last executing test programs: 25.246524264s ago: executing program 1 (id=935): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 23.967212987s ago: executing program 1 (id=941): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x20) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 22.718041644s ago: executing program 1 (id=944): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 19.909481984s ago: executing program 1 (id=948): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd181}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 19.496704331s ago: executing program 1 (id=952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) 17.467405938s ago: executing program 1 (id=959): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505", @ANYRESDEC], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0x5}, 0x3, 0x80, 0x0, 0x0, 0x2, 0x6512c6de, 0x4, 0xc, 0x100, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) 3.825130948s ago: executing program 0 (id=961): r0 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000500)}, &(0x7f0000000600)="28000000000000000100", &(0x7f0000000700), 0x4e20, 0x0, 0x1, 0x0}) 3.769598497s ago: executing program 0 (id=973): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x101002) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000300)=[0x8, 0x1]) 3.705961944s ago: executing program 3 (id=974): close(0x3) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='44100,48000,9', 0xd) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.626498204s ago: executing program 3 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5dc, 0x1, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0xf3, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/ums-jumpshot/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1-1:1.0\x00', 0x7) write(r0, &(0x7f0000000310)='2-1:1.0\x00', 0x7) write(r0, &(0x7f0000000320)='3-1:1.0\x00', 0x7) write(r0, &(0x7f0000000330)='4-1:1.0\x00', 0x7) write(r0, &(0x7f0000000340)='5-1:1.0\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/ums-jumpshot/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1-1:1.0\x00', 0x7) write(r1, &(0x7f0000000510)='2-1:1.0\x00', 0x7) write(r1, &(0x7f0000000520)='3-1:1.0\x00', 0x7) write(r1, &(0x7f0000000530)='4-1:1.0\x00', 0x7) write(r1, &(0x7f0000000540)='5-1:1.0\x00', 0x7) 2.520255863s ago: executing program 0 (id=984): r0 = syz_usbip_server_init(0x3) read(r0, &(0x7f0000000000)=""/48, 0x30) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 1.982131459s ago: executing program 32 (id=959): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505", @ANYRESDEC], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {0x5}, 0x3, 0x80, 0x0, 0x0, 0x2, 0x6512c6de, 0x4, 0xc, 0x100, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) 1.587606952s ago: executing program 2 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) close(0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.437576476s ago: executing program 3 (id=987): syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=ANY=[@ANYBLOB="80000000ffffffffffffffffffffffff50505050505000000000000000000000640001000006020202020202010196"], 0x59) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.429867448s ago: executing program 0 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='N\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='N\x00', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='N\x00', 0x1) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000250)='./debug/failslab/interval\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x1) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/times\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='100\x00', 0x3) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/failslab/probability\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='100\x00', 0x3) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f00000003e0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003e0)='./proc\x00', &(0x7f00000003f0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r8, &(0x7f0000000440)='1\x00', 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)) 1.084555551s ago: executing program 0 (id=989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) 995.679386ms ago: executing program 0 (id=990): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_disconnect(0x3) 973.794704ms ago: executing program 2 (id=991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xfee00000, 0x0, 0x30}) 821.551018ms ago: executing program 2 (id=992): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) 737.370803ms ago: executing program 2 (id=993): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x14, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 729.03824ms ago: executing program 2 (id=994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x7, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="c21ab451ba9091016a50ab45559b", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 618.213533ms ago: executing program 3 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e324ef6d9d\x00', 0x25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='1073741824\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='pmem\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='namespace0.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r0, &(0x7f0000000f00)='pfn0.0\x00', 0x7) write(r3, &(0x7f0000000900)='2097152\x00', 0x8) write(r6, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 331.013771ms ago: executing program 3 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='2\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='2\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='6\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='2\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000840)='6\x00', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0\x00', 0xb) 180.104131ms ago: executing program 3 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x33b, 0x0, @default, @val, @void}, 0x20) 110.105164ms ago: executing program 2 (id=998): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r4, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r4) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r6, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000b00)='\n\x00', 0x1) close(r7) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 4 (id=985): r0 = syz_usbip_server_init(0x1) poll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x7d0) nanosleep(&(0x7f0000000040)={0x2}, 0x0) kernel console output (not intermixed with test programs): 2] common_startup_64+0x13e/0x158 [ 337.088288][ C2] [ 337.146652][T10300] FAULT_INJECTION: forcing a failure. [ 337.146652][T10300] name failslab, interval 1, probability 1, space 0, times 37 [ 337.146900][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 337.146923][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.146936][ C1] Call Trace: [ 337.146945][ C1] [ 337.146953][ C1] dump_stack_lvl+0x100/0x190 [ 337.146983][ C1] should_fail_ex.cold+0x5/0xa [ 337.147009][ C1] should_failslab+0xc2/0x120 [ 337.147035][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 337.147063][ C1] ? __alloc_skb+0x140/0x710 [ 337.147092][ C1] __alloc_skb+0x140/0x710 [ 337.147112][ C1] ? __alloc_skb+0x5b7/0x710 [ 337.147143][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 337.147164][ C1] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 337.147191][ C1] ndisc_alloc_skb+0xd8/0x530 [ 337.147218][ C1] ndisc_send_rs+0x370/0x680 [ 337.147245][ C1] addrconf_rs_timer+0x424/0x880 [ 337.147271][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 337.147295][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 337.147318][ C1] call_timer_fn+0x19a/0x610 [ 337.147347][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 337.147373][ C1] ? __run_timers+0x747/0xb00 [ 337.147401][ C1] ? rcu_is_watching+0x12/0xc0 [ 337.147423][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 337.147445][ C1] __run_timers+0x757/0xb00 [ 337.147480][ C1] ? __pfx___run_timers+0x10/0x10 [ 337.147519][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 337.147546][ C1] run_timer_base+0x114/0x190 [ 337.147571][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 337.147598][ C1] run_timer_softirq+0x1a/0x50 [ 337.147625][ C1] handle_softirqs+0x1ea/0x9b0 [ 337.147649][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 337.147671][ C1] ? _raw_spin_unlock+0x28/0x50 [ 337.147688][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 337.147711][ C1] __irq_exit_rcu+0x162/0x210 [ 337.147731][ C1] irq_exit_rcu+0x9/0x30 [ 337.147751][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 337.147772][ C1] [ 337.147777][ C1] [ 337.147784][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.147807][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 337.147828][ C1] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 337.147843][ C1] RSP: 0018:ffffc9000046fe00 EFLAGS: 00000202 [ 337.147862][ C1] RAX: 000000000053ec6d RBX: ffff88801c34a540 RCX: ffffffff8bb872d5 [ 337.147875][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 337.147887][ C1] RBP: ffffed10038694a8 R08: 0000000000000001 R09: ffffed100566678d [ 337.147898][ C1] R10: ffff88802b333c6b R11: 0000000000000000 R12: 0000000000000000 [ 337.147908][ C1] R13: 0000000000000000 R14: 1ffff9200008dfc4 R15: dffffc0000000000 [ 337.147927][ C1] ? ct_kernel_exit+0x125/0x180 [ 337.147953][ C1] default_idle+0x9/0x10 [ 337.147972][ C1] default_idle_call+0x6c/0xb0 [ 337.147997][ C1] do_idle+0x3a7/0x5b0 [ 337.148019][ C1] ? __pfx_do_idle+0x10/0x10 [ 337.148046][ C1] cpu_startup_entry+0x4f/0x60 [ 337.148068][ C1] start_secondary+0x21d/0x2d0 [ 337.148092][ C1] ? __pfx_start_secondary+0x10/0x10 [ 337.148114][ C1] common_startup_64+0x13e/0x158 [ 337.148155][ C1] [ 337.158442][ T5755] 0 0 0 [ 337.158475][ T5755] Node 0 DMA: 84*4kB (UM) 13*8kB (M) 5*16kB (M) 4*32kB (UM) 10*64kB (UM) 2*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2056kB [ 337.158630][ T5755] Node 0 DMA32: 15*4kB (UME) 54*8kB (UME) 29*16kB [ 337.160294][T10300] CPU: 0 UID: 0 PID: 10300 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 337.160311][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.160319][T10300] Workqueue: events_unbound nsim_dev_trap_report_work [ 337.160341][T10300] Call Trace: [ 337.160345][T10300] [ 337.160351][T10300] dump_stack_lvl+0x100/0x190 [ 337.160367][T10300] should_fail_ex.cold+0x5/0xa [ 337.160381][T10300] should_failslab+0xc2/0x120 [ 337.160397][T10300] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 337.160413][T10300] ? __alloc_skb+0x140/0x710 [ 337.160429][T10300] __alloc_skb+0x140/0x710 [ 337.160442][T10300] ? __alloc_skb+0x5b7/0x710 [ 337.160467][T10300] ? __pfx___alloc_skb+0x10/0x10 [ 337.160484][T10300] ? kfree_skbmem+0x19f/0x210 [ 337.160497][T10300] nsim_dev_trap_report_work+0x2af/0xd20 [ 337.160518][T10300] process_one_work+0xa23/0x1940 [ 337.160540][T10300] ? __pfx_process_one_work+0x10/0x10 [ 337.160559][T10300] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 337.160576][T10300] worker_thread+0x5ef/0xe50 [ 337.160595][T10300] ? __pfx_worker_thread+0x10/0x10 [ 337.160611][T10300] ? kthread+0x13a/0x450 [ 337.160624][T10300] ? __pfx_worker_thread+0x10/0x10 [ 337.160639][T10300] kthread+0x370/0x450 [ 337.160652][T10300] ? __pfx_kthread+0x10/0x10 [ 337.160667][T10300] ret_from_fork+0x72b/0xd50 [ 337.160682][T10300] ? __pfx_ret_from_fork+0x10/0x10 [ 337.160696][T10300] ? __switch_to+0x800/0x10f0 [ 337.160713][T10300] ? __pfx_kthread+0x10/0x10 [ 337.160728][T10300] ret_from_fork_asm+0x1a/0x30 [ 337.160749][T10300] [ 337.161365][ T38] FAULT_INJECTION: forcing a failure. [ 337.161365][ T38] name failslab, interval 1, probability 1, space 0, times 35 [ 337.162016][ T5755] (UME) [ 337.163848][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 337.163864][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.163884][ T38] Workqueue: events_unbound nsim_dev_trap_report_work [ 337.163904][ T38] Call Trace: [ 337.163908][ T38] [ 337.163913][ T38] dump_stack_lvl+0x100/0x190 [ 337.163928][ T38] should_fail_ex.cold+0x5/0xa [ 337.163941][ T38] should_failslab+0xc2/0x120 [ 337.163957][ T38] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 337.163972][ T38] ? __alloc_skb+0x140/0x710 [ 337.163989][ T38] __alloc_skb+0x140/0x710 [ 337.164002][ T38] ? __alloc_skb+0x5b7/0x710 [ 337.164016][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 337.164028][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.164041][ T38] ? __pfx___might_resched+0x10/0x10 [ 337.164062][ T38] nsim_dev_trap_report_work+0x2af/0xd20 [ 337.164083][ T38] process_one_work+0xa23/0x1940 [ 337.164105][ T38] ? __pfx_process_one_work+0x10/0x10 [ 337.164124][ T38] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 337.164140][ T38] worker_thread+0x5ef/0xe50 [ 337.164159][ T38] ? __pfx_worker_thread+0x10/0x10 [ 337.164175][ T38] ? kthread+0x13a/0x450 [ 337.164192][ T38] ? __pfx_worker_thread+0x10/0x10 [ 337.164208][ T38] kthread+0x370/0x450 [ 337.164221][ T38] ? __pfx_kthread+0x10/0x10 [ 337.164236][ T38] ret_from_fork+0x72b/0xd50 [ 337.164251][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 337.164265][ T38] ? __switch_to+0x800/0x10f0 [ 337.164281][ T38] ? __pfx_kthread+0x10/0x10 [ 337.164296][ T38] ret_from_fork_asm+0x1a/0x30 [ 337.164317][ T38] [ 337.164398][ T38] FAULT_INJECTION: forcing a failure. [ 337.164398][ T38] name failslab, interval 1, probability 1, space 0, times 34 [ 337.165599][ T5755] 75*32kB [ 337.167464][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 337.167479][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.167486][ T38] Workqueue: events_unbound nsim_dev_trap_report_work [ 337.167503][ T38] Call Trace: [ 337.167507][ T38] [ 337.167511][ T38] dump_stack_lvl+0x100/0x190 [ 337.167523][ T38] should_fail_ex.cold+0x5/0xa [ 337.167535][ T38] should_failslab+0xc2/0x120 [ 337.167550][ T38] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 337.167565][ T38] ? __alloc_skb+0x140/0x710 [ 337.167581][ T38] __alloc_skb+0x140/0x710 [ 337.167594][ T38] ? __alloc_skb+0x5b7/0x710 [ 337.167607][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 337.167623][ T38] ? kfree_skbmem+0x19f/0x210 [ 337.167635][ T38] nsim_dev_trap_report_work+0x2af/0xd20 [ 337.167656][ T38] process_one_work+0xa23/0x1940 [ 337.167677][ T38] ? __pfx_process_one_work+0x10/0x10 [ 337.167697][ T38] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 337.167714][ T38] worker_thread+0x5ef/0xe50 [ 337.167732][ T38] ? __pfx_worker_thread+0x10/0x10 [ 337.167748][ T38] ? kthread+0x13a/0x450 [ 337.167762][ T38] ? __pfx_worker_thread+0x10/0x10 [ 337.167776][ T38] kthread+0x370/0x450 [ 337.167790][ T38] ? __pfx_kthread+0x10/0x10 [ 337.167805][ T38] ret_from_fork+0x72b/0xd50 [ 337.167819][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 337.167833][ T38] ? __switch_to+0x800/0x10f0 [ 337.167849][ T38] ? __pfx_kthread+0x10/0x10 [ 337.167864][ T38] ret_from_fork_asm+0x1a/0x30 [ 337.167885][ T38] [ 337.171548][ T38] FAULT_INJECTION: forcing a failure. [ 337.171548][ T38] name failslab, interval 1, probability 1, space 0, times 33 [ 337.172836][ T5755] (UME) [ 337.174125][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 337.174141][ T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.174149][ T38] Workqueue: events_unbound cfg80211_wiphy_work [ 337.174171][ T38] Call Trace: [ 337.174175][ T38] [ 337.174180][ T38] dump_stack_lvl+0x100/0x190 [ 337.174199][ T38] should_fail_ex.cold+0x5/0xa [ 337.174212][ T38] should_failslab+0xc2/0x120 [ 337.174228][ T38] __kmalloc_noprof+0xfc/0x820 [ 337.174242][ T38] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 337.174264][ T38] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 337.174283][ T38] ? kasan_save_stack+0x3f/0x50 [ 337.174296][ T38] ? kasan_save_stack+0x30/0x50 [ 337.174309][ T38] ? __kasan_kmalloc+0xaa/0xb0 [ 337.174322][ T38] ? __kmalloc_noprof+0x322/0x820 [ 337.174336][ T38] ? lock_acquire+0x1b9/0x370 [ 337.174353][ T38] ? find_held_lock+0x2b/0x80 [ 337.174366][ T38] ? __kfree_rcu_sheaf+0x195/0x730 [ 337.174380][ T38] ? __kfree_rcu_sheaf+0x195/0x730 [ 337.174394][ T38] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 337.174416][ T38] ? kvfree_call_rcu+0x1be/0x4f0 [ 337.174428][ T38] ? __asan_memcpy+0x3c/0x60 [ 337.174442][ T38] ieee80211_inform_bss+0x159/0x1170 [ 337.174461][ T38] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 337.174480][ T38] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 337.174498][ T38] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 337.174514][ T38] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 337.174530][ T38] ? unwind_next_frame+0x3be/0x2090 [ 337.174550][ T38] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 337.174566][ T38] ? ret_from_fork_asm+0x1a/0x30 [ 337.174588][ T38] ? stack_trace_save+0x8e/0xc0 [ 337.174604][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 337.174621][ T38] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 337.174636][ T38] cfg80211_inform_bss_data+0x230/0x3b60 [ 337.174651][ T38] ? __kmalloc_noprof+0x322/0x820 [ 337.174664][ T38] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 337.174681][ T38] ? cfg80211_wiphy_work+0x2b7/0x550 [ 337.174696][ T38] ? process_one_work+0xa23/0x1940 [ 337.174712][ T38] ? worker_thread+0x5ef/0xe50 [ 337.174726][ T38] ? kthread+0x370/0x450 [ 337.174739][ T38] ? ret_from_fork+0x72b/0xd50 [ 337.174752][ T38] ? ret_from_fork_asm+0x1a/0x30 [ 337.174769][ T38] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 337.174787][ T38] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.174803][ T38] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 337.174823][ T38] ? __lock_acquire+0x49f/0x1a40 [ 337.174840][ T38] ? __lock_acquire+0x49f/0x1a40 [ 337.174861][ T38] ? __lock_acquire+0x49f/0x1a40 [ 337.174878][ T38] ? find_held_lock+0x2b/0x80 [ 337.174891][ T38] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 337.174907][ T38] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 337.174927][ T38] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 337.174946][ T38] ieee80211_bss_info_update+0x310/0xab0 [ 337.174965][ T38] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 337.174985][ T38] ? rcu_is_watching+0x12/0xc0 [ 337.174998][ T38] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 337.175013][ T38] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 337.175031][ T38] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 337.175054][ T38] ieee80211_iface_work+0xa9a/0x1070 [ 337.175074][ T38] cfg80211_wiphy_work+0x2b7/0x550 [ 337.175092][ T38] process_one_work+0xa23/0x1940 [ 337.175113][ T38] ? __pfx_process_one_work+0x10/0x10 [ 337.175132][ T38] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 337.175150][ T38] worker_thread+0x5ef/0xe50 [ 337.175168][ T38] ? __pfx_worker_thread+0x10/0x10 [ 337.175187][ T38] ? kthread+0x13a/0x450 [ 337.175201][ T38] ? __pfx_worker_thread+0x10/0x10 [ 337.175215][ T38] kthread+0x370/0x450 [ 337.175229][ T38] ? __pfx_kthread+0x10/0x10 [ 337.175244][ T38] ret_from_fork+0x72b/0xd50 [ 337.175258][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 337.175272][ T38] ? __switch_to+0x800/0x10f0 [ 337.175289][ T38] ? __pfx_kthread+0x10/0x10 [ 337.175304][ T38] ret_from_fork_asm+0x1a/0x30 [ 337.175324][ T38] [ 337.177515][ T48] FAULT_INJECTION: forcing a failure. [ 337.177515][ T48] name failslab, interval 1, probability 1, space 0, times 32 [ 337.177542][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 337.177561][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.177572][ T48] Workqueue: events_unbound cfg80211_wiphy_work [ 337.177597][ T48] Call Trace: [ 337.177602][ T48] [ 337.177609][ T48] dump_stack_lvl+0x100/0x190 [ 337.177629][ T48] should_fail_ex.cold+0x5/0xa [ 337.177649][ T48] should_failslab+0xc2/0x120 [ 337.177671][ T48] __kmalloc_noprof+0xfc/0x820 [ 337.177692][ T48] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 337.177724][ T48] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 337.177746][ T48] ? find_held_lock+0x2b/0x80 [ 337.177764][ T48] ? ieee80211_sta_active_ibss+0x222/0x420 [ 337.177787][ T48] ? ieee80211_sta_active_ibss+0x222/0x420 [ 337.177815][ T48] ? __lock_acquire+0x49f/0x1a40 [ 337.177841][ T48] ? __lock_acquire+0x49f/0x1a40 [ 337.177867][ T48] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 337.177903][ T48] ? rcu_is_watching+0x12/0xc0 [ 337.177920][ T48] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 337.177937][ T48] ? do_raw_spin_lock+0x128/0x260 [ 337.177949][ T48] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 337.177973][ T48] ieee80211_iface_work+0xa9a/0x1070 [ 337.178009][ T48] cfg80211_wiphy_work+0x2b7/0x550 [ 337.178038][ T48] process_one_work+0xa23/0x1940 [ 337.178072][ T48] ? __pfx_process_one_work+0x10/0x10 [ 337.178099][ T48] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 337.178125][ T48] worker_thread+0x5ef/0xe50 [ 337.178155][ T48] ? __pfx_worker_thread+0x10/0x10 [ 337.178174][ T48] ? kthread+0x13a/0x450 [ 337.178192][ T48] ? __pfx_worker_thread+0x10/0x10 [ 337.178207][ T48] kthread+0x370/0x450 [ 337.178224][ T48] ? __pfx_kthread+0x10/0x10 [ 337.178247][ T48] ret_from_fork+0x72b/0xd50 [ 337.178268][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 337.178290][ T48] ? __switch_to+0x800/0x10f0 [ 337.178312][ T48] ? __pfx_kthread+0x10/0x10 [ 337.178327][ T48] ret_from_fork_asm+0x1a/0x30 [ 337.178348][ T48] [ 337.207274][ C0] FAULT_INJECTION: forcing a failure. [ 337.207274][ C0] name failslab, interval 1, probability 1, space 0, times 31 [ 338.582484][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 338.582502][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.582511][ C0] Call Trace: [ 338.582519][ C0] [ 338.582525][ C0] dump_stack_lvl+0x100/0x190 [ 338.582545][ C0] should_fail_ex.cold+0x5/0xa [ 338.582559][ C0] should_failslab+0xc2/0x120 [ 338.582580][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 338.582596][ C0] ? __alloc_skb+0x140/0x710 [ 338.582612][ C0] __alloc_skb+0x140/0x710 [ 338.582626][ C0] ? __alloc_skb+0x5b7/0x710 [ 338.582639][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 338.582654][ C0] ? do_raw_spin_lock+0x128/0x260 [ 338.582670][ C0] skb_copy+0x1ca/0x3a0 [ 338.582685][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 338.582707][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 338.582723][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 338.582741][ C0] ? __lock_acquire+0x49f/0x1a40 [ 338.582760][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 338.582777][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 338.582794][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 338.582814][ C0] __iterate_interfaces+0x2e6/0x650 [ 338.582828][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 338.582845][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 338.582862][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 338.582878][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 338.582891][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 338.582904][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 338.582924][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 338.582939][ C0] handle_softirqs+0x1ea/0x9b0 [ 338.582954][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 338.582966][ C0] ? _raw_spin_unlock+0x28/0x50 [ 338.582978][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 338.582994][ C0] __irq_exit_rcu+0x162/0x210 [ 338.583006][ C0] irq_exit_rcu+0x9/0x30 [ 338.583018][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.583032][ C0] [ 338.583036][ C0] [ 338.583040][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.583054][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 338.583068][ C0] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 338.583079][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 338.583091][ C0] RAX: 000000000069236b RBX: ffffffff8e891480 RCX: ffffffff8bb872d5 [ 338.583098][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 338.583105][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 338.583112][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 338.583119][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 338.583130][ C0] ? ct_kernel_exit+0x125/0x180 [ 338.583146][ C0] default_idle+0x9/0x10 [ 338.583160][ C0] default_idle_call+0x6c/0xb0 [ 338.583174][ C0] do_idle+0x3a7/0x5b0 [ 338.583187][ C0] ? __pfx_do_idle+0x10/0x10 [ 338.583198][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 338.583215][ C0] cpu_startup_entry+0x4f/0x60 [ 338.583227][ C0] rest_init+0x251/0x260 [ 338.583243][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 338.583260][ C0] start_kernel+0x48e/0x490 [ 338.583279][ C0] x86_64_start_reservations+0x24/0x30 [ 338.583310][ C0] x86_64_start_kernel+0x12b/0x130 [ 338.583326][ C0] common_startup_64+0x13e/0x158 [ 338.583351][ C0] [ 338.584290][ T5755] 32*64kB [ 338.613450][ T5822] FAULT_INJECTION: forcing a failure. [ 338.613450][ T5822] name failslab, interval 1, probability 1, space 0, times 25 [ 338.617533][ T5755] (UME) [ 338.635218][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 338.635247][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.635260][ T5822] Workqueue: bat_events batadv_mcast_mla_update [ 338.635296][ T5822] Call Trace: [ 338.635303][ T5822] [ 338.635311][ T5822] dump_stack_lvl+0x100/0x190 [ 338.635337][ T5822] should_fail_ex.cold+0x5/0xa [ 338.635359][ T5822] should_failslab+0xc2/0x120 [ 338.635386][ T5822] __kmalloc_cache_noprof+0x91/0x6c0 [ 338.635409][ T5822] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 338.635441][ T5822] batadv_mcast_mla_update+0x19ae/0x3200 [ 338.635475][ T5822] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 338.635506][ T5822] ? debug_object_deactivate+0x2e4/0x3b0 [ 338.635543][ T5822] ? rcu_is_watching+0x12/0xc0 [ 338.635569][ T5822] process_one_work+0xa23/0x1940 [ 338.635606][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 338.635639][ T5822] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 338.635669][ T5822] worker_thread+0x5ef/0xe50 [ 338.635703][ T5822] ? kthread+0x13a/0x450 [ 338.635726][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 338.635748][ T5822] kthread+0x370/0x450 [ 338.635771][ T5822] ? __pfx_kthread+0x10/0x10 [ 338.635796][ T5822] ret_from_fork+0x72b/0xd50 [ 338.635820][ T5822] ? __pfx_ret_from_fork+0x10/0x10 [ 338.635841][ T5822] ? __switch_to+0x800/0x10f0 [ 338.635867][ T5822] ? __pfx_kthread+0x10/0x10 [ 338.635892][ T5822] ret_from_fork_asm+0x1a/0x30 [ 338.635926][ T5822] [ 338.697615][T10300] FAULT_INJECTION: forcing a failure. [ 338.697615][T10300] name failslab, interval 1, probability 1, space 0, times 23 [ 338.697649][T10300] CPU: 0 UID: 0 PID: 10300 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 338.697669][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.697682][T10300] Workqueue: events_unbound nsim_dev_trap_report_work [ 338.697715][T10300] Call Trace: [ 338.697723][T10300] [ 338.697730][T10300] dump_stack_lvl+0x100/0x190 [ 338.697752][T10300] should_fail_ex.cold+0x5/0xa [ 338.697773][T10300] should_failslab+0xc2/0x120 [ 338.697794][T10300] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 338.697816][T10300] ? __alloc_skb+0x140/0x710 [ 338.697842][T10300] __alloc_skb+0x140/0x710 [ 338.697859][T10300] ? __alloc_skb+0x5b7/0x710 [ 338.697878][T10300] ? __pfx___alloc_skb+0x10/0x10 [ 338.697895][T10300] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.697914][T10300] ? __pfx___might_resched+0x10/0x10 [ 338.697945][T10300] nsim_dev_trap_report_work+0x2af/0xd20 [ 338.697977][T10300] process_one_work+0xa23/0x1940 [ 338.698010][T10300] ? __pfx_process_one_work+0x10/0x10 [ 338.698036][T10300] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 338.698060][T10300] worker_thread+0x5ef/0xe50 [ 338.698088][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.698109][T10300] ? kthread+0x13a/0x450 [ 338.698129][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.698148][T10300] kthread+0x370/0x450 [ 338.698168][T10300] ? __pfx_kthread+0x10/0x10 [ 338.698189][T10300] ret_from_fork+0x72b/0xd50 [ 338.698216][T10300] ? __pfx_ret_from_fork+0x10/0x10 [ 338.698237][T10300] ? __switch_to+0x800/0x10f0 [ 338.698262][T10300] ? __pfx_kthread+0x10/0x10 [ 338.698284][T10300] ret_from_fork_asm+0x1a/0x30 [ 338.698316][T10300] [ 338.799423][ T5755] 20*128kB (UME) 9*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 15388kB [ 338.802548][ T5755] Node 1 DMA32: 967*4kB (UME) 441*8kB (UME) 607*16kB (UM) 467*32kB (UME) 281*64kB (UME) 69*128kB (ME) 30*256kB (UME) 50*512kB (UME) 29*1024kB (UM) 11*2048kB (M) 4*4096kB (M) = 160756kB [ 338.805499][ T5152] FAULT_INJECTION: forcing a failure. [ 338.805499][ T5152] name failslab, interval 1, probability 1, space 0, times 22 [ 338.811850][ T5755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.816696][ T5755] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.819580][ T5755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.820534][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 338.820549][ T5152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.820556][ T5152] Call Trace: [ 338.820561][ T5152] [ 338.820567][ T5152] dump_stack_lvl+0x100/0x190 [ 338.820586][ T5152] should_fail_ex.cold+0x5/0xa [ 338.820600][ T5152] should_failslab+0xc2/0x120 [ 338.820616][ T5152] kmem_cache_alloc_noprof+0x91/0x6a0 [ 338.820631][ T5152] ? anon_vma_clone+0x2ba/0xcd0 [ 338.820650][ T5152] anon_vma_clone+0x2ba/0xcd0 [ 338.820666][ T5152] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 338.820683][ T5152] anon_vma_fork+0x1bb/0x6b0 [ 338.820697][ T5152] dup_mmap+0x143e/0x21b0 [ 338.820719][ T5152] ? __pfx_dup_mmap+0x10/0x10 [ 338.820734][ T5152] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.820750][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 338.820768][ T5152] ? find_held_lock+0x2b/0x80 [ 338.820781][ T5152] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 338.820808][ T5152] copy_process+0x4588/0x8030 [ 338.820822][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 338.820845][ T5152] ? __pfx_copy_process+0x10/0x10 [ 338.820858][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.820875][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.820890][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.820906][ T5152] ? __local_bh_enable_ip+0x9e/0x120 [ 338.820921][ T5152] kernel_clone+0x176/0x9d0 [ 338.820935][ T5152] ? __pfx_kernel_clone+0x10/0x10 [ 338.820952][ T5152] ? find_held_lock+0x2b/0x80 [ 338.820965][ T5152] ? __might_fault+0xc5/0x140 [ 338.820979][ T5152] __do_sys_clone+0xd9/0x120 [ 338.820992][ T5152] ? __pfx___do_sys_clone+0x10/0x10 [ 338.821011][ T5152] ? __sys_setsockopt+0x139/0x190 [ 338.821030][ T5152] do_syscall_64+0x115/0x840 [ 338.821043][ T5152] ? clear_bhb_loop+0x40/0x90 [ 338.821057][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.821069][ T5152] RIP: 0033:0x7f22b7ef1636 [ 338.821081][ T5152] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 338.821091][ T5152] RSP: 002b:00007ffcd042a3e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 338.821103][ T5152] RAX: ffffffffffffffda RBX: 00007ffcd042a3e8 RCX: 00007f22b7ef1636 [ 338.821111][ T5152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 338.821117][ T5152] RBP: 00005572c4fbc910 R08: 0000000000000000 R09: 00005572c4fc48e0 [ 338.821124][ T5152] R10: 00007f22b85fbb50 R11: 0000000000000246 R12: 00007ffcd042a7a0 [ 338.821130][ T5152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.821144][ T5152] [ 338.823617][ T1164] FAULT_INJECTION: forcing a failure. [ 338.823617][ T1164] name failslab, interval 1, probability 1, space 0, times 18 [ 338.823667][ T5152] udevd[5152]: fork of child failed: Cannot allocate memory [ 338.825131][ T5755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.828096][ T1164] CPU: 0 UID: 0 PID: 1164 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 338.828112][ T1164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.828120][ T1164] Workqueue: events_unbound nsim_dev_trap_report_work [ 338.828141][ T1164] Call Trace: [ 338.828146][ T1164] [ 338.828151][ T1164] dump_stack_lvl+0x100/0x190 [ 338.828167][ T1164] should_fail_ex.cold+0x5/0xa [ 338.828180][ T1164] should_failslab+0xc2/0x120 [ 338.828197][ T1164] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 338.828213][ T1164] ? __alloc_skb+0x140/0x710 [ 338.828229][ T1164] __alloc_skb+0x140/0x710 [ 338.828242][ T1164] ? __alloc_skb+0x5b7/0x710 [ 338.828259][ T1164] ? __pfx___alloc_skb+0x10/0x10 [ 338.828275][ T1164] ? kfree_skbmem+0x19f/0x210 [ 338.828287][ T1164] nsim_dev_trap_report_work+0x2af/0xd20 [ 338.828308][ T1164] process_one_work+0xa23/0x1940 [ 338.828330][ T1164] ? __pfx_process_one_work+0x10/0x10 [ 338.828349][ T1164] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 338.828365][ T1164] worker_thread+0x5ef/0xe50 [ 338.828385][ T1164] ? kthread+0x13a/0x450 [ 338.828399][ T1164] ? __pfx_worker_thread+0x10/0x10 [ 338.828414][ T1164] kthread+0x370/0x450 [ 338.828427][ T1164] ? __pfx_kthread+0x10/0x10 [ 338.828443][ T1164] ret_from_fork+0x72b/0xd50 [ 338.828458][ T1164] ? __pfx_ret_from_fork+0x10/0x10 [ 338.828472][ T1164] ? __switch_to+0x800/0x10f0 [ 338.828488][ T1164] ? __pfx_kthread+0x10/0x10 [ 338.828503][ T1164] ret_from_fork_asm+0x1a/0x30 [ 338.828524][ T1164] [ 338.828643][T10300] FAULT_INJECTION: forcing a failure. [ 338.828643][T10300] name failslab, interval 1, probability 1, space 0, times 17 [ 338.828928][ T5152] FAULT_INJECTION: forcing a failure. [ 338.828928][ T5152] name failslab, interval 1, probability 1, space 0, times 17 [ 338.828946][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 338.828958][ T5152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.828965][ T5152] Call Trace: [ 338.828969][ T5152] [ 338.828973][ T5152] dump_stack_lvl+0x100/0x190 [ 338.828988][ T5152] should_fail_ex.cold+0x5/0xa [ 338.829001][ T5152] should_failslab+0xc2/0x120 [ 338.829017][ T5152] kmem_cache_alloc_noprof+0x91/0x6a0 [ 338.829032][ T5152] ? vm_area_dup+0x27/0x8e0 [ 338.829046][ T5152] vm_area_dup+0x27/0x8e0 [ 338.829057][ T5152] dup_mmap+0x6f6/0x21b0 [ 338.829078][ T5152] ? __pfx_dup_mmap+0x10/0x10 [ 338.829094][ T5152] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.829113][ T5755] 39899 total pagecache pages [ 338.829110][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 338.829127][ T5152] ? find_held_lock+0x2b/0x80 [ 338.829141][ T5152] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 338.829168][ T5152] copy_process+0x4588/0x8030 [ 338.829180][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 338.829208][ T5152] ? __pfx_copy_process+0x10/0x10 [ 338.829221][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.829238][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.829253][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.829269][ T5152] ? __local_bh_enable_ip+0x9e/0x120 [ 338.829284][ T5152] kernel_clone+0x176/0x9d0 [ 338.829298][ T5152] ? __pfx_kernel_clone+0x10/0x10 [ 338.829315][ T5152] ? find_held_lock+0x2b/0x80 [ 338.829328][ T5152] ? __might_fault+0xc5/0x140 [ 338.829342][ T5152] __do_sys_clone+0xd9/0x120 [ 338.829355][ T5152] ? __pfx___do_sys_clone+0x10/0x10 [ 338.829375][ T5152] ? __sys_setsockopt+0x139/0x190 [ 338.829423][ T5152] do_syscall_64+0x115/0x840 [ 338.829442][ T5152] ? clear_bhb_loop+0x40/0x90 [ 338.829461][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.829473][ T5152] RIP: 0033:0x7f22b7ef1636 [ 338.829483][ T5152] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 338.829494][ T5152] RSP: 002b:00007ffcd042a3e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 338.829505][ T5152] RAX: ffffffffffffffda RBX: 00007ffcd042a3e8 RCX: 00007f22b7ef1636 [ 338.829512][ T5152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 338.829519][ T5152] RBP: 00005572c4fbc910 R08: 0000000000000000 R09: 00005572c4fc48e0 [ 338.829525][ T5152] R10: 00007f22b85fbb50 R11: 0000000000000246 R12: 00007ffcd042a7a0 [ 338.829532][ T5152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.829545][ T5152] [ 338.830009][T10300] CPU: 0 UID: 0 PID: 10300 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 338.830023][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.830030][T10300] Workqueue: events_unbound nsim_dev_trap_report_work [ 338.830046][T10300] Call Trace: [ 338.830050][T10300] [ 338.830055][T10300] dump_stack_lvl+0x100/0x190 [ 338.830067][T10300] should_fail_ex.cold+0x5/0xa [ 338.830079][T10300] should_failslab+0xc2/0x120 [ 338.830095][T10300] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 338.830123][T10300] ? __alloc_skb+0x140/0x710 [ 338.830139][T10300] __alloc_skb+0x140/0x710 [ 338.830152][T10300] ? __alloc_skb+0x5b7/0x710 [ 338.830166][T10300] ? __pfx___alloc_skb+0x10/0x10 [ 338.830181][T10300] ? kfree_skbmem+0x19f/0x210 [ 338.830194][T10300] nsim_dev_trap_report_work+0x2af/0xd20 [ 338.830214][T10300] process_one_work+0xa23/0x1940 [ 338.830235][T10300] ? __pfx_process_one_work+0x10/0x10 [ 338.830259][T10300] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 338.830275][T10300] worker_thread+0x5ef/0xe50 [ 338.830294][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.830310][T10300] ? kthread+0x13a/0x450 [ 338.830324][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.830338][T10300] kthread+0x370/0x450 [ 338.830352][T10300] ? __pfx_kthread+0x10/0x10 [ 338.830368][T10300] ret_from_fork+0x72b/0xd50 [ 338.830382][T10300] ? __pfx_ret_from_fork+0x10/0x10 [ 338.830396][T10300] ? __switch_to+0x800/0x10f0 [ 338.830412][T10300] ? __pfx_kthread+0x10/0x10 [ 338.830427][T10300] ret_from_fork_asm+0x1a/0x30 [ 338.830448][T10300] [ 338.830465][T10300] FAULT_INJECTION: forcing a failure. [ 338.830465][T10300] name failslab, interval 1, probability 1, space 0, times 15 [ 338.830556][T10343] FAULT_INJECTION: forcing a failure. [ 338.830556][T10343] name failslab, interval 1, probability 1, space 0, times 15 [ 338.830582][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.1.952 Not tainted syzkaller #0 PREEMPT(full) [ 338.830594][T10343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.830601][T10343] Call Trace: [ 338.830605][T10343] [ 338.830609][T10343] dump_stack_lvl+0x100/0x190 [ 338.830623][T10343] should_fail_ex.cold+0x5/0xa [ 338.830635][T10343] should_failslab+0xc2/0x120 [ 338.830651][T10343] __kmalloc_cache_noprof+0x91/0x6c0 [ 338.830662][T10343] ? __lock_acquire+0x49f/0x1a40 [ 338.830679][T10343] ? nsim_fib_event_nb+0x1a8/0xe40 [ 338.830698][T10343] nsim_fib_event_nb+0x1a8/0xe40 [ 338.830718][T10343] notifier_call_chain+0x99/0x3f0 [ 338.830735][T10343] atomic_notifier_call_chain+0x71/0x1c0 [ 338.830751][T10343] call_fib_notifiers+0x33/0x70 [ 338.830768][T10343] fib_notify_alias_delete+0x2b6/0x390 [ 338.830786][T10343] ? __pfx_fib_notify_alias_delete+0x10/0x10 [ 338.830809][T10343] fib_table_flush+0x3de/0xb40 [ 338.830823][T10343] ? __pfx_fib_table_flush+0x10/0x10 [ 338.830836][T10343] ? __pfx_fib_sync_down_dev+0x10/0x10 [ 338.830854][T10343] fib_flush+0x9b/0x130 [ 338.830868][T10343] fib_netdev_event+0x1ed/0x710 [ 338.830882][T10343] notifier_call_chain+0x99/0x3f0 [ 338.830899][T10343] call_netdevice_notifiers_info+0xbe/0x110 [ 338.830917][T10343] netif_close_many+0x319/0x630 [ 338.830928][T10343] ? __mod_timer+0x409/0xca0 [ 338.830939][T10343] ? __pfx_netif_close_many+0x10/0x10 [ 338.830951][T10343] ? netif_close_many_and_unlock+0x1af/0x270 [ 338.830962][T10343] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.830975][T10343] unregister_netdevice_many_notify+0x840/0x2140 [ 338.830994][T10343] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.831007][T10343] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.831023][T10343] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 338.831035][T10343] ? linkwatch_fire_event+0x211/0x270 [ 338.831046][T10343] ? netif_carrier_off+0xa8/0xc0 [ 338.831066][T10343] unregister_netdevice_queue+0x30b/0x3c0 [ 338.831082][T10343] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.831098][T10343] ? linkwatch_schedule_work+0x16f/0x1a0 [ 338.831110][T10343] ? linkwatch_fire_event+0x74/0x270 [ 338.831123][T10343] __tun_detach+0x1371/0x16e0 [ 338.831138][T10343] ? __pfx_tun_chr_close+0x10/0x10 [ 338.831149][T10343] tun_chr_close+0xc2/0x220 [ 338.831160][T10343] ? __pfx_tun_chr_close+0x10/0x10 [ 338.831170][T10343] __fput+0x3ff/0xb50 [ 338.831195][T10343] task_work_run+0x150/0x240 [ 338.831211][T10343] ? __pfx_task_work_run+0x10/0x10 [ 338.831231][T10343] do_exit+0x951/0x2ae0 [ 338.831248][T10343] ? __pfx_do_exit+0x10/0x10 [ 338.831261][T10343] ? __pfx_proc_coredump_connector+0x10/0x10 [ 338.831280][T10343] do_group_exit+0xd5/0x2a0 [ 338.831296][T10343] get_signal+0x1ec7/0x21e0 [ 338.831313][T10343] ? __pfx_get_signal+0x10/0x10 [ 338.831325][T10343] ? __pfx_force_sig_fault+0x10/0x10 [ 338.831340][T10343] arch_do_signal_or_restart+0x91/0x7a0 [ 338.831359][T10343] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.831384][T10343] irqentry_exit+0x402/0xa00 [ 338.831401][ T5755] 506 pages in swap cache [ 338.831399][T10343] asm_exc_page_fault+0x26/0x30 [ 338.831408][ T5755] Free swap = 120796kB [ 338.831412][ T5755] Total swap = 124996kB [ 338.831410][T10343] RIP: 0023:0xf6ffefec [ 338.831419][ T5755] 524155 pages RAM [ 338.831420][T10343] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 338.831423][ T5755] 0 pages HighMem/MovableOnly [ 338.831425][T10343] RSP: 002b:00000000f53ab4bc EFLAGS: 00010286 [ 338.831428][ T5755] 211525 pages reserved [ 338.831432][T10343] [ 338.831435][T10343] RAX: 0000000000000000 RBX: 000000000000a000 RCX: 0000000000000000 [ 338.831442][T10343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.831448][T10343] RBP: 00000000f53ab5ec R08: 0000000000000000 R09: 0000000000000000 [ 338.831454][T10343] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.831461][T10343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.831474][T10343] [ 338.832816][T10300] CPU: 0 UID: 0 PID: 10300 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 338.832829][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.832836][T10300] Workqueue: events_unbound nsim_dev_trap_report_work [ 338.832852][T10300] Call Trace: [ 338.832855][T10300] [ 338.832859][T10300] dump_stack_lvl+0x100/0x190 [ 338.832872][T10300] should_fail_ex.cold+0x5/0xa [ 338.832883][T10300] should_failslab+0xc2/0x120 [ 338.832898][T10300] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 338.832913][T10300] ? __alloc_skb+0x140/0x710 [ 338.832928][T10300] __alloc_skb+0x140/0x710 [ 338.832941][T10300] ? __alloc_skb+0x5b7/0x710 [ 338.832954][T10300] ? __pfx___alloc_skb+0x10/0x10 [ 338.832969][T10300] ? kfree_skbmem+0x19f/0x210 [ 338.832981][T10300] nsim_dev_trap_report_work+0x2af/0xd20 [ 338.833002][T10300] process_one_work+0xa23/0x1940 [ 338.833022][T10300] ? __pfx_process_one_work+0x10/0x10 [ 338.833041][T10300] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 338.833058][T10300] worker_thread+0x5ef/0xe50 [ 338.833076][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.833092][T10300] ? kthread+0x13a/0x450 [ 338.833105][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.833120][T10300] kthread+0x370/0x450 [ 338.833133][T10300] ? __pfx_kthread+0x10/0x10 [ 338.833148][T10300] ret_from_fork+0x72b/0xd50 [ 338.833161][T10300] ? __pfx_ret_from_fork+0x10/0x10 [ 338.833175][T10300] ? __switch_to+0x800/0x10f0 [ 338.833191][T10300] ? __pfx_kthread+0x10/0x10 [ 338.833206][T10300] ret_from_fork_asm+0x1a/0x30 [ 338.833227][T10300] [ 338.838038][ T5152] udevd[5152]: fork of child failed: Cannot allocate memory [ 338.839233][ T5755] 0 pages cma reserved [ 338.846217][ C3] FAULT_INJECTION: forcing a failure. [ 338.846217][ C3] name failslab, interval 1, probability 1, space 0, times 11 [ 338.846363][ T5744] FAULT_INJECTION: forcing a failure. [ 338.846363][ T5744] name failslab, interval 1, probability 1, space 0, times 11 [ 338.846449][ T5744] CPU: 2 UID: 0 PID: 5744 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 338.846464][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.846471][ T5744] Call Trace: [ 338.846476][ T5744] [ 338.846480][ T5744] dump_stack_lvl+0x100/0x190 [ 338.846497][ T5744] should_fail_ex.cold+0x5/0xa [ 338.846511][ T5744] should_failslab+0xc2/0x120 [ 338.846527][ T5744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 338.846542][ T5744] ? anon_vma_fork+0x8d/0x6b0 [ 338.846556][ T5744] anon_vma_fork+0x8d/0x6b0 [ 338.846567][ T5744] ? vm_area_dup+0x59d/0x8e0 [ 338.846579][ T5744] dup_mmap+0x143e/0x21b0 [ 338.846600][ T5744] ? __pfx_dup_mmap+0x10/0x10 [ 338.846612][T10300] FAULT_INJECTION: forcing a failure. [ 338.846612][T10300] name failslab, interval 1, probability 1, space 0, times 11 [ 338.846618][ T5744] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.846633][ T5744] ? __lock_acquire+0x49f/0x1a40 [ 338.846660][ T5744] ? find_held_lock+0x2b/0x80 [ 338.846673][ T5744] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 338.846701][ T5744] copy_process+0x4588/0x8030 [ 338.846722][ T5744] ? __pfx_copy_process+0x10/0x10 [ 338.846734][ T5744] ? __pfx_do_wp_page+0x10/0x10 [ 338.846752][ T5744] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.846768][ T5744] kernel_clone+0x176/0x9d0 [ 338.846788][ T5744] ? __pfx_kernel_clone+0x10/0x10 [ 338.846813][ T5744] ? find_held_lock+0x2b/0x80 [ 338.846833][ T5744] ? __might_fault+0xc5/0x140 [ 338.846850][ T5744] ? __might_fault+0xc5/0x140 [ 338.846872][ T5744] __do_compat_sys_ia32_clone+0xd4/0x120 [ 338.846896][ T5744] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 338.846929][ T5744] __do_fast_syscall_32+0xe7/0x970 [ 338.846946][ T5744] do_fast_syscall_32+0x32/0x70 [ 338.846960][ T5744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.846974][ T5744] RIP: 0023:0xf7fd5fec [ 338.846985][ T5744] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 338.846995][ T5744] RSP: 002b:00000000ffb60100 EFLAGS: 00000286 ORIG_RAX: 0000000000000078 [ 338.847007][ T5744] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 338.847015][ T5744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d054e8 [ 338.847021][ T5744] RBP: 00000000ffb60134 R08: 0000000000000000 R09: 0000000000000000 [ 338.847028][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.847034][ T5744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.847047][ T5744] [ 338.848855][ T5152] FAULT_INJECTION: forcing a failure. [ 338.848855][ T5152] name failslab, interval 1, probability 1, space 0, times 10 [ 338.853641][T10300] CPU: 0 UID: 0 PID: 10300 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 338.853665][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.853679][T10300] Workqueue: events_unbound cfg80211_wiphy_work [ 338.853710][T10300] Call Trace: [ 338.853717][T10300] [ 338.853725][T10300] dump_stack_lvl+0x100/0x190 [ 338.853749][T10300] should_fail_ex.cold+0x5/0xa [ 338.853769][T10300] should_failslab+0xc2/0x120 [ 338.853792][T10300] __kmalloc_noprof+0xfc/0x820 [ 338.853814][T10300] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 338.853844][T10300] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 338.853872][T10300] ? find_held_lock+0x2b/0x80 [ 338.853893][T10300] ? ieee80211_sta_active_ibss+0x222/0x420 [ 338.853918][T10300] ? ieee80211_sta_active_ibss+0x222/0x420 [ 338.853947][T10300] ? __lock_acquire+0x49f/0x1a40 [ 338.853975][T10300] ? __lock_acquire+0x49f/0x1a40 [ 338.854001][T10300] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 338.854039][T10300] ? rcu_is_watching+0x12/0xc0 [ 338.854064][T10300] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 338.854091][T10300] ? do_raw_spin_lock+0x128/0x260 [ 338.854110][T10300] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 338.854148][T10300] ieee80211_iface_work+0xa9a/0x1070 [ 338.854180][T10300] cfg80211_wiphy_work+0x2b7/0x550 [ 338.854208][T10300] process_one_work+0xa23/0x1940 [ 338.854243][T10300] ? __pfx_process_one_work+0x10/0x10 [ 338.854280][T10300] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 338.854307][T10300] worker_thread+0x5ef/0xe50 [ 338.854338][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.854362][T10300] ? kthread+0x13a/0x450 [ 338.854384][T10300] ? __pfx_worker_thread+0x10/0x10 [ 338.854406][T10300] kthread+0x370/0x450 [ 338.854427][T10300] ? __pfx_kthread+0x10/0x10 [ 338.854451][T10300] ret_from_fork+0x72b/0xd50 [ 338.854474][T10300] ? __pfx_ret_from_fork+0x10/0x10 [ 338.854496][T10300] ? __switch_to+0x800/0x10f0 [ 338.854522][T10300] ? __pfx_kthread+0x10/0x10 [ 338.854546][T10300] ret_from_fork_asm+0x1a/0x30 [ 338.854581][T10300] [ 338.854593][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 338.854632][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.854645][ C3] Call Trace: [ 338.854653][ C3] [ 338.854661][ C3] dump_stack_lvl+0x100/0x190 [ 338.854687][ C3] should_fail_ex.cold+0x5/0xa [ 338.854710][ C3] should_failslab+0xc2/0x120 [ 338.854738][ C3] __kmalloc_noprof+0xfc/0x820 [ 338.854763][ C3] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 338.854800][ C3] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 338.854850][ C3] ? kasan_save_stack+0x3f/0x50 [ 338.854874][ C3] ? kasan_save_stack+0x30/0x50 [ 338.854897][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 338.854919][ C3] ? __kmalloc_noprof+0x322/0x820 [ 338.854945][ C3] ? lock_acquire+0x1b9/0x370 [ 338.854975][ C3] ? find_held_lock+0x2b/0x80 [ 338.854998][ C3] ? __kfree_rcu_sheaf+0x195/0x730 [ 338.855022][ C3] ? __kfree_rcu_sheaf+0x195/0x730 [ 338.855048][ C3] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 338.855085][ C3] ? kvfree_call_rcu+0x1be/0x4f0 [ 338.855108][ C3] ? __asan_memcpy+0x3c/0x60 [ 338.855132][ C3] ieee80211_inform_bss+0x159/0x1170 [ 338.855171][ C3] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 338.855206][ C3] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 338.855236][ C3] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 338.855266][ C3] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 338.855300][ C3] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 338.855343][ C3] ? mark_held_locks+0x40/0x70 [ 338.855372][ C3] ? find_held_lock+0x2b/0x80 [ 338.855396][ C3] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 338.855426][ C3] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 338.855455][ C3] ? rcu_is_watching+0x12/0xc0 [ 338.855483][ C3] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 338.855509][ C3] cfg80211_inform_bss_data+0x230/0x3b60 [ 338.855544][ C3] ? __lock_acquire+0x49f/0x1a40 [ 338.855574][ C3] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 338.855605][ C3] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 338.855644][ C3] ? find_held_lock+0x2b/0x80 [ 338.855667][ C3] ? unwind_next_frame+0x3be/0x2090 [ 338.855695][ C3] ? unwind_next_frame+0x3be/0x2090 [ 338.855735][ C3] ? __lock_acquire+0x49f/0x1a40 [ 338.855777][ C3] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 338.855812][ C3] ieee80211_bss_info_update+0x310/0xab0 [ 338.855844][ C3] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 338.855882][ C3] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 338.855909][ C3] ieee80211_scan_rx+0x4e6/0xb60 [ 338.855938][ C3] ? __lock_acquire+0x49f/0x1a40 [ 338.855969][ C3] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 338.855995][ C3] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 338.856016][ C3] ? do_raw_spin_lock+0x128/0x260 [ 338.856045][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 338.856069][ C3] ? ieee80211_clean_skb+0x1a7/0x740 [ 338.856100][ C3] ieee80211_rx_list+0xf19/0x2160 [ 338.856128][ C3] ? lock_acquire+0x1b9/0x370 [ 338.856161][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 338.856188][ C3] ieee80211_rx_napi+0xdc/0x400 [ 338.856211][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 338.856230][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 338.856253][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.856278][ C3] ieee80211_handle_queued_frames+0xc8/0x120 [ 338.856308][ C3] tasklet_action_common+0x2de/0x3d0 [ 338.856338][ C3] handle_softirqs+0x1ea/0x9b0 [ 338.856364][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 338.856387][ C3] ? _raw_spin_unlock+0x28/0x50 [ 338.856405][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 338.856435][ C3] __irq_exit_rcu+0x162/0x210 [ 338.856456][ C3] irq_exit_rcu+0x9/0x30 [ 338.856476][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.856499][ C3] [ 338.856505][ C3] [ 338.856513][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.856535][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 338.856559][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 338.856577][ C3] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000206 [ 338.856593][ C3] RAX: 00000000005fae8b RBX: ffff88801c3f2540 RCX: ffffffff8bb872d5 [ 338.856606][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 338.856619][ C3] RBP: ffffed100387e4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 338.856632][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 338.856643][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 338.856662][ C3] ? ct_kernel_exit+0x125/0x180 [ 338.856689][ C3] default_idle+0x9/0x10 [ 338.856713][ C3] default_idle_call+0x6c/0xb0 [ 338.856737][ C3] do_idle+0x3a7/0x5b0 [ 338.856760][ C3] ? __pfx_do_idle+0x10/0x10 [ 338.856783][ C3] ? do_idle+0x389/0x5b0 [ 338.856807][ C3] cpu_startup_entry+0x4f/0x60 [ 338.856830][ C3] start_secondary+0x21d/0x2d0 [ 338.856854][ C3] ? __pfx_start_secondary+0x10/0x10 [ 338.856882][ C3] common_startup_64+0x13e/0x158 [ 338.856923][ C3] [ 338.891506][ T5845] FAULT_INJECTION: forcing a failure. [ 338.891506][ T5845] name failslab, interval 1, probability 1, space 0, times 8 [ 338.892322][ T5852] FAULT_INJECTION: forcing a failure. [ 338.892322][ T5852] name failslab, interval 1, probability 1, space 0, times 8 [ 338.892462][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 338.892476][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.892484][ T5852] Workqueue: events nsim_fib_event_work [ 338.892501][ T5852] Call Trace: [ 338.892505][ T5852] [ 338.892510][ T5852] dump_stack_lvl+0x100/0x190 [ 338.892525][ T5852] should_fail_ex.cold+0x5/0xa [ 338.892539][ T5852] should_failslab+0xc2/0x120 [ 338.892555][ T5852] __kmalloc_cache_noprof+0x91/0x6c0 [ 338.892567][ T5852] ? __kasan_kmalloc+0xaa/0xb0 [ 338.892581][ T5852] ? nsim_fib6_rt_nh_add+0x4a/0x290 [ 338.892600][ T5852] nsim_fib6_rt_nh_add+0x4a/0x290 [ 338.892618][ T5852] nsim_fib_event_work+0x16ed/0x6310 [ 338.892635][ T5852] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 338.892650][ T5852] ? rcu_is_watching+0x12/0xc0 [ 338.892666][ T5852] process_one_work+0xa23/0x1940 [ 338.892687][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 338.892707][ T5852] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 338.892719][ T5852] worker_thread+0x5ef/0xe50 [ 338.892738][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 338.892754][ T5852] ? kthread+0x13a/0x450 [ 338.892768][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 338.892782][ T5852] kthread+0x370/0x450 [ 338.892796][ T5852] ? __pfx_kthread+0x10/0x10 [ 338.892811][ T5852] ret_from_fork+0x72b/0xd50 [ 338.892826][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 338.892840][ T5852] ? __switch_to+0x800/0x10f0 [ 338.892857][ T5852] ? __pfx_kthread+0x10/0x10 [ 338.892872][ T5852] ret_from_fork_asm+0x1a/0x30 [ 338.892893][ T5852] [ 338.901271][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 338.901287][ T5152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.901294][ T5152] Call Trace: [ 338.901312][ T5152] [ 338.901319][ T5152] dump_stack_lvl+0x100/0x190 [ 338.901338][ T5152] should_fail_ex.cold+0x5/0xa [ 338.901352][ T5152] should_failslab+0xc2/0x120 [ 338.901368][ T5152] kmem_cache_alloc_noprof+0x91/0x6a0 [ 338.901406][ T5152] ? anon_vma_fork+0x19a/0x6b0 [ 338.901427][ T5152] anon_vma_fork+0x19a/0x6b0 [ 338.901447][ T5152] dup_mmap+0x143e/0x21b0 [ 338.901470][ T5152] ? __pfx_dup_mmap+0x10/0x10 [ 338.901486][ T5152] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.901502][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 338.901520][ T5152] ? find_held_lock+0x2b/0x80 [ 338.901533][ T5152] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 338.901561][ T5152] copy_process+0x4588/0x8030 [ 338.901575][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 338.901598][ T5152] ? __pfx_copy_process+0x10/0x10 [ 338.901611][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.901629][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.901644][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 338.901660][ T5152] ? __local_bh_enable_ip+0x9e/0x120 [ 338.901674][ T5152] kernel_clone+0x176/0x9d0 [ 338.901688][ T5152] ? __pfx_kernel_clone+0x10/0x10 [ 338.901706][ T5152] ? find_held_lock+0x2b/0x80 [ 338.901719][ T5152] ? __might_fault+0xc5/0x140 [ 338.901735][ T5152] __do_sys_clone+0xd9/0x120 [ 338.901748][ T5152] ? __pfx___do_sys_clone+0x10/0x10 [ 338.901767][ T5152] ? __sys_setsockopt+0x139/0x190 [ 338.901786][ T5152] do_syscall_64+0x115/0x840 [ 338.901799][ T5152] ? clear_bhb_loop+0x40/0x90 [ 338.901813][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.901825][ T5152] RIP: 0033:0x7f22b7ef1636 [ 338.901836][ T5152] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 338.901847][ T5152] RSP: 002b:00007ffcd042a3e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 338.901859][ T5152] RAX: ffffffffffffffda RBX: 00007ffcd042a3e8 RCX: 00007f22b7ef1636 [ 338.901866][ T5152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 338.901873][ T5152] RBP: 00005572c4fbc910 R08: 0000000000000000 R09: 00005572c4fc48e0 [ 338.901879][ T5152] R10: 00007f22b85fbb50 R11: 0000000000000246 R12: 00007ffcd042a7a0 [ 338.901886][ T5152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.901899][ T5152] [ 338.904330][ T5152] udevd[5152]: fork of child failed: Cannot allocate memory [ 338.910400][ T5845] CPU: 2 UID: 0 PID: 5845 Comm: kworker/u32:5 Not tainted syzkaller #0 PREEMPT(full) [ 338.910416][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.910425][ T5845] Workqueue: netns cleanup_net [ 338.910460][ T5845] Call Trace: [ 338.910466][ T5845] [ 338.910470][ T5845] dump_stack_lvl+0x100/0x190 [ 338.910486][ T5845] should_fail_ex.cold+0x5/0xa [ 338.910501][ T5845] should_failslab+0xc2/0x120 [ 338.910516][ T5845] __kvmalloc_node_noprof+0x116/0x970 [ 338.910533][ T5845] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 338.910548][ T5845] __nf_hook_entries_try_shrink+0x164/0x400 [ 338.910564][ T5845] __nf_unregister_net_hook+0x1d2/0x6a0 [ 338.910578][ T5845] nf_unregister_net_hooks+0x11b/0x170 [ 338.910594][ T5845] xt_unregister_table_pre_exit+0x359/0x460 [ 338.910612][ T5845] ? __pfx_ip6table_mangle_net_pre_exit+0x10/0x10 [ 338.910629][ T5845] ops_undo_list+0x187/0xab0 [ 338.910647][ T5845] ? __pfx_ops_undo_list+0x10/0x10 [ 338.910661][ T5845] ? cleanup_net+0x332/0x920 [ 338.910677][ T5845] ? cleanup_net+0x332/0x920 [ 338.910693][ T5845] ? idr_destroy+0x62/0x2e0 [ 338.910705][ T5845] cleanup_net+0x499/0x920 [ 338.910723][ T5845] ? __pfx_cleanup_net+0x10/0x10 [ 338.910742][ T5845] ? rcu_is_watching+0x12/0xc0 [ 338.910757][ T5845] process_one_work+0xa23/0x1940 [ 338.910780][ T5845] ? __pfx_process_one_work+0x10/0x10 [ 338.910800][ T5845] ? __pfx_cleanup_net+0x10/0x10 [ 338.910817][ T5845] worker_thread+0x5ef/0xe50 [ 338.910838][ T5845] ? kthread+0x13a/0x450 [ 338.910852][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 338.910866][ T5845] kthread+0x370/0x450 [ 338.910880][ T5845] ? __pfx_kthread+0x10/0x10 [ 338.910895][ T5845] ret_from_fork+0x72b/0xd50 [ 338.910910][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 338.910925][ T5845] ? __switch_to+0x800/0x10f0 [ 338.910941][ T5845] ? __pfx_kthread+0x10/0x10 [ 338.910956][ T5845] ret_from_fork_asm+0x1a/0x30 [ 338.910978][ T5845] [ 338.948457][ C2] FAULT_INJECTION: forcing a failure. [ 338.948457][ C2] name failslab, interval 1, probability 1, space 0, times 4 [ 338.948668][ C0] FAULT_INJECTION: forcing a failure. [ 338.948668][ C0] name failslab, interval 1, probability 1, space 0, times 4 [ 338.950269][ C2] CPU: 2 UID: 0 PID: 5668 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 338.950287][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.950295][ C2] Call Trace: [ 338.950300][ C2] [ 338.950305][ C2] dump_stack_lvl+0x100/0x190 [ 338.950324][ C2] should_fail_ex.cold+0x5/0xa [ 338.950338][ C2] should_failslab+0xc2/0x120 [ 338.950355][ C2] __kmalloc_noprof+0xfc/0x820 [ 338.950369][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.950382][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 338.950402][ C2] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 338.950430][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 338.950469][ C2] ? mark_held_locks+0x40/0x70 [ 338.950499][ C2] ? mark_held_locks+0x40/0x70 [ 338.950529][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 338.950552][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 338.950583][ C2] ? __lock_acquire+0x49f/0x1a40 [ 338.950610][ C2] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 338.950640][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 338.950664][ C2] ? __lock_acquire+0x49f/0x1a40 [ 338.950687][ C2] ? lock_acquire+0x1b9/0x370 [ 338.950704][ C2] ? find_held_lock+0x2b/0x80 [ 338.950717][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 338.950739][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 338.950774][ C2] ? __lock_acquire+0x49f/0x1a40 [ 338.950812][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 338.950835][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 338.950853][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 338.950884][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 338.950908][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 338.950934][ C2] ? __lock_acquire+0x49f/0x1a40 [ 338.950961][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 338.950984][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 338.951003][ C2] ? do_raw_spin_lock+0x128/0x260 [ 338.951026][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 338.951044][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 338.951073][ C2] ieee80211_rx_list+0xf19/0x2160 [ 338.951099][ C2] ? lock_acquire+0x1b9/0x370 [ 338.951120][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 338.951144][ C2] ieee80211_rx_napi+0xdc/0x400 [ 338.951163][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 338.951181][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 338.951200][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.951214][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 338.951231][ C2] tasklet_action_common+0x2de/0x3d0 [ 338.951252][ C2] handle_softirqs+0x1ea/0x9b0 [ 338.951266][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 338.951279][ C2] ? _raw_spin_unlock+0x28/0x50 [ 338.951289][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 338.951306][ C2] __irq_exit_rcu+0x162/0x210 [ 338.951318][ C2] irq_exit_rcu+0x9/0x30 [ 338.951330][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 338.951343][ C2] [ 338.951346][ C2] [ 338.951350][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.951364][ C2] RIP: 0010:debug_lockdep_rcu_enabled+0x28/0x40 [ 338.951385][ C2] Code: 90 90 f3 0f 1e fa 8b 05 ae 41 6a 05 85 c0 74 20 8b 05 40 74 6a 05 85 c0 74 16 65 48 8b 05 c8 6d ab 08 8b 80 9c 0b 00 00 85 c0 <0f> 94 c0 0f b6 c0 e9 7d 40 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f [ 338.951403][ C2] RSP: 0018:ffffc900045d72a0 EFLAGS: 00000246 [ 338.951420][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 338.951431][ C2] RDX: 0000000000000000 RSI: ffffffff8e182941 RDI: ffffffff8c400a80 [ 338.951444][ C2] RBP: 00000000000000ff R08: 000000001e8256e9 R09: 0000000000000007 [ 338.951451][ C2] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000001 [ 338.951458][ C2] R13: ffffea0001b7b080 R14: ffffea0001b7b080 R15: 0000000000000001 [ 338.951471][ C2] __page_table_check_zero+0x90/0x410 [ 338.951494][ C2] ? __page_table_check_zero+0x7a/0x410 [ 338.951516][ C2] ? get_page_from_freelist+0xf25/0x3530 [ 338.951539][ C2] post_alloc_hook+0xed/0x120 [ 338.951556][ C2] get_page_from_freelist+0xf48/0x3530 [ 338.951572][ C2] ? __lock_acquire+0x49f/0x1a40 [ 338.951611][ C2] ? __pfx_get_page_from_freelist+0x10/0x10 [ 338.951631][ C2] ? prepare_alloc_pages+0x1f0/0x5f0 [ 338.951660][ C2] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 338.951681][ C2] ? lru_gen_add_folio+0x20f/0x1490 [ 338.951700][ C2] ? __asan_memset+0x23/0x50 [ 338.951712][ C2] ? folios_put_refs+0x58a/0xaa0 [ 338.951733][ C2] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.951753][ C2] ? __lock_acquire+0x49f/0x1a40 [ 338.951780][ C2] ? __pfx___css_rstat_updated+0x10/0x10 [ 338.951807][ C2] ? xas_create+0x1f4/0x14e0 [ 338.951838][ C2] ? find_held_lock+0x2b/0x80 [ 338.951859][ C2] ? rcu_read_unlock+0x17/0x60 [ 338.951888][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.951915][ C2] ? policy_nodemask+0xed/0x4f0 [ 338.951942][ C2] alloc_pages_mpol+0x1fb/0x540 [ 338.951963][ C2] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 338.951982][ C2] folio_alloc_noprof+0x22/0x250 [ 338.951993][ C2] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 338.952011][ C2] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 338.952027][ C2] ? __pfx_xa_load+0x10/0x10 [ 338.952045][ C2] filemap_alloc_folio_noprof+0x5e/0x80 [ 338.952063][ C2] ractl_alloc_folio+0x1d/0x100 [ 338.952088][ C2] page_cache_ra_unbounded+0x357/0x990 [ 338.952123][ C2] do_page_cache_ra+0x10f/0x160 [ 338.952146][ C2] page_cache_ra_order+0xc05/0xed0 [ 338.952168][ C2] filemap_fault+0x1943/0x3130 [ 338.952183][ C2] ? __pfx_filemap_fault+0x10/0x10 [ 338.952199][ C2] ? __pfx_filemap_map_pages+0x10/0x10 [ 338.952210][ C2] __do_fault+0x10b/0x440 [ 338.952223][ C2] ? find_held_lock+0x2b/0x80 [ 338.952237][ C2] do_fault+0x2db/0x1750 [ 338.952263][ C2] __handle_mm_fault+0x187d/0x2a00 [ 338.952288][ C2] ? reacquire_held_locks+0xce/0x1e0 [ 338.952315][ C2] ? __pfx___handle_mm_fault+0x10/0x10 [ 338.952337][ C2] ? lock_vma_under_rcu+0x17c/0x590 [ 338.952370][ C2] handle_mm_fault+0x37b/0xa30 [ 338.952392][ C2] do_user_addr_fault+0x5a3/0x12f0 [ 338.952412][ C2] exc_page_fault+0x6f/0xd0 [ 338.952440][ C2] asm_exc_page_fault+0x26/0x30 [ 338.952459][ C2] RIP: 0023:0xf70bcdae [ 338.952474][ C2] Code: e5 03 0f 85 02 01 00 00 ba 04 00 00 00 89 d8 e8 68 c6 fe ff 8b 43 20 8b 4c 24 3c 83 43 18 04 8d 50 fc 89 53 20 ba 08 00 00 00 <89> 48 fc 89 d8 8b 73 18 e8 45 c6 fe ff 8b 43 24 ba 06 00 00 00 89 [ 338.952490][ C2] RSP: 002b:00000000ffa51530 EFLAGS: 00010202 [ 338.952504][ C2] RAX: 00000000f1677000 RBX: 00000000ffa5161c RCX: 00000000000003e6 [ 338.952515][ C2] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.952526][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.952537][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.952547][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.952571][ C2] [ 338.954057][ T5152] FAULT_INJECTION: forcing a failure. [ 338.954057][ T5152] name failslab, interval 1, probability 1, space 0, times 3 [ 338.955591][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 338.955614][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.955625][ C0] Call Trace: [ 338.955633][ C0] [ 338.955640][ C0] dump_stack_lvl+0x100/0x190 [ 338.955666][ C0] should_fail_ex.cold+0x5/0xa [ 338.955686][ C0] should_failslab+0xc2/0x120 [ 338.955711][ C0] __kmalloc_noprof+0xfc/0x820 [ 338.955732][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.955753][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 338.955783][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 338.955814][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 338.955854][ C0] ? mark_held_locks+0x40/0x70 [ 338.955881][ C0] ? find_held_lock+0x2b/0x80 [ 338.955902][ C0] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 338.955930][ C0] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 338.955956][ C0] ? rcu_is_watching+0x12/0xc0 [ 338.955981][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 338.956005][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 338.956036][ C0] ? __lock_acquire+0x49f/0x1a40 [ 338.956064][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 338.956093][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 338.956128][ C0] ? __lock_acquire+0x49f/0x1a40 [ 338.956168][ C0] ? __lock_acquire+0x49f/0x1a40 [ 338.956205][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 338.956237][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 338.956265][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 338.956305][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 338.956329][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 338.956355][ C0] ? __lock_acquire+0x49f/0x1a40 [ 338.956398][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 338.956422][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 338.956441][ C0] ? do_raw_spin_lock+0x128/0x260 [ 338.956466][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 338.956488][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 338.956516][ C0] ieee80211_rx_list+0xf19/0x2160 [ 338.956542][ C0] ? lock_acquire+0x1b9/0x370 [ 338.956580][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 338.956606][ C0] ieee80211_rx_napi+0xdc/0x400 [ 338.956624][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 338.956642][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 338.956662][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 338.956684][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 338.956712][ C0] tasklet_action_common+0x2de/0x3d0 [ 338.956739][ C0] handle_softirqs+0x1ea/0x9b0 [ 338.956761][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 338.956780][ C0] ? run_ksoftirqd+0x5b/0x60 [ 338.956799][ C0] ? rcu_is_watching+0x12/0xc0 [ 338.956820][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 338.956839][ C0] run_ksoftirqd+0x38/0x60 [ 338.956857][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 338.956883][ C0] ? kthread+0x13a/0x450 [ 338.956905][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 338.956925][ C0] kthread+0x370/0x450 [ 338.956947][ C0] ? __pfx_kthread+0x10/0x10 [ 338.956971][ C0] ret_from_fork+0x72b/0xd50 [ 338.956994][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 338.957016][ C0] ? __switch_to+0x800/0x10f0 [ 338.957043][ C0] ? __pfx_kthread+0x10/0x10 [ 338.957068][ C0] ret_from_fork_asm+0x1a/0x30 [ 338.957102][ C0] [ 339.057092][ T48] FAULT_INJECTION: forcing a failure. [ 339.057092][ T48] name failslab, interval 1, probability 1, space 0, times 1 [ 339.058592][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 339.058608][ T5152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.058615][ T5152] Call Trace: [ 339.058620][ T5152] [ 339.058625][ T5152] dump_stack_lvl+0x100/0x190 [ 339.058644][ T5152] should_fail_ex.cold+0x5/0xa [ 339.058659][ T5152] should_failslab+0xc2/0x120 [ 339.058675][ T5152] kmem_cache_alloc_noprof+0x91/0x6a0 [ 339.058690][ T5152] ? anon_vma_clone+0x2ba/0xcd0 [ 339.058709][ T5152] anon_vma_clone+0x2ba/0xcd0 [ 339.058725][ T5152] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 339.058742][ T5152] anon_vma_fork+0x1bb/0x6b0 [ 339.058755][ T5152] dup_mmap+0x143e/0x21b0 [ 339.058777][ T5152] ? __pfx_dup_mmap+0x10/0x10 [ 339.058792][ T5152] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 339.058809][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 339.058826][ T5152] ? find_held_lock+0x2b/0x80 [ 339.058840][ T5152] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 339.058867][ T5152] copy_process+0x4588/0x8030 [ 339.058880][ T5152] ? __lock_acquire+0x49f/0x1a40 [ 339.058904][ T5152] ? __pfx_copy_process+0x10/0x10 [ 339.058918][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 339.058934][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 339.058949][ T5152] ? sk_setsockopt+0x46b/0x5d80 [ 339.058965][ T5152] ? __local_bh_enable_ip+0x9e/0x120 [ 339.058980][ T5152] kernel_clone+0x176/0x9d0 [ 339.058995][ T5152] ? __pfx_kernel_clone+0x10/0x10 [ 339.059012][ T5152] ? find_held_lock+0x2b/0x80 [ 339.059025][ T5152] ? __might_fault+0xc5/0x140 [ 339.059038][ T5152] __do_sys_clone+0xd9/0x120 [ 339.059052][ T5152] ? __pfx___do_sys_clone+0x10/0x10 [ 339.059071][ T5152] ? __sys_setsockopt+0x139/0x190 [ 339.059090][ T5152] do_syscall_64+0x115/0x840 [ 339.059103][ T5152] ? clear_bhb_loop+0x40/0x90 [ 339.059117][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.059129][ T5152] RIP: 0033:0x7f22b7ef1636 [ 339.059140][ T5152] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 339.059151][ T5152] RSP: 002b:00007ffcd042a3e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 339.059163][ T5152] RAX: ffffffffffffffda RBX: 00007ffcd042a3e8 RCX: 00007f22b7ef1636 [ 339.059170][ T5152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 339.059176][ T5152] RBP: 00005572c4fbc910 R08: 0000000000000000 R09: 000000000000001f [ 339.059183][ T5152] R10: 00007f22b85fbb50 R11: 0000000000000246 R12: 00007ffcd042a7a0 [ 339.059190][ T5152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.059203][ T5152] [ 339.060839][ T5152] udevd[5152]: fork of child failed: Cannot allocate memory [ 339.143069][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.143947][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 339.143964][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.143972][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 339.143994][ T48] Call Trace: [ 339.144001][ T48] [ 339.144008][ T48] dump_stack_lvl+0x100/0x190 [ 339.144032][ T48] should_fail_ex.cold+0x5/0xa [ 339.144052][ T48] should_failslab+0xc2/0x120 [ 339.144075][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 339.144098][ T48] ? __alloc_skb+0x140/0x710 [ 339.144118][ T48] __alloc_skb+0x140/0x710 [ 339.144131][ T48] ? __alloc_skb+0x5b7/0x710 [ 339.144144][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 339.144159][ T48] ? kfree_skbmem+0x19f/0x210 [ 339.144171][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 339.144193][ T48] process_one_work+0xa23/0x1940 [ 339.144214][ T48] ? __pfx_process_one_work+0x10/0x10 [ 339.144233][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 339.144250][ T48] worker_thread+0x5ef/0xe50 [ 339.144268][ T48] ? __pfx_worker_thread+0x10/0x10 [ 339.144288][ T48] ? kthread+0x13a/0x450 [ 339.144302][ T48] ? __pfx_worker_thread+0x10/0x10 [ 339.144317][ T48] kthread+0x370/0x450 [ 339.144331][ T48] ? __pfx_kthread+0x10/0x10 [ 339.144346][ T48] ret_from_fork+0x72b/0xd50 [ 339.144361][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 339.144374][ T48] ? __switch_to+0x800/0x10f0 [ 339.144391][ T48] ? __pfx_kthread+0x10/0x10 [ 339.144406][ T48] ret_from_fork_asm+0x1a/0x30 [ 339.144427][ T48] [ 340.277320][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.282392][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.290245][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.297925][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.383696][ T5845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.586284][ T5845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.718574][ T5845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.735511][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.738153][ T5758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.744386][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.744475][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.747998][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.749750][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.752626][ T5758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.754688][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.755847][ T5758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.758066][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.781738][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.783955][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.786681][T10346] bridge_slave_0: entered allmulticast mode [ 340.790104][T10346] bridge_slave_0: entered promiscuous mode [ 340.795459][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.802106][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.805205][T10346] bridge_slave_1: entered allmulticast mode [ 340.811623][T10346] bridge_slave_1: entered promiscuous mode [ 340.829708][ T5845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.844533][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.850805][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.866856][T10346] team0: Port device team_slave_0 added [ 340.870155][T10346] team0: Port device team_slave_1 added [ 340.887269][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.889750][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.897297][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.901792][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.903841][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.911688][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.941013][T10346] hsr_slave_0: entered promiscuous mode [ 340.943876][T10346] hsr_slave_1: entered promiscuous mode [ 340.946782][T10346] debugfs: 'hsr0' already exists in 'hsr' [ 340.948575][T10346] Cannot create hsr debugfs directory [ 341.101196][ T5845] bridge_slave_1: left allmulticast mode [ 341.103616][ T5845] bridge_slave_1: left promiscuous mode [ 341.106351][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.113291][ T5845] bridge_slave_0: left allmulticast mode [ 341.115076][ T5845] bridge_slave_0: left promiscuous mode [ 341.117671][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.304863][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.312070][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.317481][ T5845] bond0 (unregistering): Released all slaves [ 341.326305][ T5845] bond1 (unregistering): (slave veth3): Releasing active interface [ 341.331968][ T5845] bond1 (unregistering): Released all slaves [ 341.343744][ T5845] bond2 (unregistering): Released all slaves [ 341.357606][ T5845] bond3 (unregistering): (slave veth7): Releasing active interface [ 341.362280][ T5845] bond3 (unregistering): Released all slaves [ 341.382298][ T5845] bond4 (unregistering): (slave veth11): Releasing active interface [ 341.385865][ T5845] bond4 (unregistering): Released all slaves [ 341.397874][ T5845] bond5 (unregistering): (slave veth13): Releasing active interface [ 341.401281][ T5845] bond5 (unregistering): Released all slaves [ 341.410265][ T5845] bond6 (unregistering): (slave veth15): Releasing active interface [ 341.413604][ T5845] bond6 (unregistering): Released all slaves [ 341.423754][ T5845] bond7 (unregistering): (slave veth17): Releasing active interface [ 341.427212][ T5845] bond7 (unregistering): Released all slaves [ 341.434850][ T5845] bond8 (unregistering): (slave veth19): Releasing active interface [ 341.438888][ T5845] bond8 (unregistering): Released all slaves [ 341.446584][ T5845] bond9 (unregistering): (slave veth21): Releasing active interface [ 341.449887][ T5845] bond9 (unregistering): Released all slaves [ 341.459934][ T5845] bond10 (unregistering): (slave veth23): Releasing active interface [ 341.463234][ T5845] bond10 (unregistering): Released all slaves [ 341.473719][ T5845] bond11 (unregistering): (slave veth25): Releasing active interface [ 341.481966][ T5845] bond11 (unregistering): Released all slaves [ 341.490645][ T5845] bond12 (unregistering): (slave veth27): Releasing active interface [ 341.494144][ T5845] bond12 (unregistering): Released all slaves [ 341.507691][ T5845] bond13 (unregistering): (slave veth35): Releasing active interface [ 341.511808][ T5845] bond13 (unregistering): Released all slaves [ 341.523224][ T5845] bond14 (unregistering): (slave veth37): Releasing active interface [ 341.526990][ T5845] bond14 (unregistering): Released all slaves [ 341.535587][ T5845] bond15 (unregistering): (slave veth39): Releasing active interface [ 341.541931][ T5845] bond15 (unregistering): Released all slaves [ 341.549691][ T5845] bond16 (unregistering): (slave veth41): Releasing active interface [ 341.553109][ T5845] bond16 (unregistering): Released all slaves [ 341.560999][ T5845] bond17 (unregistering): (slave veth43): Releasing backup interface [ 341.564460][ T5845] bond17 (unregistering): Released all slaves [ 341.573839][ T5845] bond18 (unregistering): (slave veth45): Releasing active interface [ 341.577428][ T5845] bond18 (unregistering): Released all slaves [ 341.584439][ T5845] bond19 (unregistering): Released all slaves [ 341.592357][ T5845] bond20 (unregistering): Released all slaves [ 341.603697][ T5845] bond21 (unregistering): (slave veth51): Releasing backup interface [ 341.607759][ T5845] bond21 (unregistering): Released all slaves [ 341.615181][ T5845] bond22 (unregistering): Released all slaves [ 341.627213][ T5845] bond23 (unregistering): Released all slaves [ 341.634373][ T5845] bond24 (unregistering): Released all slaves [ 341.642234][ T5845] bond25 (unregistering): (slave veth57): Releasing active interface [ 341.645685][ T5845] bond25 (unregistering): Released all slaves [ 341.657977][ T5845] bond26 (unregistering): (slave veth59): Releasing backup interface [ 341.661589][ T5845] bond26 (unregistering): Released all slaves [ 341.672337][ T5845] bond27 (unregistering): (slave veth61): Releasing backup interface [ 341.675747][ T5845] bond27 (unregistering): Released all slaves [ 341.683535][ T5845] bond28 (unregistering): (slave veth63): Releasing backup interface [ 341.686957][ T5845] bond28 (unregistering): Released all slaves [ 341.694652][ T5845] bond29 (unregistering): (slave veth65): Releasing active interface [ 341.703040][ T5845] bond29 (unregistering): Released all slaves [ 341.710952][ T5845] bond30 (unregistering): (slave veth67): Releasing backup interface [ 341.714819][ T5845] bond30 (unregistering): Released all slaves [ 341.726315][ T5845] bond31 (unregistering): (slave veth69): Releasing backup interface [ 341.730639][ T5845] bond31 (unregistering): Released all slaves [ 342.143053][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 342.290278][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.292388][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.294717][T10365] bridge_slave_0: entered allmulticast mode [ 342.299898][T10365] bridge_slave_0: entered promiscuous mode [ 342.332463][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.335205][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.337444][T10365] bridge_slave_1: entered allmulticast mode [ 342.339954][T10365] bridge_slave_1: entered promiscuous mode [ 342.342332][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.344608][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.347322][T10364] bridge_slave_0: entered allmulticast mode [ 342.350020][T10364] bridge_slave_0: entered promiscuous mode [ 342.353178][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.355378][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.357640][ T5100] Bluetooth: hci0: command tx timeout [ 342.360872][T10364] bridge_slave_1: entered allmulticast mode [ 342.363925][T10364] bridge_slave_1: entered promiscuous mode [ 342.442050][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.449251][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.453263][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.460474][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.524162][T10365] team0: Port device team_slave_0 added [ 342.528218][T10364] team0: Port device team_slave_0 added [ 342.532781][T10365] team0: Port device team_slave_1 added [ 342.542587][T10364] team0: Port device team_slave_1 added [ 342.572834][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.574954][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.582244][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.586138][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.588256][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.595354][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.602147][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.604344][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.612032][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.616004][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.619549][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.628981][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.646936][ T5845] hsr_slave_0: left promiscuous mode [ 342.649890][ T5845] hsr_slave_1: left promiscuous mode [ 342.652358][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.655129][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.659511][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.662144][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.672256][ T5845] veth1_macvtap: left promiscuous mode [ 342.674307][ T5845] veth0_macvtap: left promiscuous mode [ 342.675967][ T5845] veth1_vlan: left promiscuous mode [ 342.678083][ T5845] veth0_vlan: left promiscuous mode [ 342.837145][ T5100] Bluetooth: hci2: command tx timeout [ 342.837157][ T5747] Bluetooth: hci1: command tx timeout [ 343.035783][ T5845] team0 (unregistering): Port device team_slave_1 removed [ 343.046902][ T5845] team0 (unregistering): Port device team_slave_0 removed [ 343.181584][T10364] hsr_slave_0: entered promiscuous mode [ 343.184669][T10364] hsr_slave_1: entered promiscuous mode [ 343.187894][T10364] debugfs: 'hsr0' already exists in 'hsr' [ 343.190101][T10364] Cannot create hsr debugfs directory [ 343.200384][T10365] hsr_slave_0: entered promiscuous mode [ 343.205212][T10365] hsr_slave_1: entered promiscuous mode [ 343.208551][T10365] debugfs: 'hsr0' already exists in 'hsr' [ 343.210240][T10365] Cannot create hsr debugfs directory [ 343.356773][T10346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.362311][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.365646][T10346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.373450][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.415607][T10346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.427372][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.430423][T10346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.440880][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.541964][T10364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.588209][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.600256][T10346] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.605605][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.608427][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.616092][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.618926][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.667216][T10364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.736748][ T5845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.794735][T10364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.864809][ T5845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.881022][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.907240][T10346] veth0_vlan: entered promiscuous mode [ 343.924318][T10364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.932333][T10346] veth1_vlan: entered promiscuous mode [ 343.948722][T10346] veth0_macvtap: entered promiscuous mode [ 343.953204][T10346] veth1_macvtap: entered promiscuous mode [ 343.974780][ T5845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.985000][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.992674][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.000695][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.003917][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.007645][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.010821][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.069485][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.074411][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.100607][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.102909][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.113269][ T5845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.153029][T10364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.164073][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.167674][T10364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.177200][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.184806][T10364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.195127][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.198838][T10364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.204845][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.288702][ T5845] bridge_slave_1: left allmulticast mode [ 344.290995][ T5845] bridge_slave_1: left promiscuous mode [ 344.294309][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.301561][ T5845] bridge_slave_0: left allmulticast mode [ 344.303696][ T5845] bridge_slave_0: left promiscuous mode [ 344.305941][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.334345][ T5845] bridge_slave_1: left allmulticast mode [ 344.336911][ T5845] bridge_slave_1: left promiscuous mode [ 344.339177][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.347032][ T5845] bridge_slave_0: left allmulticast mode [ 344.349616][ T5845] bridge_slave_0: left promiscuous mode [ 344.351899][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.436539][ T5100] Bluetooth: hci0: command tx timeout [ 344.648575][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.652908][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.656319][ T5845] bond0 (unregistering): Released all slaves [ 344.663877][ T5845] bond1 (unregistering): (slave veth3): Releasing backup interface [ 344.667739][ T5845] bond1 (unregistering): Released all slaves [ 344.675293][ T5845] bond2 (unregistering): (slave veth5): Releasing active interface [ 344.680950][ T5845] bond2 (unregistering): Released all slaves [ 344.691110][ T5845] bond3 (unregistering): (slave veth7): Releasing active interface [ 344.694690][ T5845] bond3 (unregistering): Released all slaves [ 344.704144][ T5845] bond4 (unregistering): (slave veth9): Releasing active interface [ 344.715824][ T5845] bond4 (unregistering): Released all slaves [ 344.723930][ T5845] bond5 (unregistering): (slave veth11): Releasing active interface [ 344.744624][ T5845] bond5 (unregistering): Released all slaves [ 344.757439][ T5845] bond6 (unregistering): (slave veth13): Releasing active interface [ 344.764141][ T5845] bond6 (unregistering): Released all slaves [ 344.773848][ T5845] bond7 (unregistering): (slave veth17): Releasing active interface [ 344.779275][ T5845] bond7 (unregistering): Released all slaves [ 344.789812][ T5845] bond8 (unregistering): (slave veth19): Releasing active interface [ 344.793766][ T5845] bond8 (unregistering): Released all slaves [ 344.804042][ T5845] bond9 (unregistering): (slave veth23): Releasing active interface [ 344.808402][ T5845] bond9 (unregistering): Released all slaves [ 344.816128][ T5845] bond10 (unregistering): (slave veth25): Releasing active interface [ 344.822614][ T5845] bond10 (unregistering): Released all slaves [ 344.829530][T10457] e1000e 0000:00:02.0 eth1: removed PHC [ 344.834943][ T5845] bond11 (unregistering): (slave veth27): Releasing active interface [ 344.842305][ T5845] bond11 (unregistering): Released all slaves [ 344.850220][ T5845] bond12 (unregistering): (slave veth29): Releasing active interface [ 344.853636][ T5845] bond12 (unregistering): Released all slaves [ 344.865033][ T5845] bond13 (unregistering): (slave veth31): Releasing active interface [ 344.870478][ T5845] bond13 (unregistering): Released all slaves [ 344.879924][ T5845] bond14 (unregistering): (slave veth33): Releasing active interface [ 344.883354][ T5845] bond14 (unregistering): Released all slaves [ 344.894297][ T5845] bond15 (unregistering): (slave veth35): Releasing active interface [ 344.900482][ T5845] bond15 (unregistering): Released all slaves [ 344.911775][ T5845] bond16 (unregistering): (slave veth37): Releasing active interface [ 344.916031][ T5845] bond16 (unregistering): Released all slaves [ 344.916561][ T5100] Bluetooth: hci2: command tx timeout [ 344.926530][ T5100] Bluetooth: hci1: command tx timeout [ 344.929602][ T5845] bond17 (unregistering): (slave veth39): Releasing active interface [ 344.935400][ T5845] bond17 (unregistering): Released all slaves [ 344.948379][ T5845] bond18 (unregistering): (slave veth41): Releasing active interface [ 344.953536][ T5845] bond18 (unregistering): Released all slaves [ 344.965129][ T5845] bond19 (unregistering): Released all slaves [ 344.979021][ T5845] bond20 (unregistering): (slave veth43): Releasing active interface [ 344.982735][ T5845] bond20 (unregistering): Released all slaves [ 344.993604][ T5845] bond21 (unregistering): (slave veth45): Releasing active interface [ 345.001294][ T5845] bond21 (unregistering): Released all slaves [ 345.008786][ T5845] bond22 (unregistering): Released all slaves [ 345.018076][ T5845] bond23 (unregistering): (slave veth49): Releasing active interface [ 345.021672][ T5845] bond23 (unregistering): Released all slaves [ 345.029662][ T5845] bond24 (unregistering): (slave veth51): Releasing backup interface [ 345.033174][ T5845] bond24 (unregistering): Released all slaves [ 345.044376][ T5845] bond25 (unregistering): (slave veth53): Releasing active interface [ 345.048122][ T5845] bond25 (unregistering): Released all slaves [ 345.056063][ T5845] bond26 (unregistering): (slave veth55): Releasing active interface [ 345.062456][ T5845] bond26 (unregistering): Released all slaves [ 345.069655][ T5845] bond27 (unregistering): Released all slaves [ 345.080527][ T5845] bond28 (unregistering): (slave veth57): Releasing active interface [ 345.084063][ T5845] bond28 (unregistering): Released all slaves [ 345.092527][ T5845] bond29 (unregistering): (slave veth59): Releasing active interface [ 345.096159][ T5845] bond29 (unregistering): Released all slaves [ 345.111224][ T5845] bond30 (unregistering): (slave veth61): Releasing backup interface [ 345.115605][ T5845] bond30 (unregistering): Released all slaves [ 345.129992][ T5845] bond31 (unregistering): (slave veth63): Releasing active interface [ 345.134532][ T5845] bond31 (unregistering): Released all slaves [ 345.147834][ T5845] bond32 (unregistering): (slave veth65): Releasing backup interface [ 345.151456][ T5845] bond32 (unregistering): Released all slaves [ 345.166151][ T5845] bond33 (unregistering): (slave veth67): Releasing backup interface [ 345.170374][ T5845] bond33 (unregistering): Released all slaves [ 345.180858][ T5845] bond34 (unregistering): (slave veth69): Releasing active interface [ 345.185107][ T5845] bond34 (unregistering): Released all slaves [ 345.199825][ T5845] bond35 (unregistering): (slave veth71): Releasing backup interface [ 345.204242][ T5845] bond35 (unregistering): Released all slaves [ 345.311363][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.317639][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.322461][ T5845] bond0 (unregistering): Released all slaves [ 345.332000][ T5845] bond1 (unregistering): Released all slaves [ 345.346197][ T5845] bond2 (unregistering): (slave veth3): Releasing active interface [ 345.353161][ T5845] bond2 (unregistering): Released all slaves [ 345.364362][ T5845] bond3 (unregistering): (slave veth7): Releasing active interface [ 345.369840][ T5845] bond3 (unregistering): Released all slaves [ 345.377729][ T5845] bond4 (unregistering): (slave veth9): Releasing active interface [ 345.381235][ T5845] bond4 (unregistering): Released all slaves [ 345.392750][ T5845] bond5 (unregistering): (slave veth15): Releasing active interface [ 345.396257][ T5845] bond5 (unregistering): Released all slaves [ 345.410314][ T5845] bond6 (unregistering): (slave veth17): Releasing active interface [ 345.415690][ T5845] bond6 (unregistering): Released all slaves [ 345.424233][ T5845] bond7 (unregistering): (slave veth19): Releasing active interface [ 345.429144][ T5845] bond7 (unregistering): Released all slaves [ 345.438241][ T5845] bond8 (unregistering): (slave veth21): Releasing active interface [ 345.441843][ T5845] bond8 (unregistering): Released all slaves [ 345.449918][ T5845] bond9 (unregistering): (slave veth23): Releasing active interface [ 345.454139][ T5845] bond9 (unregistering): Released all slaves [ 345.462577][ T5845] bond10 (unregistering): (slave veth27): Releasing active interface [ 345.468017][ T5845] bond10 (unregistering): Released all slaves [ 345.475963][ T5845] bond11 (unregistering): (slave veth33): Releasing active interface [ 345.479941][ T5845] bond11 (unregistering): Released all slaves [ 345.494525][ T5845] bond12 (unregistering): (slave veth35): Releasing active interface [ 345.510034][ T5845] bond12 (unregistering): Released all slaves [ 345.520433][ T5845] bond13 (unregistering): (slave veth37): Releasing active interface [ 345.524338][ T5845] bond13 (unregistering): Released all slaves [ 345.537430][ T5845] bond14 (unregistering): (slave veth41): Releasing backup interface [ 345.541677][ T5845] bond14 (unregistering): Released all slaves [ 345.550001][ T5845] bond15 (unregistering): (slave veth47): Releasing active interface [ 345.553564][ T5845] bond15 (unregistering): Released all slaves [ 345.563098][ T5845] bond16 (unregistering): Released all slaves [ 345.570464][ T5845] bond17 (unregistering): Released all slaves [ 345.581166][ T5845] bond18 (unregistering): (slave veth51): Releasing backup interface [ 345.594810][ T5845] bond18 (unregistering): Released all slaves [ 345.606611][ T5845] bond19 (unregistering): (slave veth53): Releasing active interface [ 345.610296][ T5845] bond19 (unregistering): Released all slaves [ 345.621232][ T5845] bond20 (unregistering): (slave veth55): Releasing backup interface [ 345.625418][ T5845] bond20 (unregistering): Released all slaves [ 345.633960][ T5845] bond21 (unregistering): (slave veth57): Releasing backup interface [ 345.639404][ T5845] bond21 (unregistering): Released all slaves [ 345.648220][ T5845] bond22 (unregistering): (slave veth59): Releasing backup interface [ 345.651772][ T5845] bond22 (unregistering): Released all slaves [ 345.662680][ T5845] bond23 (unregistering): (slave veth61): Releasing active interface [ 345.666715][ T5845] bond23 (unregistering): Released all slaves [ 345.681558][ T5845] bond24 (unregistering): (slave veth63): Releasing backup interface [ 345.686353][ T5845] bond24 (unregistering): Released all slaves [ 345.701133][ T5845] bond25 (unregistering): (slave veth65): Releasing backup interface [ 345.705491][ T5845] bond25 (unregistering): Released all slaves [ 345.716012][ T5845] bond26 (unregistering): (slave veth67): Releasing backup interface [ 345.723427][ T5845] bond26 (unregistering): Released all slaves [ 345.738220][ T5845] bond27 (unregistering): (slave veth69): Releasing backup interface [ 345.743511][ T5845] bond27 (unregistering): Released all slaves [ 345.950841][T10457] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 346.400048][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.417971][T10459] dwc3 dwc3.2.auto: this is not a DesignWare USB3 DRD Core [ 346.474669][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.493628][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 346.501221][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.503426][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.517017][ T5100] Bluetooth: hci0: command tx timeout [ 346.523403][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.526307][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.768067][T10365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.773883][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.780297][T10365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.785758][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.788470][T10365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.792420][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.795241][T10365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.803877][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.815095][ T5845] hsr_slave_0: left promiscuous mode [ 346.818701][ T5845] hsr_slave_1: left promiscuous mode [ 346.821371][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.824240][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.828383][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.831249][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.867976][ T5845] hsr_slave_0: left promiscuous mode [ 346.872696][ T5845] hsr_slave_1: left promiscuous mode [ 346.875374][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.880338][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.884095][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.887107][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.903580][ T5845] veth1_macvtap: left promiscuous mode [ 346.905860][ T5845] veth0_macvtap: left promiscuous mode [ 346.908212][ T5845] veth1_vlan: left promiscuous mode [ 346.910409][ T5845] veth0_vlan: left promiscuous mode [ 346.914179][ T5845] veth1_macvtap: left promiscuous mode [ 346.916368][ T5845] veth0_macvtap: left promiscuous mode [ 346.922728][ T5845] veth1_vlan: left promiscuous mode [ 346.924996][ T5845] veth0_vlan: left promiscuous mode [ 346.999411][ T5100] Bluetooth: hci1: command tx timeout [ 347.002090][ T5100] Bluetooth: hci2: command tx timeout [ 347.832351][ T5845] team0 (unregistering): Port device team_slave_1 removed [ 347.844459][ T5845] team0 (unregistering): Port device team_slave_0 removed [ 347.951996][T10488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.052059][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.061838][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.070266][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.073150][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.093129][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.095699][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.139810][T10365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.194187][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.246804][T10364] veth0_vlan: entered promiscuous mode [ 348.266186][T10364] veth1_vlan: entered promiscuous mode [ 348.296074][T10364] veth0_macvtap: entered promiscuous mode [ 348.300545][T10364] veth1_macvtap: entered promiscuous mode [ 348.310121][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.321373][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.331224][ T5553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.333873][ T5553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.350610][ T5553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.353779][ T5553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.414412][ T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.427673][ T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.462611][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.465201][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.571074][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.599130][ T5747] Bluetooth: hci0: command tx timeout [ 348.633394][T10365] veth0_vlan: entered promiscuous mode [ 348.639538][T10365] veth1_vlan: entered promiscuous mode [ 348.677974][T10365] veth0_macvtap: entered promiscuous mode [ 348.683831][T10365] veth1_macvtap: entered promiscuous mode [ 348.696474][ T42] audit: type=1800 audit(1785413701.259:2): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.974" name="c_srate" dev="configfs" ino=29108 res=0 errno=0 [ 348.713627][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.728857][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.744057][ T9014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.748214][ T9014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.753616][ T9014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.761716][ T9014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.820507][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.825197][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.841971][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.844702][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.858435][ T34] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 348.934209][T10552] netlink: 830 bytes leftover after parsing attributes in process `syz.2.976'. [ 348.986541][ T41] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 349.008840][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.014029][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 349.017823][ T34] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 349.021922][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.031948][ T34] usb 5-1: config 0 descriptor?? [ 349.042235][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 349.049892][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 349.058302][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 349.060388][T10557] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 349.065717][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 349.068813][ T34] usb 5-1: media controller created [ 349.072981][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.076660][ T5747] Bluetooth: hci2: command tx timeout [ 349.078127][ T5100] Bluetooth: hci1: command tx timeout [ 349.088175][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 349.092127][T10557] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 349.092576][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 349.099220][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input59 [ 349.112639][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 349.125250][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 349.150528][ T41] usb 8-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 349.153431][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.156159][ T41] usb 8-1: Product: syz [ 349.157994][ T41] usb 8-1: Manufacturer: syz [ 349.159567][ T41] usb 8-1: SerialNumber: syz [ 349.165622][ T41] ums-jumpshot 8-1:1.0: USB Mass Storage device detected [ 349.176579][ T41] ums-jumpshot 8-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 349.179626][ T41] scsi host6: usb-storage 8-1:1.0 [ 349.254699][ T5852] usb 5-1: USB disconnect, device number 13 [ 349.271396][ T5852] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 349.571872][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 349.575217][ T5100] CPU: 2 UID: 0 PID: 5100 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 349.575238][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.575247][ T5100] Workqueue: hci2 hci_rx_work [ 349.575266][ T5100] Call Trace: [ 349.575271][ T5100] [ 349.575277][ T5100] dump_stack_lvl+0x100/0x190 [ 349.575295][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 349.575314][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 349.575332][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 349.575348][ T5100] ? find_held_lock+0x2b/0x80 [ 349.575363][ T5100] ? kobject_add_internal+0x25f/0x930 [ 349.575380][ T5100] ? kobject_add_internal+0x25f/0x930 [ 349.575398][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 349.575412][ T5100] kobject_add_internal+0x2c8/0x930 [ 349.575433][ T5100] kobject_add+0x16a/0x1e0 [ 349.575449][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 349.575465][ T5100] ? class_to_subsys+0x10f/0x150 [ 349.575480][ T5100] ? kobject_put+0xb9/0x640 [ 349.575495][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 349.575509][ T5100] device_add+0x294/0x1970 [ 349.575527][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 349.575539][ T5100] ? __pfx_device_add+0x10/0x10 [ 349.575556][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 349.575573][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 349.575590][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 349.575608][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 349.575620][ T5100] ? hci_event_packet+0x186/0xcd0 [ 349.575636][ T5100] hci_le_conn_complete_evt+0x23c/0x3a0 [ 349.575650][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 349.575663][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 349.575677][ T5100] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 349.575692][ T5100] hci_event_packet+0x51c/0xcd0 [ 349.575705][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 349.575719][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 349.575733][ T5100] ? kcov_remote_start+0x384/0x670 [ 349.575750][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 349.575766][ T5100] hci_rx_work+0x451/0xfc0 [ 349.575781][ T5100] process_one_work+0xa23/0x1940 [ 349.575803][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 349.575823][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 349.575837][ T5100] worker_thread+0x5ef/0xe50 [ 349.575856][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 349.575873][ T5100] ? kthread+0x13a/0x450 [ 349.575886][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 349.575901][ T5100] kthread+0x370/0x450 [ 349.575915][ T5100] ? __pfx_kthread+0x10/0x10 [ 349.575930][ T5100] ret_from_fork+0x72b/0xd50 [ 349.575946][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 349.575960][ T5100] ? __switch_to+0x800/0x10f0 [ 349.575977][ T5100] ? __pfx_kthread+0x10/0x10 [ 349.575993][ T5100] ret_from_fork_asm+0x1a/0x30 [ 349.576014][ T5100] [ 349.576032][ T5100] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 349.682332][ T5100] Bluetooth: hci2: failed to register connection device [ 349.808831][T10590] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 349.811730][T10590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.817769][ T846] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 349.820233][T10590] vhci_hcd vhci_hcd.0: Device attached [ 349.976902][ T846] usb 7-1: Using ep0 maxpacket: 8 [ 349.979833][ T846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.983071][ T846] usb 7-1: config 0 has no interfaces? [ 349.986305][ T846] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 349.989428][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.992095][ T846] usb 7-1: Product: syz [ 349.993493][ T846] usb 7-1: Manufacturer: syz [ 349.994953][ T846] usb 7-1: SerialNumber: syz [ 349.998466][ T846] usb 7-1: config 0 descriptor?? [ 350.056527][ T5852] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 350.212552][ T48] scsi 6:0:0:0: Direct-Access Lexar Jumpshot USB CF 0000 PQ: 0 ANSI: 0 CCS [ 350.216606][ T846] usb 7-1: USB disconnect, device number 18 [ 350.220411][ T48] scsi 6:0:0:1: Direct-Access Lexar Jumpshot USB CF 0000 PQ: 0 ANSI: 0 CCS [ 350.246824][ T48] sd 6:0:0:0: Attached scsi generic sg2 type 0 [ 350.274397][ T48] sd 6:0:0:1: Attached scsi generic sg3 type 0 [ 350.372676][ T10] usb 8-1: USB disconnect, device number 15 [ 350.382791][T10591] vhci_hcd: connection closed [ 350.387406][ T9014] vhci_hcd vhci_hcd.0: stop threads [ 350.398678][ T9014] vhci_hcd vhci_hcd.0: release socket [ 350.402552][ T9014] vhci_hcd vhci_hcd.0: disconnect device [ 350.409712][T10300] sd 6:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 350.412859][ T38] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 350.418300][T10300] sd 6:0:0:0: [sdb] Sense not available. [ 350.421680][ T38] sd 6:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 350.426158][T10300] sd 6:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 350.429175][ T38] sd 6:0:0:1: [sdc] Sense not available. [ 350.431146][T10300] sd 6:0:0:0: [sdb] 0-byte physical blocks [ 350.432070][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.433093][ T38] sd 6:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 350.438141][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.439061][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.440489][T10300] sd 6:0:0:0: [sdb] Write Protect is off [ 350.444751][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.447211][ T38] sd 6:0:0:1: [sdc] 0-byte physical blocks [ 350.448430][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.450127][T10300] sd 6:0:0:0: [sdb] Asking for cache data failed [ 350.453326][ T38] sd 6:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 350.455745][T10300] sd 6:0:0:0: [sdb] Assuming drive cache: write through [ 350.458557][ T38] sd 6:0:0:1: [sdc] Asking for cache data failed [ 350.460592][ T38] sd 6:0:0:1: [sdc] Assuming drive cache: write through [ 350.491226][T10300] sd 6:0:0:0: [sdb] Attached SCSI removable disk [ 350.492608][ T38] sd 6:0:0:1: [sdc] Attached SCSI removable disk [ 350.497748][T10348] sd 6:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 350.621084][T10344] udevd[10344]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 350.930779][T10624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.974928][T10627] FAULT_INJECTION: forcing a failure. [ 350.974928][T10627] name failslab, interval 1, probability 100, space 0, times 96 [ 350.974953][T10624] FAULT_INJECTION: forcing a failure. [ 350.974953][T10624] name failslab, interval 1, probability 100, space 0, times 84 [ 350.980265][T10627] CPU: 1 UID: 0 PID: 10627 Comm: syz.0.988 Not tainted syzkaller #0 PREEMPT(full) [ 350.980297][T10627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.980309][T10627] Call Trace: [ 350.980316][T10627] [ 350.980323][T10627] dump_stack_lvl+0x100/0x190 [ 350.980353][T10627] should_fail_ex.cold+0x5/0xa [ 350.980375][T10627] should_failslab+0xc2/0x120 [ 350.980402][T10627] kmem_cache_alloc_noprof+0x91/0x6a0 [ 350.980426][T10627] ? do_getname+0x35/0x390 [ 350.980453][T10627] do_getname+0x35/0x390 [ 350.980475][T10627] __ia32_sys_mkdirat+0x77/0xc0 [ 350.980494][T10627] __do_fast_syscall_32+0xe7/0x970 [ 350.980520][T10627] do_fast_syscall_32+0x32/0x70 [ 350.980544][T10627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.980567][T10627] RIP: 0023:0xf7fa5fec [ 350.980597][T10627] Code: Unable to access opcode bytes at 0xf7fa5fc2. [ 350.980606][T10627] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 350.980626][T10627] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800003e0 [ 350.980638][T10627] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 350.980649][T10627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.980659][T10627] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.980669][T10627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.980690][T10627] [ 351.043474][T10624] CPU: 2 UID: 0 PID: 10624 Comm: syz.3.987 Not tainted syzkaller #0 PREEMPT(full) [ 351.043494][T10624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.043502][T10624] Call Trace: [ 351.043507][T10624] [ 351.043513][T10624] dump_stack_lvl+0x100/0x190 [ 351.043532][T10624] should_fail_ex.cold+0x5/0xa [ 351.043553][T10624] should_failslab+0xc2/0x120 [ 351.043572][T10624] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 351.043591][T10624] ? __d_alloc+0x35/0xa50 [ 351.043608][T10624] __d_alloc+0x35/0xa50 [ 351.043625][T10624] d_alloc+0x4a/0x1e0 [ 351.043639][T10624] lookup_one_qstr_excl+0x171/0x250 [ 351.043659][T10624] start_dirop+0x59/0xb0 [ 351.043677][T10624] simple_start_creating+0xf9/0x110 [ 351.043690][T10624] ? __pfx_simple_start_creating+0x10/0x10 [ 351.043709][T10624] ? mntput+0x70/0xa0 [ 351.043728][T10624] ? simple_pin_fs+0xa3/0x190 [ 351.043747][T10624] debugfs_start_creating.part.0+0x82/0x170 [ 351.043775][T10624] debugfs_create_dir+0x72/0x440 [ 351.043800][T10624] ieee80211_debugfs_recreate_netdev+0x1d1/0x1790 [ 351.043823][T10624] ? ieee80211_clear_tpe+0x238/0x290 [ 351.043849][T10624] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 351.043875][T10624] ? ieee80211_link_setup+0x81/0xa0 [ 351.043898][T10624] ? ieee80211_setup_sdata+0x620/0xdc0 [ 351.043929][T10624] ieee80211_if_change_type+0x5c8/0x790 [ 351.043949][T10624] ieee80211_change_iface+0xad/0x920 [ 351.043965][T10624] ? kasan_check_range+0x1ab/0x1e0 [ 351.043995][T10624] cfg80211_change_iface+0x569/0xdf0 [ 351.044022][T10624] nl80211_set_interface+0x875/0xc80 [ 351.044054][T10624] ? __pfx_nl80211_set_interface+0x10/0x10 [ 351.044081][T10624] ? __nla_parse+0x40/0x60 [ 351.044102][T10624] ? nl80211_pre_doit+0x30e/0xae0 [ 351.044125][T10624] ? nl80211_pre_doit+0x19a/0xae0 [ 351.044152][T10624] genl_family_rcv_msg_doit+0x214/0x300 [ 351.044177][T10624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.044200][T10624] ? genl_get_cmd+0x3e7/0x760 [ 351.044227][T10624] ? bpf_lsm_capable+0x9/0x10 [ 351.044249][T10624] ? security_capable+0x80/0x260 [ 351.044268][T10624] ? ns_capable+0xd2/0xf0 [ 351.044287][T10624] genl_rcv_msg+0x560/0x800 [ 351.044313][T10624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.044336][T10624] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 351.044357][T10624] ? __pfx_nl80211_set_interface+0x10/0x10 [ 351.044385][T10624] ? __pfx_nl80211_post_doit+0x10/0x10 [ 351.044413][T10624] netlink_rcv_skb+0x159/0x420 [ 351.044430][T10624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.044450][T10624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.044475][T10624] ? netlink_deliver_tap+0x1ae/0xcc0 [ 351.044493][T10624] genl_rcv+0x28/0x40 [ 351.044514][T10624] netlink_unicast+0x585/0x850 [ 351.044545][T10624] ? __pfx_netlink_unicast+0x10/0x10 [ 351.044573][T10624] netlink_sendmsg+0x8b0/0xda0 [ 351.044597][T10624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.044626][T10624] ? apparmor_socket_sendmsg+0x15b/0x270 [ 351.044649][T10624] ____sys_sendmsg+0xa4d/0xbe0 [ 351.044665][T10624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.044683][T10624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.044709][T10624] ___sys_sendmsg+0x190/0x1e0 [ 351.044729][T10624] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.044749][T10624] ? futex_wait+0x11e/0x370 [ 351.044781][T10624] ? find_held_lock+0x2b/0x80 [ 351.044819][T10624] __sys_sendmsg+0x160/0x210 [ 351.044842][T10624] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.044876][T10624] __do_fast_syscall_32+0xe7/0x970 [ 351.044897][T10624] ? lockdep_hardirqs_on+0x78/0x100 [ 351.044923][T10624] do_fast_syscall_32+0x32/0x70 [ 351.044943][T10624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.044964][T10624] RIP: 0023:0xf7f62fec [ 351.044990][T10624] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 351.045000][T10624] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 351.045022][T10624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 351.045036][T10624] RDX: 0000000004004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.045050][T10624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.045061][T10624] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 351.045071][T10624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.045097][T10624] [ 351.203768][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.206010][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.209010][T10595] bridge_slave_0: entered allmulticast mode [ 351.211669][T10595] bridge_slave_0: entered promiscuous mode [ 351.225969][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.228620][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.231053][T10595] bridge_slave_1: entered allmulticast mode [ 351.233702][T10595] bridge_slave_1: entered promiscuous mode [ 351.284972][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.292154][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.316163][T10595] team0: Port device team_slave_0 added [ 351.319839][T10595] team0: Port device team_slave_1 added [ 351.338122][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.340302][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.348101][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.352562][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.355050][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.363509][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.385049][T10595] hsr_slave_0: entered promiscuous mode [ 351.387385][T10595] hsr_slave_1: entered promiscuous mode [ 351.480071][T10595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.485234][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.488305][T10595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.492282][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.495095][T10595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.502143][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.504969][T10595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.518010][T10595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.552549][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.555489][T10595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.558243][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.560465][T10595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.566752][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 351.595471][ T5893] IPVS: starting estimator thread 0... [ 351.601436][T10595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.614797][ T209] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.623050][ T209] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.638999][T10595] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.649319][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.652204][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.661097][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.664317][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.679447][T10663] syzkaller0: entered promiscuous mode [ 351.681202][T10663] syzkaller0: entered allmulticast mode [ 351.686935][T10660] IPVS: using max 43 ests per chain, 103200 per kthread [ 351.727024][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 351.732153][ T10] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 351.735170][ T10] usb 5-1: config 0 has no interface number 0 [ 351.737223][ T10] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 351.740113][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.747443][ T10] usb 5-1: config 0 descriptor?? [ 351.852462][T10671] nd_pmem pfn0.0: namespace0.0 unable to satisfy requested alignment [ 351.867869][ T10] viperboard 5-1:0.143: version 0.00 found at bus 005 address 014 [ 351.901980][ T10] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 351.905374][ T10] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 351.953776][T10595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.953893][ T1042] usb 5-1: USB disconnect, device number 14 [ 352.129128][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.132930][T10595] veth0_vlan: entered promiscuous mode [ 352.139812][T10595] veth1_vlan: entered promiscuous mode [ 352.154883][T10595] veth0_macvtap: entered promiscuous mode [ 352.159766][T10595] veth1_macvtap: entered promiscuous mode [ 352.171334][T10595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.178275][T10595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.190313][T10698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.194421][ T9014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.197808][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.200482][ T9014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.209069][ T9014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.214522][ T9014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.261081][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.264034][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.277617][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.280266][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.363846][T10704] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 352.366673][T10704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.371990][T10704] vhci_hcd vhci_hcd.0: Device attached [ 352.412349][T10702] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 352.416488][T10702] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 352.419256][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.2.998 Not tainted syzkaller #0 PREEMPT(full) [ 352.422214][T10702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.425380][T10702] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 352.427230][T10702] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 352.433039][T10702] RSP: 0000:ffffc90002ae79a0 EFLAGS: 00010202 [ 352.435265][T10702] RAX: dffffc0000000000 RBX: ffff88800e798158 RCX: ffffc90034ec6000 [ 352.437813][T10702] RDX: 00000000000000e6 RSI: ffffffff87e53b86 RDI: ffff88800e798128 [ 352.440282][T10702] RBP: ffff88800e798150 R08: 0000000000000001 R09: 0000000000000000 [ 352.442745][T10702] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 352.445274][T10702] R13: ffff88800e798128 R14: ffff888013033120 R15: ffff88800e798000 [ 352.447747][T10702] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f5394b40 [ 352.450531][T10702] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 352.452543][T10702] CR2: 00000000f7207ea4 CR3: 000000002a844000 CR4: 0000000000352ef0 [ 352.455070][T10702] Call Trace: [ 352.456120][T10702] [ 352.456998][T10702] ? f_midi2_unbind+0x146/0x800 [ 352.458560][T10702] f_midi2_unbind+0x265/0x800 [ 352.460044][T10702] ? kasan_quarantine_put+0x104/0x240 [ 352.461685][T10702] ? __pfx_f_midi2_unbind+0x10/0x10 [ 352.463241][T10702] purge_configs_funcs+0x285/0x510 [ 352.464826][T10702] configfs_composite_unbind+0xae/0x210 [ 352.466503][T10702] gadget_unbind_driver+0x20c/0x4f0 [ 352.468142][T10702] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 352.470076][T10702] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 352.471845][T10702] device_remove+0xcb/0x180 [ 352.473287][T10702] device_release_driver_internal+0x44e/0x620 [ 352.475493][T10702] driver_detach+0xd8/0x1b0 [ 352.476933][T10702] bus_remove_driver+0x13b/0x2e0 [ 352.478503][T10702] driver_unregister+0x76/0xb0 [ 352.479945][T10702] usb_gadget_unregister_driver+0x49/0x70 [ 352.481640][T10702] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 352.483460][T10702] configfs_write_iter+0x302/0x4e0 [ 352.485080][T10702] vfs_write+0x6ac/0x1050 [ 352.486407][T10702] ? __pfx_configfs_write_iter+0x10/0x10 [ 352.488077][T10702] ? __pfx_vfs_write+0x10/0x10 [ 352.489702][T10702] ? find_held_lock+0x2b/0x80 [ 352.491203][T10702] ksys_write+0x12a/0x250 [ 352.492584][T10702] ? __pfx_ksys_write+0x10/0x10 [ 352.494227][T10702] __do_fast_syscall_32+0xe7/0x970 [ 352.495838][T10702] do_fast_syscall_32+0x32/0x70 [ 352.497386][T10702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.499345][T10702] RIP: 0023:0xf7f13fec [ 352.500633][T10702] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 352.502692][T10702] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 352.505367][T10702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b00 [ 352.507858][T10702] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.510306][T10702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.512754][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.515272][T10702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.517741][T10702] [ 352.518729][T10702] Modules linked in: [ 352.520484][T10702] ---[ end trace 0000000000000000 ]--- [ 352.523649][T10702] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 352.523657][ T5100] Bluetooth: hci3: command tx timeout [ 352.523673][T10702] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 352.535933][T10702] RSP: 0000:ffffc90002ae79a0 EFLAGS: 00010202 [ 352.538565][T10702] RAX: dffffc0000000000 RBX: ffff88800e798158 RCX: ffffc90034ec6000 [ 352.568460][T10702] RDX: 00000000000000e6 RSI: ffffffff87e53b86 RDI: ffff88800e798128 [ 352.571204][T10702] RBP: ffff88800e798150 R08: 0000000000000001 R09: 0000000000000000 [ 352.573657][T10702] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000020 [ 352.582026][T10702] R13: ffff88800e798128 R14: ffff888013033120 R15: ffff88800e798000 [ 352.586526][T10702] FS: 0000000000000000(0000) GS:ffff888096ee3000(0063) knlGS:00000000f5394b40 [ 352.589343][T10702] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 352.591658][T10702] CR2: 00000000f71989d0 CR3: 000000002a844000 CR4: 0000000000352ef0 [ 352.594179][T10702] Kernel panic - not syncing: Fatal exception [ 352.596634][T10702] Kernel Offset: disabled [ 352.598020][T10702] Rebooting in 86400 seconds..