331877][ T8435] ? rcu_is_watching+0x12/0xc0 [ 434.331895][ T8435] usb_gadget_register_driver_owner+0x132/0x210 [ 434.331915][ T8435] raw_ioctl+0x1a85/0x2b80 [ 434.331932][ T8435] ? __fget_files+0x215/0x3d0 [ 434.331946][ T8435] ? __pfx_raw_ioctl+0x10/0x10 [ 434.331962][ T8435] ? selinux_file_ioctl+0x13b/0x290 [ 434.331979][ T8435] ? selinux_file_ioctl+0xb6/0x290 [ 434.331997][ T8435] ? __pfx_raw_ioctl+0x10/0x10 [ 434.332016][ T8435] __x64_sys_ioctl+0x18e/0x210 [ 434.332037][ T8435] do_syscall_64+0x115/0x870 [ 434.332049][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.332063][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.332075][ T8435] RIP: 0033:0x7f1fd459db2b [ 434.332084][ T8435] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 434.332095][ T8435] RSP: 002b:00007f1fd551ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.332107][ T8435] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f1fd459db2b [ 434.332115][ T8435] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 434.332122][ T8435] RBP: 00007f1fd551ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 434.332129][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.332135][ T8435] R13: 0000200000000a40 R14: 0000000000000005 R15: 00000000000010d0 [ 434.332149][ T8435] [ 434.332272][ T8435] UDC core: USB Raw Gadget: driver registration failed: -12 [ 434.332286][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 434.332615][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.332630][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.332634][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.332640][ T5134] Call Trace: [ 434.332644][ T5134] [ 434.332647][ T5134] dump_stack_lvl+0x100/0x190 [ 434.332662][ T5134] should_fail_ex.cold+0x5/0xa [ 434.332675][ T5134] should_failslab+0xc2/0x120 [ 434.332690][ T5134] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.332703][ T5134] ? do_getname_kernel+0x5d/0x250 [ 434.332720][ T5134] do_getname_kernel+0x5d/0x250 [ 434.332734][ T5134] kern_path+0x1f/0x50 [ 434.332744][ T5134] unix_find_other+0x120/0xb10 [ 434.332757][ T5134] ? release_sock+0x21/0x280 [ 434.332771][ T5134] ? __pfx_unix_find_other+0x10/0x10 [ 434.332785][ T5134] ? selinux_netlbl_socket_connect+0x30/0x40 [ 434.332803][ T5134] ? find_held_lock+0x2b/0x80 [ 434.332820][ T5134] ? selinux_netlbl_socket_connect+0x30/0x40 [ 434.332838][ T5134] ? selinux_netlbl_socket_connect+0x30/0x40 [ 434.332859][ T5134] unix_dgram_connect+0x1ea/0xbf0 [ 434.332876][ T5134] ? __pfx_unix_dgram_connect+0x10/0x10 [ 434.332889][ T5134] __sys_connect_file+0x141/0x1a0 [ 434.332902][ T5134] __sys_connect+0x141/0x170 [ 434.332914][ T5134] ? __pfx___sys_connect+0x10/0x10 [ 434.332934][ T5134] __x64_sys_connect+0x72/0xb0 [ 434.332946][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.332958][ T5134] do_syscall_64+0x115/0x870 [ 434.332969][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.332983][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.332994][ T5134] RIP: 0033:0x7f34c196d407 [ 434.333003][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.333013][ T5134] RSP: 002b:00007ffebdc5e690 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 434.333023][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.333030][ T5134] RDX: 000000000000006e RSI: 00007f34c1a74560 RDI: 0000000000000003 [ 434.333036][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000000 R09: 0000000000000000 [ 434.333043][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.333049][ T5134] R13: 0000000000000069 R14: 00000000000000de R15: 00007ffebdc5e800 [ 434.333062][ T5134] [ 434.333158][ T5134] FAULT_INJECTION: forcing a failure. [ 434.333158][ T5134] name failslab, interval 1, probability 10, space 0, times 37 [ 434.334352][ T8435] FAULT_INJECTION: forcing a failure. [ 434.334352][ T8435] name failslab, interval 1, probability 10, space 0, times 35 [ 434.334370][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.334386][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.334390][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.334408][ T8435] Call Trace: [ 434.334413][ T8435] [ 434.334417][ T8435] dump_stack_lvl+0x100/0x190 [ 434.334432][ T8435] should_fail_ex.cold+0x5/0xa [ 434.334446][ T8435] should_failslab+0xc2/0x120 [ 434.334461][ T8435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.334473][ T8435] ? stack_trace_save+0x8e/0xc0 [ 434.334485][ T8435] ? alloc_empty_file+0x5b/0x1c0 [ 434.334502][ T8435] alloc_empty_file+0x5b/0x1c0 [ 434.334516][ T8435] path_openat+0xe7/0x4280 [ 434.334527][ T8435] ? __kasan_slab_alloc+0x89/0x90 [ 434.334541][ T8435] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 434.334552][ T8435] ? do_getname+0x35/0x390 [ 434.334566][ T8435] ? do_sys_openat2+0xc7/0x1e0 [ 434.334579][ T8435] ? __x64_sys_openat+0x12d/0x210 [ 434.334598][ T8435] ? do_syscall_64+0x115/0x870 [ 434.334609][ T8435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.334626][ T8435] ? __pfx_path_openat+0x10/0x10 [ 434.334641][ T8435] do_file_open+0x20e/0x430 [ 434.334654][ T8435] ? __pfx_do_file_open+0x10/0x10 [ 434.334676][ T8435] ? alloc_fd+0x471/0x7a0 [ 434.334689][ T8435] ? do_getname+0x191/0x390 [ 434.334704][ T8435] do_sys_openat2+0x10f/0x1e0 [ 434.334718][ T8435] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.334733][ T8435] ? raw_ioctl+0x26f/0x2b80 [ 434.334752][ T8435] __x64_sys_openat+0x12d/0x210 [ 434.334766][ T8435] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.334786][ T8435] do_syscall_64+0x115/0x870 [ 434.334797][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.334811][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.334822][ T8435] RIP: 0033:0x7f1fd455e6ce [ 434.334831][ T8435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.334841][ T8435] RSP: 002b:00007f1fd551eea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.334852][ T8435] RAX: ffffffffffffffda RBX: 00007f1fd55216c0 RCX: 00007f1fd455e6ce [ 434.334859][ T8435] RDX: 0000000000000002 RSI: 00007f1fd463324a RDI: ffffffffffffff9c [ 434.334866][ T8435] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.334872][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005a [ 434.334878][ T8435] R13: 0000200000000e00 R14: 0000000000000001 R15: 00007ffec9adbba8 [ 434.334892][ T8435] [ 434.335771][ T8435] FAULT_INJECTION: forcing a failure. [ 434.335771][ T8435] name failslab, interval 1, probability 10, space 0, times 34 [ 434.335825][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.335841][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.335844][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.335850][ T8435] Call Trace: [ 434.335854][ T8435] [ 434.335858][ T8435] dump_stack_lvl+0x100/0x190 [ 434.335873][ T8435] should_fail_ex.cold+0x5/0xa [ 434.335886][ T8435] should_failslab+0xc2/0x120 [ 434.335901][ T8435] __kmalloc_noprof+0xfc/0x820 [ 434.335913][ T8435] ? tomoyo_encode2+0xfb/0x3c0 [ 434.335927][ T8435] tomoyo_encode2+0xfb/0x3c0 [ 434.335951][ T8435] tomoyo_encode+0x29/0x50 [ 434.335962][ T8435] tomoyo_realpath_from_path+0x18c/0x690 [ 434.335976][ T8435] tomoyo_check_open_permission+0x2af/0x3c0 [ 434.335993][ T8435] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.336014][ T8435] ? hook_file_open+0x24f/0x8f0 [ 434.336037][ T8435] ? path_get+0x61/0x80 [ 434.336051][ T8435] tomoyo_file_open+0x6b/0x90 [ 434.336064][ T8435] security_file_open+0xb5/0x1e0 [ 434.336076][ T8435] do_dentry_open+0x588/0x14d0 [ 434.336090][ T8435] vfs_open+0x82/0x3f0 [ 434.336105][ T8435] path_openat+0x2873/0x4280 [ 434.336122][ T8435] ? __pfx_path_openat+0x10/0x10 [ 434.336138][ T8435] do_file_open+0x20e/0x430 [ 434.336150][ T8435] ? __pfx_do_file_open+0x10/0x10 [ 434.336172][ T8435] ? alloc_fd+0x471/0x7a0 [ 434.336185][ T8435] ? do_getname+0x191/0x390 [ 434.336200][ T8435] do_sys_openat2+0x10f/0x1e0 [ 434.336214][ T8435] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.336233][ T8435] __x64_sys_openat+0x12d/0x210 [ 434.336248][ T8435] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.336268][ T8435] do_syscall_64+0x115/0x870 [ 434.336279][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.336292][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.336304][ T8435] RIP: 0033:0x7f1fd455e6ce [ 434.336312][ T8435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.336322][ T8435] RSP: 002b:00007f1fd551eea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.336332][ T8435] RAX: ffffffffffffffda RBX: 00007f1fd55216c0 RCX: 00007f1fd455e6ce [ 434.336339][ T8435] RDX: 0000000000000002 RSI: 00007f1fd463324a RDI: ffffffffffffff9c [ 434.336345][ T8435] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.336351][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000009d [ 434.336358][ T8435] R13: 00002000000014c0 R14: 0000000000000004 R15: 00007ffec9adbba8 [ 434.336372][ T8435] [ 434.336502][ T8435] FAULT_INJECTION: forcing a failure. [ 434.336502][ T8435] name failslab, interval 1, probability 10, space 0, times 33 [ 434.336518][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.336546][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.336550][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.336556][ T8435] Call Trace: [ 434.336560][ T8435] [ 434.336564][ T8435] dump_stack_lvl+0x100/0x190 [ 434.336579][ T8435] should_fail_ex.cold+0x5/0xa [ 434.336598][ T8435] should_failslab+0xc2/0x120 [ 434.336612][ T8435] __kmalloc_noprof+0xfc/0x820 [ 434.336626][ T8435] ? tomoyo_encode2+0xfb/0x3c0 [ 434.336639][ T8435] tomoyo_encode2+0xfb/0x3c0 [ 434.336652][ T8435] tomoyo_encode+0x29/0x50 [ 434.336662][ T8435] tomoyo_realpath_from_path+0x18c/0x690 [ 434.336677][ T8435] tomoyo_path_number_perm+0x23c/0x580 [ 434.336692][ T8435] ? tomoyo_path_number_perm+0x22e/0x580 [ 434.336709][ T8435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.336739][ T8435] ? find_held_lock+0x2b/0x80 [ 434.336756][ T8435] ? __fget_files+0x215/0x3d0 [ 434.336766][ T8435] ? hook_file_ioctl_common+0x140/0x440 [ 434.336778][ T8435] ? __fget_files+0x215/0x3d0 [ 434.336792][ T8435] ? __fget_files+0x21f/0x3d0 [ 434.336805][ T8435] security_file_ioctl+0xd3/0x230 [ 434.336823][ T8435] __x64_sys_ioctl+0xb7/0x210 [ 434.336840][ T8435] do_syscall_64+0x115/0x870 [ 434.336852][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.336866][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.336877][ T8435] RIP: 0033:0x7f1fd459db2b [ 434.336885][ T8435] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 434.336895][ T8435] RSP: 002b:00007f1fd551ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.336905][ T8435] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f1fd459db2b [ 434.336912][ T8435] RDX: 00007f1fd551ffd0 RSI: 0000000041015500 RDI: 0000000000000008 [ 434.336918][ T8435] RBP: 00007f1fd551ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 434.336924][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1fd551efa0 [ 434.336931][ T8435] R13: 00002000000014c0 R14: 0000000000000004 R15: 00000000000021a0 [ 434.336945][ T8435] [ 434.338809][ T8435] FAULT_INJECTION: forcing a failure. [ 434.338809][ T8435] name failslab, interval 1, probability 10, space 0, times 32 [ 434.338827][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.338842][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.338846][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.338852][ T8435] Call Trace: [ 434.338855][ T8435] [ 434.338859][ T8435] dump_stack_lvl+0x100/0x190 [ 434.338874][ T8435] should_fail_ex.cold+0x5/0xa [ 434.338888][ T8435] should_failslab+0xc2/0x120 [ 434.338902][ T8435] __kmalloc_noprof+0xfc/0x820 [ 434.338928][ T8435] ? tomoyo_encode2+0xfb/0x3c0 [ 434.338942][ T8435] tomoyo_encode2+0xfb/0x3c0 [ 434.338954][ T8435] tomoyo_encode+0x29/0x50 [ 434.338965][ T8435] tomoyo_realpath_from_path+0x18c/0x690 [ 434.338979][ T8435] tomoyo_path_number_perm+0x23c/0x580 [ 434.338994][ T8435] ? tomoyo_path_number_perm+0x22e/0x580 [ 434.339011][ T8435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.339041][ T8435] ? find_held_lock+0x2b/0x80 [ 434.339057][ T8435] ? __fget_files+0x215/0x3d0 [ 434.339068][ T8435] ? hook_file_ioctl_common+0x140/0x440 [ 434.339080][ T8435] ? __fget_files+0x215/0x3d0 [ 434.339093][ T8435] ? __fget_files+0x21f/0x3d0 [ 434.339106][ T8435] security_file_ioctl+0xd3/0x230 [ 434.339124][ T8435] __x64_sys_ioctl+0xb7/0x210 [ 434.339141][ T8435] do_syscall_64+0x115/0x870 [ 434.339153][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.339166][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.339177][ T8435] RIP: 0033:0x7f1fd459db2b [ 434.339186][ T8435] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 434.339196][ T8435] RSP: 002b:00007f1fd551ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.339207][ T8435] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f1fd459db2b [ 434.339213][ T8435] RDX: 00007f1fd551ffd0 RSI: 0000000041015500 RDI: 0000000000000009 [ 434.339220][ T8435] RBP: 00007f1fd551ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 434.339226][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1fd551efa0 [ 434.339233][ T8435] R13: 0000200000001d80 R14: 6e5c2191e9c71ecb R15: 0000000000002a08 [ 434.339247][ T8435] [ 434.339927][ T8435] FAULT_INJECTION: forcing a failure. [ 434.339927][ T8435] name failslab, interval 1, probability 10, space 0, times 31 [ 434.342685][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.342715][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.342719][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.342726][ T8435] Call Trace: [ 434.342729][ T8435] [ 434.342734][ T8435] dump_stack_lvl+0x100/0x190 [ 434.342749][ T8435] should_fail_ex.cold+0x5/0xa [ 434.342776][ T8435] should_failslab+0xc2/0x120 [ 434.342790][ T8435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.342804][ T8435] ? vm_area_dup+0x27/0x8e0 [ 434.342823][ T8435] vm_area_dup+0x27/0x8e0 [ 434.342841][ T8435] __split_vma+0x18c/0xda0 [ 434.342861][ T8435] ? __pfx___split_vma+0x10/0x10 [ 434.342879][ T8435] ? __lock_acquire+0x49f/0x1a40 [ 434.342899][ T8435] vma_modify+0x12ad/0x25c0 [ 434.342915][ T8435] ? __pfx_vma_modify+0x10/0x10 [ 434.342925][ T8435] ? lockdep_hardirqs_on+0x78/0x100 [ 434.342937][ T8435] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 434.342954][ T8435] ? rcu_is_watching+0x12/0xc0 [ 434.342977][ T8435] vma_modify_flags+0x257/0x3d0 [ 434.342988][ T8435] ? __pfx_vma_modify_flags+0x10/0x10 [ 434.342999][ T8435] ? __resched_curr+0x42e/0x500 [ 434.343019][ T8435] ? __pfx_ima_file_mprotect+0x10/0x10 [ 434.343034][ T8435] mprotect_fixup+0x27a/0xe30 [ 434.343056][ T8435] ? __pfx_mprotect_fixup+0x10/0x10 [ 434.343082][ T8435] ? __pfx_mas_prev+0x10/0x10 [ 434.343099][ T8435] do_mprotect_pkey+0xa4b/0xef0 [ 434.343121][ T8435] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 434.343145][ T8435] ? raw_ioctl+0x26f/0x2b80 [ 434.343171][ T8435] __x64_sys_mprotect+0x78/0xc0 [ 434.343180][ T8435] ? lockdep_hardirqs_on+0x78/0x100 [ 434.343192][ T8435] do_syscall_64+0x115/0x870 [ 434.343204][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.343218][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.343229][ T8435] RIP: 0033:0x7f1fd459de99 [ 434.343238][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.343248][ T8435] RSP: 002b:00007f1fd5521028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 434.343259][ T8435] RAX: ffffffffffffffda RBX: 00007f1fd4825fa0 RCX: 00007f1fd459de99 [ 434.343266][ T8435] RDX: 000000000000000e RSI: 0000000000004000 RDI: 0000200000ffb000 [ 434.343272][ T8435] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.343279][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.343285][ T8435] R13: 00007f1fd4826038 R14: 00007f1fd4825fa0 R15: 00007ffec9adbba8 [ 434.343299][ T8435] [ 434.343609][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.343633][ T8204] Tainted: [L]=SOFTLOCKUP [ 434.343639][ T8204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.343648][ T8204] Call Trace: [ 434.343655][ T8204] [ 434.343661][ T8204] dump_stack_lvl+0x100/0x190 [ 434.343692][ T8204] should_fail_ex.cold+0x5/0xa [ 434.343715][ T8204] should_failslab+0xc2/0x120 [ 434.343738][ T8204] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 434.343760][ T8204] ? __d_alloc+0x35/0xa50 [ 434.343786][ T8204] __d_alloc+0x35/0xa50 [ 434.343809][ T8204] d_alloc+0x4a/0x1e0 [ 434.343831][ T8204] lookup_one_qstr_excl+0x171/0x250 [ 434.343853][ T8204] ? mnt_want_write+0x161/0x410 [ 434.343872][ T8204] filename_unlinkat+0x275/0x730 [ 434.343892][ T8204] ? __might_fault+0xc5/0x140 [ 434.343912][ T8204] ? __pfx_filename_unlinkat+0x10/0x10 [ 434.343943][ T8204] ? do_getname+0x191/0x390 [ 434.343967][ T8204] __x64_sys_unlink+0x46/0x70 [ 434.343988][ T8204] do_syscall_64+0x115/0x870 [ 434.344007][ T8204] ? clear_bhb_loop+0x40/0x90 [ 434.344029][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.344047][ T8204] RIP: 0033:0x7fd628915937 [ 434.344063][ T8204] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 434.344080][ T8204] RSP: 002b:00007ffe97f747c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 434.344098][ T8204] RAX: ffffffffffffffda RBX: 00007ffe97f747d0 RCX: 00007fd628915937 [ 434.344109][ T8204] RDX: 0000000000000000 RSI: 00000000000003e2 RDI: 00007ffe97f747d0 [ 434.344120][ T8204] RBP: 000055ff70e4a0c0 R08: 0000000000000000 R09: 0000000000000000 [ 434.344130][ T8204] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000aba9500 [ 434.344141][ T8204] R13: 0000000003938700 R14: 000055ff5c6a3100 R15: 000055ff5c6a3140 [ 434.344165][ T8204] [ 434.344693][ T8435] FAULT_INJECTION: forcing a failure. [ 434.344693][ T8435] name failslab, interval 1, probability 10, space 0, times 29 [ 434.346913][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.346929][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.346933][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.346939][ T5134] Call Trace: [ 434.346942][ T5134] [ 434.346947][ T5134] dump_stack_lvl+0x100/0x190 [ 434.346962][ T5134] should_fail_ex.cold+0x5/0xa [ 434.346975][ T5134] should_failslab+0xc2/0x120 [ 434.346990][ T5134] __kmalloc_noprof+0xfc/0x820 [ 434.347003][ T5134] ? trace_kmem_cache_alloc+0xdd/0x100 [ 434.347018][ T5134] ? lsm_blob_alloc+0x68/0x90 [ 434.347036][ T5134] lsm_blob_alloc+0x68/0x90 [ 434.347054][ T5134] security_sk_alloc+0x2d/0x290 [ 434.347077][ T5134] sk_prot_alloc+0x1d1/0x2a0 [ 434.347103][ T5134] sk_alloc+0x36/0xe80 [ 434.347120][ T5134] unix_create1+0xa6/0x700 [ 434.347140][ T5134] unix_create+0x11e/0x240 [ 434.347158][ T5134] __sock_create+0x339/0x860 [ 434.347187][ T5134] __sys_socket+0x14d/0x260 [ 434.347202][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.347221][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.347236][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.347254][ T5134] do_syscall_64+0x115/0x870 [ 434.347271][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.347291][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.347329][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.347343][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.347359][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.347374][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.347384][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.347394][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.347404][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.347413][ T5134] R13: 00007ffebdc5e800 R14: 000000000000005d R15: 00007ffebdc5e800 [ 434.347432][ T5134] [ 434.347581][ T5134] FAULT_INJECTION: forcing a failure. [ 434.347581][ T5134] name failslab, interval 1, probability 10, space 0, times 27 [ 434.348784][ T8435] CPU: 2 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.348806][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.348811][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.348819][ T8435] Call Trace: [ 434.348825][ T8435] [ 434.348832][ T8435] dump_stack_lvl+0x100/0x190 [ 434.348852][ T8435] should_fail_ex.cold+0x5/0xa [ 434.348872][ T8435] should_failslab+0xc2/0x120 [ 434.348891][ T8435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.348907][ T8435] ? d_instantiate+0x8a/0xb0 [ 434.348925][ T8435] ? d_instantiate+0x8a/0xb0 [ 434.348942][ T8435] ? alloc_empty_file+0x5b/0x1c0 [ 434.348969][ T8435] alloc_empty_file+0x5b/0x1c0 [ 434.348988][ T8435] alloc_file_pseudo+0x183/0x290 [ 434.349008][ T8435] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 434.349026][ T8435] ? alloc_fd+0x471/0x7a0 [ 434.349044][ T8435] sock_alloc_file+0x50/0x210 [ 434.349064][ T8435] __sys_socket+0x1c0/0x260 [ 434.349079][ T8435] ? __pfx___sys_socket+0x10/0x10 [ 434.349098][ T8435] __x64_sys_socket+0x72/0xb0 [ 434.349111][ T8435] ? lockdep_hardirqs_on+0x78/0x100 [ 434.349126][ T8435] do_syscall_64+0x115/0x870 [ 434.349142][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.349159][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.349173][ T8435] RIP: 0033:0x7f1fd459de99 [ 434.349185][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.349199][ T8435] RSP: 002b:00007f1fd5521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 434.349212][ T8435] RAX: ffffffffffffffda RBX: 00007f1fd4825fa0 RCX: 00007f1fd459de99 [ 434.349222][ T8435] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 434.349230][ T8435] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.349239][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.349247][ T8435] R13: 00007f1fd4826038 R14: 00007f1fd4825fa0 R15: 00007ffec9adbba8 [ 434.349265][ T8435] [ 434.351982][ T8435] FAULT_INJECTION: forcing a failure. [ 434.351982][ T8435] name failslab, interval 1, probability 10, space 0, times 25 [ 434.352929][ T5145] FAULT_INJECTION: forcing a failure. [ 434.352929][ T5145] name failslab, interval 1, probability 10, space 0, times 25 [ 434.352966][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.352981][ T5145] Tainted: [L]=SOFTLOCKUP [ 434.352985][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.352991][ T5145] Call Trace: [ 434.352995][ T5145] [ 434.352999][ T5145] dump_stack_lvl+0x100/0x190 [ 434.353015][ T5145] should_fail_ex.cold+0x5/0xa [ 434.353029][ T5145] should_failslab+0xc2/0x120 [ 434.353043][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.353057][ T5145] ? seq_open+0x55/0x170 [ 434.353076][ T5145] seq_open+0x55/0x170 [ 434.353092][ T5145] kernfs_fop_open+0x590/0xd50 [ 434.353112][ T5145] do_dentry_open+0x6ab/0x14d0 [ 434.353125][ T5145] ? __pfx_kernfs_fop_open+0x10/0x10 [ 434.353143][ T5145] vfs_open+0x82/0x3f0 [ 434.353158][ T5145] path_openat+0x2873/0x4280 [ 434.353176][ T5145] ? __pfx_path_openat+0x10/0x10 [ 434.353193][ T5145] do_file_open+0x20e/0x430 [ 434.353206][ T5145] ? __pfx_do_file_open+0x10/0x10 [ 434.353228][ T5145] ? alloc_fd+0x471/0x7a0 [ 434.353241][ T5145] ? do_getname+0x191/0x390 [ 434.353261][ T5145] do_sys_openat2+0x10f/0x1e0 [ 434.353281][ T5145] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.353304][ T5145] ? __x64_sys_recvmsg+0x1b9/0x260 [ 434.353330][ T5145] __x64_sys_openat+0x12d/0x210 [ 434.353355][ T5145] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.353385][ T5145] do_syscall_64+0x115/0x870 [ 434.353403][ T5145] ? clear_bhb_loop+0x40/0x90 [ 434.353423][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.353440][ T5145] RIP: 0033:0x7fd6288a7407 [ 434.353454][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.353469][ T5145] RSP: 002b:00007ffe97f70780 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.353485][ T5145] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.353496][ T5145] RDX: 0000000000080000 RSI: 00007ffe97f70900 RDI: ffffffffffffff9c [ 434.353506][ T5145] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 434.353515][ T5145] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ff5c6887f5 [ 434.353527][ T5145] R13: 000055ff5c6887f5 R14: 0000000000000001 R15: 0000000000000000 [ 434.353549][ T5145] [ 434.353933][ T8204] FAULT_INJECTION: forcing a failure. [ 434.353933][ T8204] name failslab, interval 1, probability 10, space 0, times 24 [ 434.353951][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.353965][ T8204] Tainted: [L]=SOFTLOCKUP [ 434.353969][ T8204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.353976][ T8204] Call Trace: [ 434.353979][ T8204] [ 434.353983][ T8204] dump_stack_lvl+0x100/0x190 [ 434.353998][ T8204] should_fail_ex.cold+0x5/0xa [ 434.354012][ T8204] should_failslab+0xc2/0x120 [ 434.354027][ T8204] __kmalloc_noprof+0xfc/0x820 [ 434.354040][ T8204] ? tomoyo_encode2+0xfb/0x3c0 [ 434.354054][ T8204] tomoyo_encode2+0xfb/0x3c0 [ 434.354066][ T8204] tomoyo_encode+0x29/0x50 [ 434.354076][ T8204] tomoyo_realpath_from_path+0x18c/0x690 [ 434.354090][ T8204] tomoyo_check_open_permission+0x2af/0x3c0 [ 434.354107][ T8204] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.354128][ T8204] ? hook_file_open+0x24f/0x8f0 [ 434.354151][ T8204] ? path_get+0x61/0x80 [ 434.354166][ T8204] tomoyo_file_open+0x6b/0x90 [ 434.354180][ T8204] security_file_open+0xb5/0x1e0 [ 434.354194][ T8204] do_dentry_open+0x588/0x14d0 [ 434.354208][ T8204] vfs_open+0x82/0x3f0 [ 434.354223][ T8204] path_openat+0x2873/0x4280 [ 434.354240][ T8204] ? __pfx_path_openat+0x10/0x10 [ 434.354256][ T8204] do_file_open+0x20e/0x430 [ 434.354269][ T8204] ? __pfx_do_file_open+0x10/0x10 [ 434.354290][ T8204] ? alloc_fd+0x471/0x7a0 [ 434.354303][ T8204] ? do_getname+0x191/0x390 [ 434.354318][ T8204] do_sys_openat2+0x10f/0x1e0 [ 434.354332][ T8204] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.354349][ T8204] ? __x64_sys_recvmsg+0x1b9/0x260 [ 434.354365][ T8204] __x64_sys_openat+0x12d/0x210 [ 434.354380][ T8204] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.354419][ T8204] do_syscall_64+0x115/0x870 [ 434.354432][ T8204] ? clear_bhb_loop+0x40/0x90 [ 434.354446][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.354457][ T8204] RIP: 0033:0x7fd6288a7407 [ 434.354465][ T8204] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.354476][ T8204] RSP: 002b:00007ffe97f6c160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.354485][ T8204] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.354492][ T8204] RDX: 0000000000080000 RSI: 00007ffe97f6c2e0 RDI: ffffffffffffff9c [ 434.354499][ T8204] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 434.354505][ T8204] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ff5c6887f5 [ 434.354511][ T8204] R13: 000055ff5c6887f5 R14: 0000000000000001 R15: 000055ff5c6a3140 [ 434.354525][ T8204] [ 434.354558][ T8204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.355076][ T8204] FAULT_INJECTION: forcing a failure. [ 434.355076][ T8204] name failslab, interval 1, probability 10, space 0, times 23 [ 434.355092][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.355107][ T8204] Tainted: [L]=SOFTLOCKUP [ 434.355111][ T8204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.355117][ T8204] Call Trace: [ 434.355120][ T8204] [ 434.355124][ T8204] dump_stack_lvl+0x100/0x190 [ 434.355139][ T8204] should_fail_ex.cold+0x5/0xa [ 434.355152][ T8204] should_failslab+0xc2/0x120 [ 434.355167][ T8204] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.355180][ T8204] ? seq_open+0x55/0x170 [ 434.355201][ T8204] seq_open+0x55/0x170 [ 434.355217][ T8204] kernfs_fop_open+0x590/0xd50 [ 434.355235][ T8204] do_dentry_open+0x6ab/0x14d0 [ 434.355245][ T8204] ? __pfx_kernfs_fop_open+0x10/0x10 [ 434.355264][ T8204] vfs_open+0x82/0x3f0 [ 434.355278][ T8204] path_openat+0x2873/0x4280 [ 434.355296][ T8204] ? __pfx_path_openat+0x10/0x10 [ 434.355335][ T8204] do_file_open+0x20e/0x430 [ 434.355349][ T8204] ? __pfx_do_file_open+0x10/0x10 [ 434.355370][ T8204] ? alloc_fd+0x471/0x7a0 [ 434.355383][ T8204] ? do_getname+0x191/0x390 [ 434.355399][ T8204] do_sys_openat2+0x10f/0x1e0 [ 434.355413][ T8204] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.355433][ T8204] __x64_sys_openat+0x12d/0x210 [ 434.355450][ T8204] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.355469][ T8204] ? putname+0xb1/0x110 [ 434.355494][ T8204] do_syscall_64+0x115/0x870 [ 434.355510][ T8204] ? clear_bhb_loop+0x40/0x90 [ 434.355528][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.355544][ T8204] RIP: 0033:0x7fd6288a7407 [ 434.355557][ T8204] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.355572][ T8204] RSP: 002b:00007ffe97f705c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.355586][ T8204] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.355597][ T8204] RDX: 0000000000080000 RSI: 00007ffe97f70740 RDI: ffffffffffffff9c [ 434.355606][ T8204] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 434.355615][ T8204] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ff5c6887f5 [ 434.355625][ T8204] R13: 000055ff5c6887f5 R14: 0000000000000001 R15: 0000000000000000 [ 434.355646][ T8204] [ 434.356051][ T5145] FAULT_INJECTION: forcing a failure. [ 434.356051][ T5145] name failslab, interval 1, probability 10, space 0, times 22 [ 434.356076][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.356096][ T5145] Tainted: [L]=SOFTLOCKUP [ 434.356101][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.356110][ T5145] Call Trace: [ 434.356114][ T5145] [ 434.356120][ T5145] dump_stack_lvl+0x100/0x190 [ 434.356140][ T5145] should_fail_ex.cold+0x5/0xa [ 434.356160][ T5145] should_failslab+0xc2/0x120 [ 434.356181][ T5145] __kmalloc_noprof+0xfc/0x820 [ 434.356198][ T5145] ? rcu_is_watching+0x12/0xc0 [ 434.356223][ T5145] ? tomoyo_realpath_from_path+0xb6/0x690 [ 434.356245][ T5145] tomoyo_realpath_from_path+0xb6/0x690 [ 434.356269][ T5145] tomoyo_check_open_permission+0x2af/0x3c0 [ 434.356297][ T5145] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.356328][ T5145] ? hook_file_open+0x24f/0x8f0 [ 434.356350][ T5145] ? lock_acquire+0x1b9/0x370 [ 434.356369][ T5145] tomoyo_file_open+0x6b/0x90 [ 434.356383][ T5145] security_file_open+0xb5/0x1e0 [ 434.356395][ T5145] do_dentry_open+0x588/0x14d0 [ 434.356410][ T5145] vfs_open+0x82/0x3f0 [ 434.356426][ T5145] path_openat+0x2873/0x4280 [ 434.356445][ T5145] ? __pfx_path_openat+0x10/0x10 [ 434.356477][ T5145] do_file_open+0x20e/0x430 [ 434.356493][ T5145] ? __pfx_do_file_open+0x10/0x10 [ 434.356516][ T5145] ? alloc_fd+0x471/0x7a0 [ 434.356529][ T5145] ? do_getname+0x191/0x390 [ 434.356546][ T5145] do_sys_openat2+0x10f/0x1e0 [ 434.356561][ T5145] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.356579][ T5145] ? __x64_sys_recvmsg+0x1b9/0x260 [ 434.356596][ T5145] __x64_sys_openat+0x12d/0x210 [ 434.356612][ T5145] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.356633][ T5145] do_syscall_64+0x115/0x870 [ 434.356645][ T5145] ? clear_bhb_loop+0x40/0x90 [ 434.356658][ T8181] FAULT_INJECTION: forcing a failure. [ 434.356658][ T8181] name failslab, interval 1, probability 10, space 0, times 22 [ 434.356660][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.356672][ T5145] RIP: 0033:0x7fd6288a7407 [ 434.356681][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.356697][ T5145] RSP: 002b:00007ffe97f74d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.356707][ T5145] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.356714][ T5145] RDX: 0000000000080141 RSI: 000055ff5c68802e RDI: ffffffffffffff9c [ 434.356721][ T5145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.356728][ T5145] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 434.356734][ T5145] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 434.356749][ T5145] [ 434.356757][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.356774][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.356777][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.356783][ T5134] Call Trace: [ 434.356787][ T5134] [ 434.356791][ T5134] dump_stack_lvl+0x100/0x190 [ 434.356806][ T5134] should_fail_ex.cold+0x5/0xa [ 434.356813][ T5145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.356820][ T5134] should_failslab+0xc2/0x120 [ 434.356835][ T5134] __kmalloc_noprof+0xfc/0x820 [ 434.356848][ T5134] ? tomoyo_encode2+0xfb/0x3c0 [ 434.356861][ T5134] tomoyo_encode2+0xfb/0x3c0 [ 434.356874][ T5134] tomoyo_unix_entry+0x343/0x640 [ 434.356892][ T5134] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 434.356919][ T5134] ? rcu_is_watching+0x12/0xc0 [ 434.356943][ T5134] ? trace_kmem_cache_alloc+0xdd/0x100 [ 434.356968][ T5134] tomoyo_socket_connect_permission+0x31a/0x360 [ 434.356986][ T5134] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 434.357005][ T5134] ? __might_fault+0xc5/0x140 [ 434.357028][ T5134] security_socket_connect+0xd3/0x230 [ 434.357051][ T5134] __sys_connect_file+0x8f/0x1a0 [ 434.357071][ T5134] __sys_connect+0x141/0x170 [ 434.357088][ T5134] ? __pfx___sys_connect+0x10/0x10 [ 434.357115][ T5134] __x64_sys_connect+0x72/0xb0 [ 434.357131][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.357149][ T5134] do_syscall_64+0x115/0x870 [ 434.357166][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.357186][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.357203][ T5134] RIP: 0033:0x7f34c196d407 [ 434.357214][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.357227][ T5134] RSP: 002b:00007ffebdc5e690 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 434.357241][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.357252][ T5134] RDX: 000000000000006e RSI: 00007f34c1a74560 RDI: 0000000000000003 [ 434.357261][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000000 R09: 0000000000000000 [ 434.357271][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.357280][ T5134] R13: 000000000000000c R14: 0000000000000058 R15: 00007ffebdc5e800 [ 434.357302][ T5134] [ 434.357491][ T5134] FAULT_INJECTION: forcing a failure. [ 434.357491][ T5134] name failslab, interval 1, probability 10, space 0, times 19 [ 434.357511][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.357533][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.357538][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.357546][ T5134] Call Trace: [ 434.357552][ T5134] [ 434.357557][ T5134] dump_stack_lvl+0x100/0x190 [ 434.357576][ T5134] should_fail_ex.cold+0x5/0xa [ 434.357597][ T5134] should_failslab+0xc2/0x120 [ 434.357619][ T5134] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 434.357639][ T5134] ? __d_alloc+0x35/0xa50 [ 434.357661][ T5134] __d_alloc+0x35/0xa50 [ 434.357683][ T5134] d_alloc_pseudo+0x1c/0xc0 [ 434.357702][ T5134] alloc_file_pseudo+0x118/0x290 [ 434.357725][ T5134] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 434.357746][ T5134] ? alloc_fd+0x471/0x7a0 [ 434.357767][ T5134] sock_alloc_file+0x50/0x210 [ 434.357784][ T5134] __sys_socket+0x1c0/0x260 [ 434.357800][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.357822][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.357837][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.357854][ T5134] do_syscall_64+0x115/0x870 [ 434.357870][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.357888][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.357902][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.357914][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.357929][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.357943][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.357953][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.357962][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.357971][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.357980][ T5134] R13: 00007ffebdc5e800 R14: 0000000000000058 R15: 00007ffebdc5e800 [ 434.358000][ T5134] [ 434.358131][ T5134] FAULT_INJECTION: forcing a failure. [ 434.358131][ T5134] name failslab, interval 1, probability 10, space 0, times 18 [ 434.358151][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.358171][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.358177][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.358185][ T5134] Call Trace: [ 434.358190][ T5134] [ 434.358195][ T5134] dump_stack_lvl+0x100/0x190 [ 434.358215][ T5134] should_fail_ex.cold+0x5/0xa [ 434.358233][ T5134] should_failslab+0xc2/0x120 [ 434.358251][ T5134] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.358269][ T5134] ? d_instantiate+0x8a/0xb0 [ 434.358288][ T5134] ? d_instantiate+0x8a/0xb0 [ 434.358307][ T5134] ? alloc_empty_file+0x5b/0x1c0 [ 434.358330][ T5134] alloc_empty_file+0x5b/0x1c0 [ 434.358348][ T5134] alloc_file_pseudo+0x183/0x290 [ 434.358369][ T5134] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 434.358391][ T5134] ? alloc_fd+0x471/0x7a0 [ 434.358429][ T5134] sock_alloc_file+0x50/0x210 [ 434.358453][ T5134] __sys_socket+0x1c0/0x260 [ 434.358465][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.358487][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.358501][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.358519][ T5134] do_syscall_64+0x115/0x870 [ 434.358536][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.358555][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.358570][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.358579][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.358598][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.358612][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.358622][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.358631][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.358641][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.358649][ T5134] R13: 00007ffebdc5e800 R14: 0000000000000058 R15: 00007ffebdc5e800 [ 434.358671][ T5134] [ 434.358795][ T5134] FAULT_INJECTION: forcing a failure. [ 434.358795][ T5134] name failslab, interval 1, probability 10, space 0, times 17 [ 434.358813][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.358834][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.358839][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.358848][ T5134] Call Trace: [ 434.358853][ T5134] [ 434.358858][ T5134] dump_stack_lvl+0x100/0x190 [ 434.358878][ T5134] should_fail_ex.cold+0x5/0xa [ 434.358898][ T5134] should_failslab+0xc2/0x120 [ 434.358918][ T5134] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 434.358935][ T5134] ? sock_alloc_inode+0x26/0x2c0 [ 434.358958][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.358982][ T5134] sock_alloc_inode+0x26/0x2c0 [ 434.359003][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.359024][ T5134] alloc_inode+0x68/0x250 [ 434.359043][ T5134] sock_alloc+0x44/0x280 [ 434.359062][ T5134] ? security_socket_create+0x7f/0x250 [ 434.359084][ T5134] __sock_create+0xc2/0x860 [ 434.359112][ T5134] __sys_socket+0x14d/0x260 [ 434.359128][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.359147][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.359159][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.359176][ T5134] do_syscall_64+0x115/0x870 [ 434.359193][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.359212][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.359229][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.359241][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.359255][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.359269][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.359279][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.359285][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.359293][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.359302][ T5134] R13: 00007ffebdc5e800 R14: 0000000000000058 R15: 00007ffebdc5e800 [ 434.359345][ T5134] [ 434.359353][ T5134] socket: no more sockets [ 434.359385][ T5134] FAULT_INJECTION: forcing a failure. [ 434.359385][ T5134] name failslab, interval 1, probability 10, space 0, times 16 [ 434.359405][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.359422][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.359428][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.359436][ T5134] Call Trace: [ 434.359441][ T5134] [ 434.359447][ T5134] dump_stack_lvl+0x100/0x190 [ 434.359467][ T5134] should_fail_ex.cold+0x5/0xa [ 434.359487][ T5134] should_failslab+0xc2/0x120 [ 434.359508][ T5134] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.359524][ T5134] ? __lock_acquire+0x49f/0x1a40 [ 434.359542][ T5134] ? sk_prot_alloc+0x60/0x2a0 [ 434.359568][ T5134] sk_prot_alloc+0x60/0x2a0 [ 434.359598][ T5134] sk_alloc+0x36/0xe80 [ 434.359617][ T5134] unix_create1+0xa6/0x700 [ 434.359635][ T5134] unix_create+0x11e/0x240 [ 434.359650][ T5134] __sock_create+0x339/0x860 [ 434.359679][ T5134] __sys_socket+0x14d/0x260 [ 434.359695][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.359717][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.359727][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.359744][ T5134] do_syscall_64+0x115/0x870 [ 434.359762][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.359781][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.359797][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.359807][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.359817][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.359826][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.359833][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.359839][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.359845][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.359851][ T5134] R13: 00007ffebdc5e800 R14: 0000000000000058 R15: 00007ffebdc5e800 [ 434.359864][ T5134] [ 434.359889][ T5134] FAULT_INJECTION: forcing a failure. [ 434.359889][ T5134] name failslab, interval 1, probability 10, space 0, times 15 [ 434.362109][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.1.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.362128][ T8435] Tainted: [L]=SOFTLOCKUP [ 434.362132][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.362139][ T8435] Call Trace: [ 434.362144][ T8435] [ 434.362148][ T8435] dump_stack_lvl+0x100/0x190 [ 434.362165][ T8435] should_fail_ex.cold+0x5/0xa [ 434.362179][ T8435] should_failslab+0xc2/0x120 [ 434.362197][ T8435] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.362211][ T8435] ? skb_clone+0x190/0x400 [ 434.362227][ T8435] skb_clone+0x190/0x400 [ 434.362241][ T8435] netlink_broadcast_filtered+0xb22/0xf20 [ 434.362266][ T8435] netlink_broadcast+0x39/0x50 [ 434.362284][ T8435] kobject_uevent_env+0xcdd/0x18b0 [ 434.362305][ T8435] ? module_remove_driver+0xd0/0x260 [ 434.362325][ T8435] __kobject_del+0x168/0x220 [ 434.362340][ T8435] kobject_put+0x348/0x640 [ 434.362357][ T8435] bus_remove_driver+0x16e/0x2e0 [ 434.362372][ T8435] driver_unregister+0x76/0xb0 [ 434.362388][ T8435] usb_gadget_unregister_driver+0x49/0x70 [ 434.362407][ T8435] raw_release+0x19b/0x260 [ 434.362423][ T8435] ? __pfx_raw_release+0x10/0x10 [ 434.362439][ T8435] __fput+0x3ff/0xb50 [ 434.362455][ T8435] task_work_run+0x150/0x240 [ 434.362470][ T8435] ? __pfx_task_work_run+0x10/0x10 [ 434.362495][ T8435] exit_to_user_mode_loop+0x1d8/0x6f0 [ 434.362510][ T2321] FAULT_INJECTION: forcing a failure. [ 434.362510][ T2321] name failslab, interval 1, probability 10, space 0, times 15 [ 434.362516][ T8435] ? rcu_is_watching+0x12/0xc0 [ 434.362545][ T8435] do_syscall_64+0x666/0x870 [ 434.362564][ T8435] ? clear_bhb_loop+0x40/0x90 [ 434.362586][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.362602][ T8435] RIP: 0033:0x7f1fd459de99 [ 434.362612][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.362622][ T8435] RSP: 002b:00007f1fd5521028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 434.362633][ T8435] RAX: 0000000000000000 RBX: 00007f1fd4825fa0 RCX: 00007f1fd459de99 [ 434.362639][ T8435] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 434.362646][ T8435] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 434.362652][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.362659][ T8435] R13: 00007f1fd4826038 R14: 00007f1fd4825fa0 R15: 00007ffec9adbba8 [ 434.362673][ T8435] [ 434.364870][ T5145] FAULT_INJECTION: forcing a failure. [ 434.364870][ T5145] name failslab, interval 1, probability 10, space 0, times 13 [ 434.364897][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.364920][ T5145] Tainted: [L]=SOFTLOCKUP [ 434.364926][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.364954][ T5145] Call Trace: [ 434.364962][ T5145] [ 434.364968][ T5145] dump_stack_lvl+0x100/0x190 [ 434.364991][ T5145] should_fail_ex.cold+0x5/0xa [ 434.365014][ T5145] should_failslab+0xc2/0x120 [ 434.365037][ T5145] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.365058][ T5145] ? trace_kmem_cache_alloc+0xdd/0x100 [ 434.365083][ T5145] ? security_file_alloc+0x34/0x2c0 [ 434.365104][ T5145] security_file_alloc+0x34/0x2c0 [ 434.365121][ T5145] init_file+0x95/0x480 [ 434.365141][ T5145] alloc_empty_file+0x79/0x1c0 [ 434.365162][ T5145] path_openat+0xe7/0x4280 [ 434.365179][ T5145] ? __kasan_slab_alloc+0x89/0x90 [ 434.365200][ T5145] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 434.365218][ T5145] ? do_getname+0x35/0x390 [ 434.365237][ T5145] ? do_sys_openat2+0xc7/0x1e0 [ 434.365257][ T5145] ? __x64_sys_openat+0x12d/0x210 [ 434.365277][ T5145] ? do_syscall_64+0x115/0x870 [ 434.365294][ T5145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.365319][ T5145] ? __pfx_path_openat+0x10/0x10 [ 434.365343][ T5145] do_file_open+0x20e/0x430 [ 434.365362][ T5145] ? __pfx_do_file_open+0x10/0x10 [ 434.365397][ T5145] ? alloc_fd+0x471/0x7a0 [ 434.365421][ T5145] ? do_getname+0x191/0x390 [ 434.365447][ T5145] do_sys_openat2+0x10f/0x1e0 [ 434.365469][ T5145] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.365492][ T5145] ? ktime_get_ts64+0x318/0x420 [ 434.365514][ T5145] ? ktime_get_ts64+0x257/0x420 [ 434.365539][ T5145] __x64_sys_openat+0x12d/0x210 [ 434.365561][ T5145] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.365591][ T5145] do_syscall_64+0x115/0x870 [ 434.365609][ T5145] ? clear_bhb_loop+0x40/0x90 [ 434.365629][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.365646][ T5145] RIP: 0033:0x7fd6288a7407 [ 434.365661][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.365677][ T5145] RSP: 002b:00007ffe97f74d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.365698][ T5145] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.365709][ T5145] RDX: 0000000000080141 RSI: 000055ff5c68802e RDI: ffffffffffffff9c [ 434.365718][ T5145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.365728][ T5145] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 434.365739][ T5145] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 434.365762][ T5145] [ 434.365772][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.365794][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.365800][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.365809][ T5134] Call Trace: [ 434.365814][ T5134] [ 434.365820][ T5134] dump_stack_lvl+0x100/0x190 [ 434.365839][ T5134] should_fail_ex.cold+0x5/0xa [ 434.365857][ T5134] should_failslab+0xc2/0x120 [ 434.365877][ T5134] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 434.365898][ T5134] ? sock_alloc_inode+0x26/0x2c0 [ 434.365935][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.365959][ T5134] sock_alloc_inode+0x26/0x2c0 [ 434.365981][ T5134] ? __pfx_sock_alloc_inode+0x10/0x10 [ 434.366002][ T5134] alloc_inode+0x68/0x250 [ 434.366024][ T5134] sock_alloc+0x44/0x280 [ 434.366041][ T5134] ? security_socket_create+0x7f/0x250 [ 434.366063][ T5134] __sock_create+0xc2/0x860 [ 434.366091][ T5134] __sys_socket+0x14d/0x260 [ 434.366107][ T5134] ? __pfx___sys_socket+0x10/0x10 [ 434.366129][ T5134] __x64_sys_socket+0x72/0xb0 [ 434.366140][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.366157][ T5134] do_syscall_64+0x115/0x870 [ 434.366173][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.366193][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.366208][ T5134] RIP: 0033:0x7f34c19e8707 [ 434.366221][ T5134] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 434.366234][ T5134] RSP: 002b:00007ffebdc5e6d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 434.366245][ T5134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f34c19e8707 [ 434.366255][ T5134] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 434.366264][ T5134] RBP: 00007f34c1a74560 R08: 0000000000000073 R09: 0000000000000001 [ 434.366273][ T5134] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 434.366282][ T5134] R13: 00007ffebdc5e800 R14: 000000000000001f R15: 00007ffebdc5e800 [ 434.366304][ T5134] [ 434.366329][ T5134] socket: no more sockets [ 434.369570][ T6556] FAULT_INJECTION: forcing a failure. [ 434.369570][ T6556] name failslab, interval 1, probability 10, space 0, times 11 [ 434.372292][ T5145] udevd[5145]: could not touch /run/udev/queue: Cannot allocate memory [ 434.372334][ T6556] CPU: 3 UID: 0 PID: 6556 Comm: kworker/u33:27 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.372351][ T6556] Tainted: [L]=SOFTLOCKUP [ 434.372355][ T6556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.372362][ T6556] Workqueue: events_unbound nsim_dev_trap_report_work [ 434.372380][ T6556] Call Trace: [ 434.372384][ T6556] [ 434.372388][ T6556] dump_stack_lvl+0x100/0x190 [ 434.372403][ T6556] should_fail_ex.cold+0x5/0xa [ 434.372417][ T6556] should_failslab+0xc2/0x120 [ 434.372433][ T6556] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 434.372449][ T6556] ? __alloc_skb+0x140/0x710 [ 434.372465][ T6556] __alloc_skb+0x140/0x710 [ 434.372477][ T6556] ? __alloc_skb+0x5b7/0x710 [ 434.372489][ T6556] ? __pfx___alloc_skb+0x10/0x10 [ 434.372503][ T6556] ? kfree_skbmem+0x19f/0x210 [ 434.372522][ T6556] nsim_dev_trap_report_work+0x2af/0xd20 [ 434.372542][ T6556] process_one_work+0xa23/0x1940 [ 434.372561][ T6556] ? __pfx_process_one_work+0x10/0x10 [ 434.372577][ T6556] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 434.372598][ T6556] worker_thread+0x5ef/0xe50 [ 434.372616][ T6556] ? kthread+0x13a/0x450 [ 434.372626][ T6556] ? __pfx_worker_thread+0x10/0x10 [ 434.372638][ T6556] kthread+0x370/0x450 [ 434.372647][ T6556] ? __pfx_kthread+0x10/0x10 [ 434.372659][ T6556] ret_from_fork+0x72b/0xd50 [ 434.372676][ T6556] ? __pfx_ret_from_fork+0x10/0x10 [ 434.372693][ T6556] ? __switch_to+0x800/0x10f0 [ 434.372705][ T6556] ? __pfx_kthread+0x10/0x10 [ 434.372716][ T6556] ret_from_fork_asm+0x1a/0x30 [ 434.372739][ T6556] [ 434.372774][ T5525] FAULT_INJECTION: forcing a failure. [ 434.372774][ T5525] name failslab, interval 1, probability 10, space 0, times 9 [ 434.372789][ T5525] CPU: 3 UID: 0 PID: 5525 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.372804][ T5525] Tainted: [L]=SOFTLOCKUP [ 434.372807][ T5525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.372814][ T5525] Workqueue: events nsim_fib_event_work [ 434.372831][ T5525] Call Trace: [ 434.372834][ T5525] [ 434.372838][ T5525] dump_stack_lvl+0x100/0x190 [ 434.372852][ T5525] should_fail_ex.cold+0x5/0xa [ 434.372866][ T5525] should_failslab+0xc2/0x120 [ 434.372880][ T5525] __kmalloc_cache_noprof+0x91/0x6c0 [ 434.372899][ T5525] ? __kasan_kmalloc+0xaa/0xb0 [ 434.372912][ T5525] ? nsim_fib6_rt_nh_add+0x4a/0x290 [ 434.372931][ T5525] nsim_fib6_rt_nh_add+0x4a/0x290 [ 434.372949][ T5525] nsim_fib_event_work+0x16ed/0x6310 [ 434.372971][ T5525] ? debug_object_deactivate+0x2e4/0x3b0 [ 434.372989][ T5525] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 434.373009][ T5525] ? rcu_is_watching+0x12/0xc0 [ 434.373029][ T5525] process_one_work+0xa23/0x1940 [ 434.373046][ T5525] ? __pfx_process_one_work+0x10/0x10 [ 434.373063][ T5525] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 434.373082][ T5525] worker_thread+0x5ef/0xe50 [ 434.373099][ T5525] ? kthread+0x13a/0x450 [ 434.373109][ T5525] ? __pfx_worker_thread+0x10/0x10 [ 434.373120][ T5525] kthread+0x370/0x450 [ 434.373130][ T5525] ? __pfx_kthread+0x10/0x10 [ 434.373142][ T5525] ret_from_fork+0x72b/0xd50 [ 434.373158][ T5525] ? __pfx_ret_from_fork+0x10/0x10 [ 434.373175][ T5525] ? __switch_to+0x800/0x10f0 [ 434.373186][ T5525] ? __pfx_kthread+0x10/0x10 [ 434.373198][ T5525] ret_from_fork_asm+0x1a/0x30 [ 434.373221][ T5525] [ 434.373277][ T8181] CPU: 3 UID: 0 PID: 8181 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.373292][ T8181] Tainted: [L]=SOFTLOCKUP [ 434.373295][ T8181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.373302][ T8181] Call Trace: [ 434.373305][ T8181] [ 434.373309][ T8181] dump_stack_lvl+0x100/0x190 [ 434.373323][ T8181] should_fail_ex.cold+0x5/0xa [ 434.373337][ T8181] should_failslab+0xc2/0x120 [ 434.373351][ T8181] __kmalloc_noprof+0xfc/0x820 [ 434.373365][ T8181] ? tomoyo_encode2+0xfb/0x3c0 [ 434.373378][ T8181] tomoyo_encode2+0xfb/0x3c0 [ 434.373391][ T8181] tomoyo_encode+0x29/0x50 [ 434.373401][ T8181] tomoyo_realpath_from_path+0x18c/0x690 [ 434.373415][ T8181] tomoyo_check_open_permission+0x2af/0x3c0 [ 434.373433][ T8181] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.373454][ T8181] ? hook_file_open+0x24f/0x8f0 [ 434.373477][ T8181] ? path_get+0x61/0x80 [ 434.373491][ T8181] tomoyo_file_open+0x6b/0x90 [ 434.373505][ T8181] security_file_open+0xb5/0x1e0 [ 434.373517][ T8181] do_dentry_open+0x588/0x14d0 [ 434.373532][ T8181] vfs_open+0x82/0x3f0 [ 434.373547][ T8181] path_openat+0x2873/0x4280 [ 434.373564][ T8181] ? __pfx_path_openat+0x10/0x10 [ 434.373584][ T8181] do_file_open+0x20e/0x430 [ 434.373597][ T8181] ? __pfx_do_file_open+0x10/0x10 [ 434.373624][ T8181] ? alloc_fd+0x471/0x7a0 [ 434.373643][ T8181] ? do_getname+0x191/0x390 [ 434.373664][ T8181] do_sys_openat2+0x10f/0x1e0 [ 434.373685][ T8181] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.373709][ T8181] ? __x64_sys_recvmsg+0x1b9/0x260 [ 434.373733][ T8181] __x64_sys_openat+0x12d/0x210 [ 434.373755][ T8181] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.373786][ T8181] do_syscall_64+0x115/0x870 [ 434.373805][ T8181] ? clear_bhb_loop+0x40/0x90 [ 434.373828][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.373846][ T8181] RIP: 0033:0x7fd6288a7407 [ 434.373861][ T8181] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.373877][ T8181] RSP: 002b:00007ffe97f6c160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.373894][ T8181] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.373906][ T8181] RDX: 0000000000080000 RSI: 00007ffe97f6c2e0 RDI: ffffffffffffff9c [ 434.373917][ T8181] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 434.373927][ T8181] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ff5c6887f5 [ 434.373938][ T8181] R13: 000055ff5c6887f5 R14: 0000000000000001 R15: 000055ff5c6a3140 [ 434.373963][ T8181] [ 434.373983][ T8181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.374542][ T8181] FAULT_INJECTION: forcing a failure. [ 434.374542][ T8181] name failslab, interval 1, probability 10, space 0, times 6 [ 434.375666][ T5134] FAULT_INJECTION: forcing a failure. [ 434.375666][ T5134] name failslab, interval 1, probability 10, space 0, times 3 [ 434.376397][ T5145] FAULT_INJECTION: forcing a failure. [ 434.376397][ T5145] name failslab, interval 1, probability 10, space 0, times 2 [ 434.376416][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.376431][ T5145] Tainted: [L]=SOFTLOCKUP [ 434.376435][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.376441][ T5145] Call Trace: [ 434.376445][ T5145] [ 434.376449][ T5145] dump_stack_lvl+0x100/0x190 [ 434.376465][ T5145] should_fail_ex.cold+0x5/0xa [ 434.376479][ T5145] should_failslab+0xc2/0x120 [ 434.376494][ T5145] __kmalloc_noprof+0xfc/0x820 [ 434.376508][ T5145] ? tomoyo_encode2+0xfb/0x3c0 [ 434.376522][ T5145] tomoyo_encode2+0xfb/0x3c0 [ 434.376535][ T5145] tomoyo_encode+0x29/0x50 [ 434.376545][ T5145] tomoyo_realpath_from_path+0x18c/0x690 [ 434.376560][ T5145] tomoyo_check_open_permission+0x2af/0x3c0 [ 434.376577][ T5145] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.376598][ T5145] ? hook_file_open+0x24f/0x8f0 [ 434.376619][ T5145] ? lock_acquire+0x1b9/0x370 [ 434.376650][ T5145] tomoyo_file_open+0x6b/0x90 [ 434.376666][ T5145] security_file_open+0xb5/0x1e0 [ 434.376678][ T5145] do_dentry_open+0x588/0x14d0 [ 434.376698][ T5145] vfs_open+0x82/0x3f0 [ 434.376713][ T5145] path_openat+0x2873/0x4280 [ 434.376731][ T5145] ? __pfx_path_openat+0x10/0x10 [ 434.376747][ T5145] do_file_open+0x20e/0x430 [ 434.376760][ T5145] ? __pfx_do_file_open+0x10/0x10 [ 434.376782][ T5145] ? alloc_fd+0x471/0x7a0 [ 434.376795][ T5145] ? do_getname+0x191/0x390 [ 434.376812][ T5145] do_sys_openat2+0x10f/0x1e0 [ 434.376826][ T5145] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.376841][ T5145] ? ktime_get_ts64+0x318/0x420 [ 434.376856][ T5145] ? ktime_get_ts64+0x257/0x420 [ 434.376873][ T5145] __x64_sys_openat+0x12d/0x210 [ 434.376892][ T5145] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.376921][ T5145] do_syscall_64+0x115/0x870 [ 434.376942][ T5145] ? clear_bhb_loop+0x40/0x90 [ 434.376962][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.376982][ T5145] RIP: 0033:0x7fd6288a7407 [ 434.376998][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.377014][ T5145] RSP: 002b:00007ffe97f74d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.377029][ T5145] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.377037][ T5145] RDX: 0000000000080141 RSI: 000055ff5c68802e RDI: ffffffffffffff9c [ 434.377044][ T5145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.377050][ T5145] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 434.377057][ T5145] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 434.377071][ T5145] [ 434.377196][ T5145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.377540][ T5145] FAULT_INJECTION: forcing a failure. [ 434.377540][ T5145] name failslab, interval 1, probability 10, space 0, times 1 [ 434.377746][ T2321] CPU: 3 UID: 0 PID: 2321 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.377771][ T2321] Tainted: [L]=SOFTLOCKUP [ 434.377778][ T2321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.377788][ T2321] Workqueue: usb_hub_wq hub_event [ 434.377827][ T2321] Call Trace: [ 434.377832][ T2321] [ 434.377839][ T2321] dump_stack_lvl+0x100/0x190 [ 434.377862][ T2321] should_fail_ex.cold+0x5/0xa [ 434.377883][ T2321] should_failslab+0xc2/0x120 [ 434.377904][ T2321] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 434.377928][ T2321] ? kstrdup_const+0x63/0x80 [ 434.377952][ T2321] kstrdup+0x51/0xe0 [ 434.377972][ T2321] kstrdup_const+0x63/0x80 [ 434.377991][ T2321] __kernfs_new_node+0x9b/0xa10 [ 434.378014][ T2321] ? stack_trace_save+0x8e/0xc0 [ 434.378033][ T2321] ? __pfx_stack_trace_save+0x10/0x10 [ 434.378051][ T2321] ? __pfx___kernfs_new_node+0x10/0x10 [ 434.378068][ T2321] ? stack_depot_save_flags+0x27/0x9d0 [ 434.378098][ T2321] ? find_held_lock+0x2b/0x80 [ 434.378124][ T2321] ? kernfs_root+0xee/0x2a0 [ 434.378139][ T2321] ? kernfs_root+0xee/0x2a0 [ 434.378161][ T2321] kernfs_create_dir_ns+0xa6/0x2b0 [ 434.378187][ T2321] sysfs_create_dir_ns+0x13a/0x2b0 [ 434.378216][ T2321] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 434.378242][ T2321] ? find_held_lock+0x2b/0x80 [ 434.378267][ T2321] ? kobject_add_internal+0x25f/0x930 [ 434.378292][ T2321] ? kobject_add_internal+0x25f/0x930 [ 434.378318][ T2321] ? do_raw_spin_unlock+0x145/0x1e0 [ 434.378344][ T2321] kobject_add_internal+0x2c8/0x930 [ 434.378374][ T2321] kobject_add+0x16a/0x1e0 [ 434.378399][ T2321] ? __pfx_kobject_add+0x10/0x10 [ 434.378425][ T2321] ? __kasan_kmalloc+0xaa/0xb0 [ 434.378449][ T2321] ? lockdep_init_map_type+0x5c/0x250 [ 434.378472][ T2321] ? class_to_subsys+0x114/0x150 [ 434.378498][ T2321] ? device_add+0x253/0x1970 [ 434.378527][ T2321] device_add+0x294/0x1970 [ 434.378552][ T2321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.378574][ T2321] ? __pfx_device_add+0x10/0x10 [ 434.378603][ T2321] ? usb_cache_string+0x60/0x100 [ 434.378621][ T2321] ? usb_cache_string+0xd6/0x100 [ 434.378639][ T2321] ? kfree+0x22b/0x6c0 [ 434.378672][ T2321] usb_set_configuration+0xd97/0x1c60 [ 434.378710][ T2321] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 434.378728][ T2321] usb_generic_driver_probe+0xa1/0xe0 [ 434.378748][ T2321] usb_probe_device+0xef/0x400 [ 434.378770][ T2321] ? __pfx_usb_probe_device+0x10/0x10 [ 434.378793][ T2321] really_probe+0x241/0xa60 [ 434.378817][ T2321] __driver_probe_device+0x20e/0x450 [ 434.378837][ T2321] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.378876][ T2321] driver_probe_device+0x4a/0x140 [ 434.378898][ T2321] __device_attach_driver+0x1df/0x320 [ 434.378922][ T2321] ? __pfx___device_attach_driver+0x10/0x10 [ 434.378943][ T2321] bus_for_each_drv+0x159/0x1e0 [ 434.378961][ T2321] ? __pfx_bus_for_each_drv+0x10/0x10 [ 434.378980][ T2321] ? lockdep_hardirqs_on+0x78/0x100 [ 434.378999][ T2321] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 434.379020][ T2321] __device_attach+0x1e4/0x4d0 [ 434.379043][ T2321] ? __pfx___device_attach+0x10/0x10 [ 434.379066][ T2321] ? do_raw_spin_unlock+0x145/0x1e0 [ 434.379095][ T2321] device_initial_probe+0xaf/0xd0 [ 434.379119][ T2321] bus_probe_device+0x64/0x160 [ 434.379141][ T2321] device_add+0x121d/0x1970 [ 434.379168][ T2321] ? __pfx_device_add+0x10/0x10 [ 434.379194][ T2321] ? add_device_randomness+0xc9/0x110 [ 434.379243][ T2321] usb_new_device.cold+0x685/0x115c [ 434.379288][ T2321] ? _mutex_trylock_nest_lock+0x241/0x310 [ 434.379333][ T2321] ? __pfx_usb_new_device+0x10/0x10 [ 434.379358][ T2321] ? mark_held_locks+0x40/0x70 [ 434.379384][ T2321] hub_event+0x30a3/0x4a60 [ 434.379431][ T2321] ? __pfx_hub_event+0x10/0x10 [ 434.379453][ T2321] ? debug_object_deactivate+0x2e4/0x3b0 [ 434.379487][ T2321] ? rcu_is_watching+0x12/0xc0 [ 434.379518][ T2321] process_one_work+0xa23/0x1940 [ 434.379551][ T2321] ? __pfx_process_one_work+0x10/0x10 [ 434.379579][ T2321] ? __pfx_hub_event+0x10/0x10 [ 434.379609][ T2321] worker_thread+0x5ef/0xe50 [ 434.379637][ T2321] ? __pfx_worker_thread+0x10/0x10 [ 434.379657][ T2321] ? kthread+0x13a/0x450 [ 434.379675][ T2321] ? __pfx_worker_thread+0x10/0x10 [ 434.379694][ T2321] kthread+0x370/0x450 [ 434.379710][ T2321] ? __pfx_kthread+0x10/0x10 [ 434.379730][ T2321] ret_from_fork+0x72b/0xd50 [ 434.379756][ T2321] ? __pfx_ret_from_fork+0x10/0x10 [ 434.379783][ T2321] ? __switch_to+0x800/0x10f0 [ 434.379802][ T2321] ? __pfx_kthread+0x10/0x10 [ 434.379822][ T2321] ret_from_fork_asm+0x1a/0x30 [ 434.379859][ T2321] [ 434.379903][ T2321] kobject: kobject_add_internal failed for 6-1:3.115 (error: -12 parent: 6-1) [ 434.379943][ T2321] usb 6-1: device_add(6-1:3.115) --> -12 [ 434.381073][ T8181] CPU: 3 UID: 0 PID: 8181 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.381097][ T8181] Tainted: [L]=SOFTLOCKUP [ 434.381103][ T8181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.381112][ T8181] Call Trace: [ 434.381118][ T8181] [ 434.381124][ T8181] dump_stack_lvl+0x100/0x190 [ 434.381147][ T8181] should_fail_ex.cold+0x5/0xa [ 434.381169][ T8181] should_failslab+0xc2/0x120 [ 434.381192][ T8181] kmem_cache_alloc_noprof+0x91/0x6a0 [ 434.381228][ T8181] ? do_getname+0x35/0x390 [ 434.381255][ T8181] do_getname+0x35/0x390 [ 434.381279][ T8181] do_sys_openat2+0xc7/0x1e0 [ 434.381301][ T8181] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.381333][ T8181] __x64_sys_openat+0x12d/0x210 [ 434.381355][ T8181] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.381376][ T8181] ? putname+0xb1/0x110 [ 434.381403][ T8181] do_syscall_64+0x115/0x870 [ 434.381421][ T8181] ? clear_bhb_loop+0x40/0x90 [ 434.381443][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.381461][ T8181] RIP: 0033:0x7fd6288a7407 [ 434.381476][ T8181] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.381492][ T8181] RSP: 002b:00007ffe97f705c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.381508][ T8181] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.381520][ T8181] RDX: 0000000000080000 RSI: 00007ffe97f70740 RDI: ffffffffffffff9c [ 434.381531][ T8181] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 434.381540][ T8181] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ff5c6887f5 [ 434.381551][ T8181] R13: 000055ff5c6887f5 R14: 0000000000000001 R15: 0000000000000000 [ 434.381574][ T8181] [ 434.382574][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.382594][ T5134] Tainted: [L]=SOFTLOCKUP [ 434.382598][ T5134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.382603][ T5134] Call Trace: [ 434.382607][ T5134] [ 434.382611][ T5134] dump_stack_lvl+0x100/0x190 [ 434.382626][ T5134] should_fail_ex.cold+0x5/0xa [ 434.382639][ T5134] should_failslab+0xc2/0x120 [ 434.382654][ T5134] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 434.382668][ T5134] ? __alloc_skb+0x5b7/0x710 [ 434.382680][ T5134] ? __alloc_skb+0x140/0x710 [ 434.382695][ T5134] __alloc_skb+0x140/0x710 [ 434.382707][ T5134] ? __alloc_skb+0x5b7/0x710 [ 434.382719][ T5134] ? __pfx___alloc_skb+0x10/0x10 [ 434.382731][ T5134] ? trace_sched_exit_tp+0x120/0x160 [ 434.382763][ T5134] alloc_skb_with_frags+0xdd/0x760 [ 434.382783][ T5134] ? find_held_lock+0x2b/0x80 [ 434.382808][ T5134] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 434.382826][ T5134] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 434.382849][ T5134] sock_alloc_send_pskb+0x801/0x980 [ 434.382870][ T5134] ? avc_has_perm+0x135/0x1e0 [ 434.382890][ T5134] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 434.382907][ T5134] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 434.382926][ T5134] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 434.382951][ T5134] ? __rcu_read_unlock+0x26a/0x5e0 [ 434.382977][ T5134] unix_dgram_sendmsg+0x3c7/0x1810 [ 434.383005][ T5134] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 434.383029][ T5134] ? selinux_socket_sendmsg+0x198/0x2f0 [ 434.383053][ T5134] __sys_sendto+0x48b/0x4e0 [ 434.383070][ T5134] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 434.383090][ T5134] ? __pfx___sys_sendto+0x10/0x10 [ 434.383114][ T5134] ? __sys_connect+0xe4/0x170 [ 434.383140][ T5134] ? xfd_validate_state+0x129/0x190 [ 434.383163][ T5134] __x64_sys_sendto+0xe0/0x1c0 [ 434.383181][ T5134] ? do_syscall_64+0x90/0x870 [ 434.383198][ T5134] ? lockdep_hardirqs_on+0x78/0x100 [ 434.383216][ T5134] do_syscall_64+0x115/0x870 [ 434.383232][ T5134] ? clear_bhb_loop+0x40/0x90 [ 434.383252][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.383265][ T5134] RIP: 0033:0x7f34c196d407 [ 434.383277][ T5134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.383292][ T5134] RSP: 002b:00007ffebdc5e6c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 434.383327][ T5134] RAX: ffffffffffffffda RBX: 00007f34c181dc80 RCX: 00007f34c196d407 [ 434.383338][ T5134] RDX: 0000000000000049 RSI: 00007ffebdc5e800 RDI: 0000000000000003 [ 434.383348][ T5134] RBP: 00007ffebdc5ec30 R08: 0000000000000000 R09: 0000000000000000 [ 434.383358][ T5134] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffebdc5ec48 [ 434.383367][ T5134] R13: 00007ffebdc5e800 R14: 000000000000002e R15: 00007ffebdc5e800 [ 434.383385][ T5134] [ 434.394196][ T2321] usb 6-1: USB disconnect, device number 16 [ 434.397575][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 434.397599][ T5145] Tainted: [L]=SOFTLOCKUP [ 434.397606][ T5145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.397615][ T5145] Call Trace: [ 434.397621][ T5145] [ 434.397629][ T5145] dump_stack_lvl+0x100/0x190 [ 434.397656][ T5145] should_fail_ex.cold+0x5/0xa [ 434.397678][ T5145] should_failslab+0xc2/0x120 [ 434.397708][ T5145] __kmalloc_noprof+0xfc/0x820 [ 434.397726][ T5145] ? rcu_is_watching+0x12/0xc0 [ 434.397768][ T5145] ? tomoyo_realpath_from_path+0xb6/0x690 [ 434.397792][ T5145] tomoyo_realpath_from_path+0xb6/0x690 [ 434.397814][ T5145] tomoyo_check_open_permission+0x2af/0x3c0 [ 434.397838][ T5145] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 434.397869][ T5145] ? hook_file_open+0x24f/0x8f0 [ 434.397900][ T5145] ? lock_acquire+0x1b9/0x370 [ 434.397927][ T5145] tomoyo_file_open+0x6b/0x90 [ 434.397947][ T5145] security_file_open+0xb5/0x1e0 [ 434.397964][ T5145] do_dentry_open+0x588/0x14d0 [ 434.397987][ T5145] vfs_open+0x82/0x3f0 [ 434.398009][ T5145] path_openat+0x2873/0x4280 [ 434.398037][ T5145] ? __pfx_path_openat+0x10/0x10 [ 434.398060][ T5145] do_file_open+0x20e/0x430 [ 434.398079][ T5145] ? __pfx_do_file_open+0x10/0x10 [ 434.398114][ T5145] ? alloc_fd+0x471/0x7a0 [ 434.398134][ T5145] ? do_getname+0x191/0x390 [ 434.398158][ T5145] do_sys_openat2+0x10f/0x1e0 [ 434.398179][ T5145] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.398201][ T5145] ? ktime_get_ts64+0x318/0x420 [ 434.398222][ T5145] ? ktime_get_ts64+0x257/0x420 [ 434.398246][ T5145] __x64_sys_openat+0x12d/0x210 [ 434.398267][ T5145] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.398297][ T5145] do_syscall_64+0x115/0x870 [ 434.398314][ T5145] ? clear_bhb_loop+0x40/0x90 [ 434.398335][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.398352][ T5145] RIP: 0033:0x7fd6288a7407 [ 434.398366][ T5145] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 434.398383][ T5145] RSP: 002b:00007ffe97f74d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.398402][ T5145] RAX: ffffffffffffffda RBX: 00007fd628fdc880 RCX: 00007fd6288a7407 [ 434.398413][ T5145] RDX: 0000000000080141 RSI: 000055ff5c68802e RDI: ffffffffffffff9c [ 434.398425][ T5145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.398436][ T5145] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 434.398446][ T5145] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 434.398471][ T5145] [ 434.997104][ T8465] SELinux: policydb string does not match my string SE Linux [ 435.065366][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 435.068287][ T8465] SELinux: failed to load policy [ 436.112195][ T5803] Bluetooth: hci1: command tx timeout [ 436.122501][ T7553] bond0: (slave syz_tun): Releasing backup interface [ 438.182210][ T5803] Bluetooth: hci1: command tx timeout [ 439.563553][ T8483] netlink: 76 bytes leftover after parsing attributes in process `syz.2.641'. [ 439.603579][ T8482] netlink: 76 bytes leftover after parsing attributes in process `syz.2.641'. [ 439.661708][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 439.661722][ T42] audit: type=1400 audit(1785307384.437:831): avc: denied { listen } for pid=8484 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.678009][ T42] audit: type=1400 audit(1785307384.437:832): avc: denied { accept } for pid=8484 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.692287][ T42] audit: type=1400 audit(1785307384.467:833): avc: denied { accept } for pid=8488 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.702311][ T42] audit: type=1326 audit(1785307384.477:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.4.646" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a0ef9de99 code=0x0 [ 439.728123][ T42] audit: type=1400 audit(1785307384.507:835): avc: denied { getopt } for pid=8490 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 439.945420][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.949130][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.974703][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.981030][ T8512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.654'. [ 439.982197][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.986930][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.991119][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.994163][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.028784][ T42] audit: type=1400 audit(1785307384.807:836): avc: denied { read } for pid=8520 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.091143][ T8517] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 440.093282][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 440.102477][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 440.108690][ T8531] netlink: 'syz.1.659': attribute type 8 has an invalid length. [ 440.112398][ T8528] vhci_hcd: connection closed [ 440.117146][ T12] vhci_hcd vhci_hcd.4: stop threads [ 440.125261][ T12] vhci_hcd vhci_hcd.4: release socket [ 440.127011][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 440.165817][ T42] audit: type=1400 audit(1785307384.947:837): avc: denied { setopt } for pid=8537 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 440.251646][ T8513] lo speed is unknown, defaulting to 1000 [ 440.288883][ T8551] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.663'. [ 440.333451][ T8555] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 440.381531][ T8555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.480521][ T8565] retu-mfd 0-0001: could not read Retu revision: -6 [ 440.485857][ T8565] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 440.525070][ T8565] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 440.528907][ T8565] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 440.534343][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.537426][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.540447][ T8513] bridge_slave_0: entered allmulticast mode [ 440.544518][ T8513] bridge_slave_0: entered promiscuous mode [ 440.549335][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.552439][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.555543][ T8513] bridge_slave_1: entered allmulticast mode [ 440.559355][ T8513] bridge_slave_1: entered promiscuous mode [ 440.584975][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.591452][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.613635][ T8513] team0: Port device team_slave_0 added [ 440.616873][ T8513] team0: Port device team_slave_1 added [ 440.632699][ T5948] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 440.637893][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 440.642350][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.645167][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.653721][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.658111][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.660267][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.668858][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.678184][ T42] audit: type=1400 audit(1785307385.457:838): avc: denied { mounton } for pid=8573 comm="syz.2.669" path="/176/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 440.694463][ T8513] hsr_slave_0: entered promiscuous mode [ 440.697018][ T8513] hsr_slave_1: entered promiscuous mode [ 440.699853][ T8513] debugfs: 'hsr0' already exists in 'hsr' [ 440.703597][ T8574] random: crng reseeded on system resumption [ 440.706786][ T8513] Cannot create hsr debugfs directory [ 440.724440][ T8577] ªªªªªª: renamed from vlan0 (while UP) [ 440.807705][ T5948] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 440.813133][ T5948] usb 6-1: config 0 has no interface number 0 [ 440.817973][ T5948] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.823618][ T5948] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 440.832526][ T5948] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 440.835917][ T5948] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 440.839545][ T5948] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.844742][ T5948] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 440.844868][ T8588] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 440.848409][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.855483][ T5948] usb 6-1: config 0 descriptor?? [ 440.857759][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 440.867519][ T5948] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 440.872266][ T8513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.884425][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'. [ 440.887174][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'. [ 440.887394][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.893608][ T8513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.909192][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.930237][ T8513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.958037][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.964414][ T8513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.973342][ T8513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.004201][ T12] netdevsim netdevsim100 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 441.012816][ T12] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.029563][ T8595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.032267][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.035073][ T8513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.037472][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.039749][ T8513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.064276][ T2321] usb 6-1: USB disconnect, device number 17 [ 441.068914][ T2321] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 441.071160][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.079792][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.086992][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.104019][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.114916][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.117291][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.130645][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.133060][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.280265][ T8607] bond1: (slave geneve2): making interface the new active one [ 441.286077][ T8607] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 441.442026][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.500303][ T8513] veth0_vlan: entered promiscuous mode [ 441.506865][ T8513] veth1_vlan: entered promiscuous mode [ 441.523970][ T8513] veth0_macvtap: entered promiscuous mode [ 441.528635][ T8513] veth1_macvtap: entered promiscuous mode [ 441.540115][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.554203][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.566472][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.570134][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.578653][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.585933][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.664594][ T8615] ipt_REJECT: TCP_RESET invalid for non-tcp [ 441.682286][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.687749][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.709515][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.717727][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.727899][ T8621] netlink: 'syz.4.675': attribute type 12 has an invalid length. [ 441.760471][ T8625] netlink: 'syz.2.677': attribute type 2 has an invalid length. [ 441.791370][ T8632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8632 comm=syz.2.679 [ 441.804086][ T8632] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.679'. [ 441.890653][ T8648] tmpfs: Cannot change global quota limit on remount [ 441.935601][ T42] audit: type=1400 audit(1785307386.717:839): avc: denied { read } for pid=8650 comm="syz.2.685" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 441.980351][ T8638] ================================================================== [ 441.982957][ T8638] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 441.985708][ T8638] Read of size 8 at addr ffff88802d33ab38 by task syz.1.681/8638 [ 441.989407][ T8638] [ 441.989929][ T42] audit: type=1400 audit(1785307386.757:840): avc: denied { write } for pid=8650 comm="syz.2.685" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 441.990873][ T8638] CPU: 3 UID: 0 PID: 8638 Comm: syz.1.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.990891][ T8638] Tainted: [L]=SOFTLOCKUP [ 441.990895][ T8638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.990903][ T8638] Call Trace: [ 441.990907][ T8638] [ 441.990912][ T8638] dump_stack_lvl+0x100/0x190 [ 441.990931][ T8638] print_report+0x13d/0x4b0 [ 441.990948][ T8638] ? __virt_addr_valid+0x239/0x430 [ 441.990965][ T8638] ? __release_resource+0x276/0x2c0 [ 441.990982][ T8638] kasan_report+0xdf/0x1c0 [ 441.990998][ T8638] ? __release_resource+0x276/0x2c0 [ 441.991015][ T8638] __release_resource+0x276/0x2c0 [ 441.991033][ T8638] release_resource+0x26/0x40 [ 441.991048][ T8638] pci_remove_bus_device+0x2d3/0x3b0 [ 441.991064][ T8638] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 441.991079][ T8638] remove_store+0x123/0x140 [ 441.991093][ T8638] ? __pfx_remove_store+0x10/0x10 [ 441.991107][ T8638] ? find_held_lock+0x2b/0x80 [ 441.991126][ T8638] ? sysfs_file_kobj+0xe4/0x290 [ 441.991142][ T8638] ? sysfs_file_kobj+0xe4/0x290 [ 441.991159][ T8638] ? __pfx_remove_store+0x10/0x10 [ 441.991173][ T8638] dev_attr_store+0x58/0x80 [ 441.991189][ T8638] ? __pfx_dev_attr_store+0x10/0x10 [ 441.991204][ T8638] sysfs_kf_write+0xf2/0x150 [ 441.991221][ T8638] kernfs_fop_write_iter+0x3e0/0x5f0 [ 441.991236][ T8638] ? __pfx_sysfs_kf_write+0x10/0x10 [ 441.991254][ T8638] vfs_write+0x6ac/0x1050 [ 441.991291][ T8638] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 441.991308][ T8638] ? __pfx_vfs_write+0x10/0x10 [ 441.991329][ T8638] ksys_write+0x12a/0x250 [ 441.991346][ T8638] ? __pfx_ksys_write+0x10/0x10 [ 441.991365][ T8638] do_syscall_64+0x115/0x870 [ 441.991378][ T8638] ? clear_bhb_loop+0x40/0x90 [ 441.991391][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.991403][ T8638] RIP: 0033:0x7f1fd459de99 [ 441.991413][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.991424][ T8638] RSP: 002b:00007f1fd5521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.991436][ T8638] RAX: ffffffffffffffda RBX: 00007f1fd4825fa0 RCX: 00007f1fd459de99 [ 441.991443][ T8638] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 441.991450][ T8638] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 441.991456][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.991463][ T8638] R13: 00007f1fd4826038 R14: 00007f1fd4825fa0 R15: 00007ffec9adbba8 [ 441.991473][ T8638] [ 441.991477][ T8638] [ 442.034000][ T5801] Bluetooth: hci0: command tx timeout [ 442.034475][ T8638] Allocated by task 6284: [ 442.034496][ T8638] kasan_save_stack+0x30/0x50 [ 442.034515][ T8638] kasan_save_track+0x14/0x30 [ 442.034532][ T8638] __kasan_kmalloc+0xaa/0xb0 [ 442.034544][ T8638] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 442.034559][ T8638] kmemdup_noprof+0x29/0x60 [ 442.034572][ T8638] platform_device_add_resources+0x37/0x100 [ 442.034592][ T8638] dwc2_pci_probe+0x1d3/0x360 [ 442.034609][ T8638] local_pci_probe+0xdd/0x1b0 [ 442.034620][ T8638] pci_call_probe+0x176/0x800 [ 442.034631][ T8638] pci_device_probe+0x1cd/0x370 [ 442.034643][ T8638] really_probe+0x241/0xa60 [ 442.034655][ T8638] __driver_probe_device+0x20e/0x450 [ 442.034669][ T8638] device_driver_attach+0xd1/0x220 [ 442.034682][ T8638] bind_store+0xf4/0x190 [ 442.034692][ T8638] drv_attr_store+0x74/0xb0 [ 442.034708][ T8638] sysfs_kf_write+0xf2/0x150 [ 442.034725][ T8638] kernfs_fop_write_iter+0x3e0/0x5f0 [ 442.034740][ T8638] vfs_write+0x6ac/0x1050 [ 442.034757][ T8638] ksys_write+0x12a/0x250 [ 442.034774][ T8638] do_syscall_64+0x115/0x870 [ 442.034787][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.034800][ T8638] [ 442.034803][ T8638] Freed by task 8638: [ 442.034808][ T8638] kasan_save_stack+0x30/0x50 [ 442.034821][ T8638] kasan_save_track+0x14/0x30 [ 442.034833][ T8638] kasan_save_free_info+0x3b/0x70 [ 442.034851][ T8638] __kasan_slab_free+0x5f/0x80 [ 442.034865][ T8638] kfree+0x22b/0x6c0 [ 442.034882][ T8638] platform_device_release+0x8a/0xb0 [ 442.034899][ T8638] device_release+0xd2/0x270 [ 442.034917][ T8638] kobject_put+0x1f7/0x640 [ 442.034932][ T8638] put_device+0x1f/0x30 [ 442.034941][ T8638] platform_device_unregister+0x45/0x50 [ 442.034953][ T8638] dwc2_pci_remove+0x55/0xd0 [ 442.034969][ T8638] pci_device_remove+0xb2/0x1d0 [ 442.034978][ T8638] device_remove+0xcb/0x180 [ 442.034990][ T8638] device_release_driver_internal+0x44e/0x620 [ 442.035006][ T8638] pci_stop_bus_device+0x120/0x160 [ 442.035019][ T8638] pci_stop_and_remove_bus_device+0x58/0xa0 [ 442.035033][ T8638] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 442.035047][ T8638] remove_store+0x123/0x140 [ 442.035060][ T8638] dev_attr_store+0x58/0x80 [ 442.035075][ T8638] sysfs_kf_write+0xf2/0x150 [ 442.035091][ T8638] kernfs_fop_write_iter+0x3e0/0x5f0 [ 442.035106][ T8638] vfs_write+0x6ac/0x1050 [ 442.035122][ T8638] ksys_write+0x12a/0x250 [ 442.035138][ T8638] do_syscall_64+0x115/0x870 [ 442.035150][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.035161][ T8638] [ 442.035164][ T8638] The buggy address belongs to the object at ffff88802d33ab00 [ 442.035164][ T8638] which belongs to the cache kmalloc-128 of size 128 [ 442.035175][ T8638] The buggy address is located 56 bytes inside of [ 442.035175][ T8638] freed 128-byte region [ffff88802d33ab00, ffff88802d33ab80) [ 442.035186][ T8638] [ 442.035189][ T8638] The buggy address belongs to the physical page: [ 442.035196][ T8638] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d33a600 pfn:0x2d33a [ 442.035213][ T8638] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 442.035224][ T8638] page_type: f5(slab) [ 442.035234][ T8638] raw: 00fff00000000200 ffff88801bc42a00 ffffea0000b3b990 ffffea0000b17a50 [ 442.035244][ T8638] raw: ffff88802d33a600 000000080010000d 00000000f5000000 0000000000000000 [ 442.035250][ T8638] page dumped because: kasan: bad access detected [ 442.035256][ T8638] page_owner tracks the page as allocated [ 442.035260][ T8638] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1025, tgid 1025 (kworker/u33:7), ts 9937886500, free_ts 9937803472 [ 442.035297][ T8638] post_alloc_hook+0xfd/0x120 [ 442.035315][ T8638] get_page_from_freelist+0xf48/0x3530 [ 442.035326][ T8638] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 442.035337][ T8638] new_slab+0xa2/0x640 [ 442.035346][ T8638] refill_objects+0xe3/0x410 [ 442.035355][ T8638] __pcs_replace_empty_main+0x376/0x680 [ 442.035372][ T8638] __kmalloc_noprof+0x66d/0x820 [ 442.035383][ T8638] lsm_blob_alloc+0x68/0x90 [ 442.035395][ T8638] security_task_alloc+0x2a/0x260 [ 442.035405][ T8638] copy_process+0x2b94/0x8030 [ 442.035421][ T8638] kernel_clone+0x176/0x9d0 [ 442.035435][ T8638] user_mode_thread+0xcc/0x110 [ 442.035449][ T8638] call_usermodehelper_exec_work+0xcb/0x180 [ 442.035464][ T8638] process_one_work+0xa23/0x1940 [ 442.035475][ T8638] worker_thread+0x5ef/0xe50 [ 442.035485][ T8638] kthread+0x370/0x450 [ 442.035495][ T8638] page last free pid 1025 tgid 1025 stack trace: [ 442.035501][ T8638] __free_frozen_pages+0x79f/0x1090 [ 442.035517][ T8638] __kasan_populate_vmalloc+0x1ea/0x210 [ 442.035532][ T8638] alloc_vmap_area+0x95d/0x2bb0 [ 442.035545][ T8638] __get_vm_area_node+0x1ca/0x330 [ 442.035559][ T8638] __vmalloc_node_range_noprof+0x228/0x1630 [ 442.035574][ T8638] __vmalloc_node_noprof+0xad/0xf0 [ 442.035589][ T8638] copy_process+0x7fb/0x8030 [ 442.035603][ T8638] kernel_clone+0x176/0x9d0 [ 442.035617][ T8638] user_mode_thread+0xcc/0x110 [ 442.035631][ T8638] call_usermodehelper_exec_work+0xcb/0x180 [ 442.035644][ T8638] process_one_work+0xa23/0x1940 [ 442.035655][ T8638] worker_thread+0x5ef/0xe50 [ 442.035665][ T8638] kthread+0x370/0x450 [ 442.035674][ T8638] ret_from_fork+0x72b/0xd50 [ 442.292865][ T8638] ret_from_fork_asm+0x1a/0x30 [ 442.294406][ T8638] [ 442.295377][ T8638] Memory state around the buggy address: [ 442.297589][ T8638] ffff88802d33aa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 442.300412][ T8638] ffff88802d33aa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 442.303055][ T8638] >ffff88802d33ab00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 442.305586][ T8638] ^ [ 442.307479][ T8638] ffff88802d33ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 442.310234][ T8638] ffff88802d33ac00: 00 00 00 00 00 00 00 00 00 00 00 00 00 04 fc fc [ 442.313218][ T8638] ================================================================== [ 442.317260][ T8638] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 442.320291][ T8638] CPU: 3 UID: 0 PID: 8638 Comm: syz.1.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.324505][ T8638] Tainted: [L]=SOFTLOCKUP [ 442.326319][ T8638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.330490][ T8638] Call Trace: [ 442.331748][ T8638] [ 442.332714][ T8638] dump_stack_lvl+0x100/0x190 [ 442.334319][ T8638] vpanic+0x552/0x970 [ 442.336028][ T8638] ? __pfx_vpanic+0x10/0x10 [ 442.337894][ T8638] ? mark_held_locks+0x40/0x70 [ 442.339463][ T8638] ? irqentry_exit+0x24d/0xa00 [ 442.341488][ T8638] ? __release_resource+0x276/0x2c0 [ 442.343703][ T8638] panic+0xd1/0xe0 [ 442.345265][ T8638] ? __pfx_panic+0x10/0x10 [ 442.346696][ T8638] ? check_panic_on_warn+0x1f/0x90 [ 442.348399][ T8638] check_panic_on_warn.cold+0x19/0x34 [ 442.350084][ T8638] end_report.part.0+0x3a/0x90 [ 442.351708][ T8638] kasan_report.cold+0xe/0x18 [ 442.353247][ T8638] ? __release_resource+0x276/0x2c0 [ 442.354980][ T8638] __release_resource+0x276/0x2c0 [ 442.356603][ T8638] release_resource+0x26/0x40 [ 442.358088][ T8638] pci_remove_bus_device+0x2d3/0x3b0 [ 442.359789][ T8638] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 442.361956][ T8638] remove_store+0x123/0x140 [ 442.363603][ T8638] ? __pfx_remove_store+0x10/0x10 [ 442.365315][ T8638] ? find_held_lock+0x2b/0x80 [ 442.366801][ T8638] ? sysfs_file_kobj+0xe4/0x290 [ 442.368441][ T8638] ? sysfs_file_kobj+0xe4/0x290 [ 442.370054][ T8638] ? __pfx_remove_store+0x10/0x10 [ 442.371734][ T8638] dev_attr_store+0x58/0x80 [ 442.373392][ T8638] ? __pfx_dev_attr_store+0x10/0x10 [ 442.375360][ T8638] sysfs_kf_write+0xf2/0x150 [ 442.377214][ T8638] kernfs_fop_write_iter+0x3e0/0x5f0 [ 442.379297][ T8638] ? __pfx_sysfs_kf_write+0x10/0x10 [ 442.381195][ T8638] vfs_write+0x6ac/0x1050 [ 442.382617][ T8638] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 442.384554][ T8638] ? __pfx_vfs_write+0x10/0x10 [ 442.386163][ T8638] ksys_write+0x12a/0x250 [ 442.387621][ T8638] ? __pfx_ksys_write+0x10/0x10 [ 442.389262][ T8638] do_syscall_64+0x115/0x870 [ 442.390758][ T8638] ? clear_bhb_loop+0x40/0x90 [ 442.392354][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.394276][ T8638] RIP: 0033:0x7f1fd459de99 [ 442.395799][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.402050][ T8638] RSP: 002b:00007f1fd5521028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.404802][ T8638] RAX: ffffffffffffffda RBX: 00007f1fd4825fa0 RCX: 00007f1fd459de99 [ 442.407355][ T8638] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 442.409889][ T8638] RBP: 00007f1fd4633eaf R08: 0000000000000000 R09: 0000000000000000 [ 442.412474][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.415058][ T8638] R13: 00007f1fd4826038 R14: 00007f1fd4825fa0 R15: 00007ffec9adbba8 [ 442.417647][ T8638] [ 442.419334][ T8638] Kernel Offset: disabled [ 442.420722][ T8638] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:43:06 Registers: info registers vcpu 0 CPU#0 RAX=ffffc900034c7660 RBX=ffffc900034c76b8 RCX=ffffc900034c76c0 RDX=ffffc900034c8000 RSI=ffffffff8e18006a RDI=ffff888031e0aa04 RBP=dffffc0000000000 RSP=ffffc900034c75d8 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b886 R12=fffff52000698ec7 R13=fffff52000698ec6 R14=ffffc900034c7628 R15=ffffc900034c7630 RIP=ffffffff81b887c9 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557cca5500 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557ccc0a28 CR3=0000000045de0000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a946b40 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a947db6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4a947db6 00007ffc4a947dbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad0234492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad02344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad0234636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ad02344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000090 0000000000000002 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000246 RBX=1ffff92000690f9e RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e18006a RDI=ffff8880275f04c4 RBP=0000000000000000 RSP=ffffc90003487cf0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8be5fbc0 R13=000000000000040f R14=ffff8880275f0000 R15=0000000000000000 RIP=ffffffff81d5b208 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd628fdc880 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff17fcccd58 CR3=00000000333af000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000004 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff70e75660 000055ff70e75660 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff70e4f9f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff70e5e140 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6289f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01e1eb0e4d57131a 737373762c847d34 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737262 7373737373737313 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 433230302c423230 302c393230003931 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d11420f0d 0d11040f0d00040c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000045544154 000055fa2f124d34 0000000000000021 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6289f2280 000055ff710b3950 0000000000009f01 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8ebe8120 RCX=0000000000000001 RDX=0000000000000046 RSI=ffffffff8e18006a RDI=ffffffff8c401680 RBP=ffff88803186ca80 RSP=ffffc9000431f8d0 R8 =0000000000000000 R9 =fffffbfff2244f3a R10=ffffffff912279d7 R11=0000000000000002 R12=00000000ffffffff R13=0000000000000246 R14=ffff888034a6d4f8 R15=ffff88806a63b4c0 RIP=ffffffff8bbb11c2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555575fab500 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c24c353 CR3=0000000026aad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073726573752d79 656b2f636f72702f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7fce3216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7fce3216 00007fff7fce321c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff17ee34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff17ee344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff17ee34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff17ee344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 406271a1bf05f4ff f67d91d7ad23b7c5 d068cbbc9315a669 13aec020e538f9ad ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f73ae74a3503a38 7e1a88d5bc4487c8 8c01654b6e238fa0 7b59500b229c2641 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c7f9e089d743a24 ed11db25e84e2f07 72071af521d80f0b a8092998a9c39365 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 99d3621a171e858a d4278ced7a6a74fd 932e6dbc97e3a13f 73ae74a3503a387e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a88d5bc4487c88c 01654b6e238fa07b 59500b229c2641a1 a601c0b76b258065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c150efef49c22a31 f51372f42e28b909 31b924768f725d40 6271a1bf05f4fff6 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900065af548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033363854 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b6fa1f5 R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1fd55216c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1fd54ffff8 CR3=00000000542d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000000f9 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000004 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff70e75660 000055ff70e75660 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff70e4f9f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff70e5e140 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6289f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01e1eb0e4d57131a 737373762c847d34 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737262 7373737373737313 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 433230302c423230 302c393230003931 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d11420f0d 0d11040f0d00040c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000045544154 000055fa2f124d34 0000000000000021 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6289f2280 000055ff710b3950 0000000000009f01 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000