program: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) chroot(&(0x7f0000000180)='./dbg/failslab/times\x00') sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "00000631f4e3000000001500"}}}]}, 0x48}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r0, &(0x7f0000000140)='1000\x00', 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0xc}}, 0x14}}, 0x24000004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='1\x00', 0x1) unshare(0xa000400) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "14369afd9845f99c94b94f5a16b48fe862b18b5b6606"}, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bColorPrimaries\x00', 0x2, 0x0) [ 135.554195][ T4649] Bluetooth: hci0: command tx timeout [ 135.700400][ T68] FAULT_INJECTION: forcing a failure. [ 135.700400][ T68] name failslab, interval 1, probability 1, space 0, times 1000 [ 135.712371][ T5326] FAULT_INJECTION: forcing a failure. [ 135.712371][ T5326] name failslab, interval 1, probability 1, space 0, times 1000 [ 135.719904][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 135.719922][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.719930][ T68] Workqueue: ipv6_addrconf addrconf_dad_work [ 135.720204][ T68] Call Trace: [ 135.720210][ T68] [ 135.720216][ T68] dump_stack_lvl+0xe8/0x150 [ 135.720236][ T68] should_fail_ex+0x40c/0x560 [ 135.720311][ T68] should_failslab+0xa8/0x100 [ 135.720336][ T68] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 135.720349][ T68] ? local_lock_release+0x9c/0x160 [ 135.720364][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 135.720377][ T68] ? __alloc_skb+0x1d7/0x7a0 [ 135.720391][ T68] __alloc_skb+0x1d7/0x7a0 [ 135.720405][ T68] ndisc_alloc_skb+0xa0/0x480 [ 135.720420][ T68] ndisc_send_rs+0x288/0x6b0 [ 135.720436][ T68] ? ipv6_get_lladdr+0x2b/0x3f0 [ 135.720447][ T68] addrconf_dad_completed+0x911/0xe60 [ 135.720465][ T68] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 135.720477][ T68] ? addrconf_dad_work+0xe57/0x15c0 [ 135.720491][ T68] ? __local_bh_enable_ip+0xd0/0x130 [ 135.720507][ T68] addrconf_dad_work+0xcf8/0x15c0 [ 135.720525][ T68] ? __pfx_addrconf_dad_work+0x10/0x10 [ 135.720538][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 135.720555][ T68] ? rcu_is_watching+0x15/0xb0 [ 135.720567][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 135.720578][ T68] process_scheduled_works+0xa8e/0x14e0 [ 135.720607][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 135.720622][ T68] ? assign_work+0x3cf/0x5d0 [ 135.720637][ T68] worker_thread+0xa47/0xfb0 [ 135.720656][ T68] ? __kthread_parkme+0x71/0x1f0 [ 135.720676][ T68] kthread+0x388/0x470 [ 135.720692][ T68] ? __pfx_worker_thread+0x10/0x10 [ 135.720702][ T68] ? __pfx_kthread+0x10/0x10 [ 135.720718][ T68] ret_from_fork+0x514/0xb70 [ 135.720736][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 135.720751][ T68] ? __switch_to+0xc89/0x1420 [ 135.720767][ T68] ? __pfx_kthread+0x10/0x10 [ 135.720782][ T68] ret_from_fork_asm+0x1a/0x30 [ 135.720803][ T68] [ 135.723533][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 135.723560][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.723568][ T5326] Call Trace: [ 135.723574][ T5326] [ 135.723580][ T5326] dump_stack_lvl+0xe8/0x150 [ 135.723607][ T5326] should_fail_ex+0x40c/0x560 [ 135.723626][ T5326] should_failslab+0xa8/0x100 [ 135.723647][ T5326] __kmalloc_cache_noprof+0xa8/0x660 [ 135.723664][ T5326] ? uvcg_config_create_children+0x114/0x280 [ 135.723679][ T5326] ? uvcg_config_create_children+0x114/0x280 [ 135.723705][ T5326] uvcg_config_create_children+0x114/0x280 [ 135.723727][ T5326] uvcg_config_create_children+0x20b/0x280 [ 135.723749][ T5326] uvcg_attach_configfs+0x33/0x60 [ 135.723765][ T5326] uvc_alloc_inst+0x6f9/0xa90 [ 135.723788][ T5326] usb_get_function_instance+0xe3/0x2f0 [ 135.723805][ T5326] function_make+0x127/0x360 [ 135.723821][ T5326] ? __pfx___mutex_lock+0x10/0x10 [ 135.723837][ T5326] ? __pfx_function_make+0x10/0x10 [ 135.723850][ T5326] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.723872][ T5326] ? do_raw_spin_unlock+0x4d/0x210 [ 135.723891][ T5326] configfs_mkdir+0x4f6/0x9e0 [ 135.723913][ T5326] ? d_splice_alias+0x12/0x30 [ 135.723935][ T5326] ? __pfx_configfs_mkdir+0x10/0x10 [ 135.723951][ T5326] ? generic_permission+0x2bf/0x670 [ 135.723971][ T5326] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 135.723992][ T5326] vfs_mkdir+0x406/0x620 [ 135.724016][ T5326] filename_mkdirat+0x285/0x510 [ 135.724040][ T5326] ? __pfx_filename_mkdirat+0x10/0x10 [ 135.724063][ T5326] ? do_getname+0x151/0x250 [ 135.724075][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.724123][ T5326] __se_sys_mkdirat+0x35/0x150 [ 135.724148][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.724163][ T5326] do_syscall_64+0x174/0x580 [ 135.724178][ T5326] ? trace_irq_disable+0x3b/0x140 [ 135.724196][ T5326] ? clear_bhb_loop+0x40/0x90 [ 135.724212][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.724227][ T5326] RIP: 0033:0x7fd4a6b9df99 [ 135.724242][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.724253][ T5326] RSP: 002b:00007fd4a7b16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 135.724269][ T5326] RAX: ffffffffffffffda RBX: 00007fd4a6e25fa0 RCX: 00007fd4a6b9df99 [ 135.724278][ T5326] RDX: 00000000000001ff RSI: 0000200000000800 RDI: ffffffffffffff9c [ 135.724287][ T5326] RBP: 00007fd4a6c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 135.724295][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.724303][ T5326] R13: 00007fd4a6e26038 R14: 00007fd4a6e25fa0 R15: 00007fffe0299398 [ 135.724332][ T5326] [ 135.953923][ T4688] FAULT_INJECTION: forcing a failure. [ 135.953923][ T4688] name failslab, interval 1, probability 1, space 0, times 998 [ 135.964826][ T5326] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 135.971297][ T5326] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 135.975336][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 135.979200][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.983402][ T5326] RIP: 0010:usb_put_function_instance+0x54/0xb0 [ 135.986147][ T5326] Code: 8d b3 98 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ea 1b 7f fa 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 cd 1b 7f fa 4d 8b 36 48 8d bb a8 [ 135.995359][ T5326] RSP: 0018:ffffc9000df4fa50 EFLAGS: 00010202 [ 135.997931][ T5326] RAX: 0000000000000001 RBX: ffff88801f44e000 RCX: ffff888000c72540 [ 136.001590][ T5326] RDX: 0000000000000003 RSI: ffffffff8e230467 RDI: ffff88801f44e000 [ 136.005575][ T5326] RBP: 1ffff11003e89c00 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 136.008904][ T5326] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 136.012112][ T5326] R13: dffffc0000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 136.015570][ T5326] FS: 00007fd4a7b176c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 136.020859][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.023743][ T5326] CR2: 00007fd4a6df26b8 CR3: 000000001d11d000 CR4: 0000000000352ef0 [ 136.027060][ T5326] Call Trace: [ 136.028518][ T5326] [ 136.029922][ T5326] ? __pfx_uvc_func_item_release+0x10/0x10 [ 136.032652][ T5326] config_item_release+0x13a/0x2d0 [ 136.035092][ T5326] uvcg_attach_configfs+0x56/0x60 [ 136.037442][ T5326] uvc_alloc_inst+0x6f9/0xa90 [ 136.039495][ T5326] usb_get_function_instance+0xe3/0x2f0 [ 136.041823][ T5326] function_make+0x127/0x360 [ 136.043891][ T5326] ? __pfx___mutex_lock+0x10/0x10 [ 136.046436][ T5326] ? __pfx_function_make+0x10/0x10 [ 136.050014][ T5326] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.052857][ T5326] ? do_raw_spin_unlock+0x4d/0x210 [ 136.055048][ T5326] configfs_mkdir+0x4f6/0x9e0 [ 136.057022][ T5326] ? d_splice_alias+0x12/0x30 [ 136.058982][ T5326] ? __pfx_configfs_mkdir+0x10/0x10 [ 136.061154][ T5326] ? generic_permission+0x2bf/0x670 [ 136.063396][ T5326] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 136.065719][ T5326] vfs_mkdir+0x406/0x620 [ 136.068039][ T5326] filename_mkdirat+0x285/0x510 [ 136.070771][ T5326] ? __pfx_filename_mkdirat+0x10/0x10 [ 136.073309][ T5326] ? do_getname+0x151/0x250 [ 136.075150][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.077672][ T5326] __se_sys_mkdirat+0x35/0x150 [ 136.079882][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.082801][ T5326] do_syscall_64+0x174/0x580 [ 136.085460][ T5326] ? trace_irq_disable+0x3b/0x140 [ 136.087962][ T5326] ? clear_bhb_loop+0x40/0x90 [ 136.089983][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.092403][ T5326] RIP: 0033:0x7fd4a6b9df99 [ 136.094624][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.103825][ T5326] RSP: 002b:00007fd4a7b16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 136.107330][ T5326] RAX: ffffffffffffffda RBX: 00007fd4a6e25fa0 RCX: 00007fd4a6b9df99 [ 136.111140][ T5326] RDX: 00000000000001ff RSI: 0000200000000800 RDI: ffffffffffffff9c [ 136.115274][ T5326] RBP: 00007fd4a6c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 136.118765][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.122088][ T5326] R13: 00007fd4a6e26038 R14: 00007fd4a6e25fa0 R15: 00007fffe0299398 [ 136.125482][ T5326] [ 136.126959][ T5326] Modules linked in: [ 136.130028][ C0] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 136.134275][ T5326] ---[ end trace 0000000000000000 ]--- [ 136.136791][ T4688] CPU: 0 UID: 0 PID: 4688 Comm: klogd Tainted: G D syzkaller #0 PREEMPT(full) [ 136.136813][ T4688] Tainted: [D]=DIE [ 136.136816][ T4688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.136822][ T4688] Call Trace: [ 136.136826][ T4688] [ 136.136831][ T4688] dump_stack_lvl+0xe8/0x150 [ 136.136853][ T4688] should_fail_ex+0x40c/0x560 [ 136.136870][ T4688] should_failslab+0xa8/0x100 [ 136.136887][ T4688] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 136.136902][ T4688] ? local_lock_release+0x9c/0x160 [ 136.136918][ T4688] ? __alloc_skb+0x1d7/0x7a0 [ 136.136931][ T4688] ? __alloc_skb+0x1d7/0x7a0 [ 136.136947][ T4688] __alloc_skb+0x1d7/0x7a0 [ 136.136965][ T4688] alloc_skb_with_frags+0xc6/0x760 [ 136.136983][ T4688] ? __pfx___schedule+0x10/0x10 [ 136.137004][ T4688] sock_alloc_send_pskb+0x878/0x990 [ 136.137021][ T4688] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 136.137036][ T4688] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 136.137049][ T4688] unix_dgram_sendmsg+0x4fe/0x1870 [ 136.137071][ T4688] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.137086][ T4688] ? aa_sock_msg_perm+0xda/0x1b0 [ 136.137104][ T4688] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.137115][ T4688] sock_sendmsg_nosec+0x13a/0x180 [ 136.137130][ T4688] __sys_sendto+0x408/0x5a0 [ 136.137147][ T4688] ? tomoyo_socket_connect_permission+0x189/0x270 [ 136.137161][ T4688] ? __pfx___sys_sendto+0x10/0x10 [ 136.137175][ T4688] ? apparmor_socket_connect+0xd1/0x1b0 [ 136.137195][ T4688] ? __pfx___sys_connect+0x10/0x10 [ 136.137213][ T4688] ? rcu_is_watching+0x15/0xb0 [ 136.137227][ T4688] __x64_sys_sendto+0xde/0x100 [ 136.137241][ T4688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.137253][ T4688] do_syscall_64+0x174/0x580 [ 136.137265][ T4688] ? trace_irq_disable+0x3b/0x140 [ 136.137280][ T4688] ? clear_bhb_loop+0x40/0x90 [ 136.137294][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.137313][ T4688] RIP: 0033:0x7f4c8dd84407 [ 136.137352][ T4688] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 136.137363][ T4688] RSP: 002b:00007ffc3c26e7b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 136.137376][ T4688] RAX: ffffffffffffffda RBX: 00007f4c8dc34c80 RCX: 00007f4c8dd84407 [ 136.137384][ T4688] RDX: 000000000000004c RSI: 00007ffc3c26e8f0 RDI: 0000000000000003 [ 136.137392][ T4688] RBP: 00007ffc3c26ed20 R08: 0000000000000000 R09: 0000000000000000 [ 136.137400][ T4688] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc3c26ed38 [ 136.137407][ T4688] R13: 00007ffc3c26e8f0 R14: 0000000000000031 R15: 00007ffc3c26e8f0 [ 136.137420][ T4688] [ 136.137706][ T4688] FAULT_INJECTION: forcing a failure. [ 136.137706][ T4688] name failslab, interval 1, probability 1, space 0, times 995 [ 136.277216][ T4688] CPU: 0 UID: 0 PID: 4688 Comm: klogd Tainted: G D syzkaller #0 PREEMPT(full) [ 136.277244][ T4688] Tainted: [D]=DIE [ 136.277248][ T4688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.277256][ T4688] Call Trace: [ 136.277261][ T4688] [ 136.277268][ T4688] dump_stack_lvl+0xe8/0x150 [ 136.277291][ T4688] should_fail_ex+0x40c/0x560 [ 136.277305][ T4688] should_failslab+0xa8/0x100 [ 136.277319][ T4688] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 136.277337][ T4688] ? do_getname_kernel+0x54/0x230 [ 136.277349][ T4688] ? do_getname_kernel+0x54/0x230 [ 136.277360][ T4688] do_getname_kernel+0x54/0x230 [ 136.277367][ T4688] ? kern_path+0x1b/0x150 [ 136.277377][ T4688] kern_path+0x25/0x150 [ 136.277388][ T4688] unix_find_other+0x19b/0xb40 [ 136.277432][ T4688] ? __pfx_unix_find_other+0x10/0x10 [ 136.277446][ T4688] ? rcu_is_watching+0x15/0xb0 [ 136.277457][ T4688] unix_dgram_connect+0x34e/0xc70 [ 136.277470][ T4688] ? tomoyo_socket_connect_permission+0x189/0x270 [ 136.277482][ T4688] ? __pfx_unix_dgram_connect+0x10/0x10 [ 136.277491][ T4688] ? apparmor_socket_connect+0xd1/0x1b0 [ 136.277500][ T4688] ? bpf_lsm_socket_connect+0x9/0x20 [ 136.277512][ T4688] __sys_connect+0x323/0x460 [ 136.277523][ T4688] ? __pfx___sys_connect+0x10/0x10 [ 136.277534][ T4688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.277542][ T4688] __x64_sys_connect+0x7a/0x90 [ 136.277555][ T4688] do_syscall_64+0x174/0x580 [ 136.277567][ T4688] ? trace_irq_disable+0x3b/0x140 [ 136.277579][ T4688] ? clear_bhb_loop+0x40/0x90 [ 136.277590][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.277600][ T4688] RIP: 0033:0x7f4c8dd84407 [ 136.277610][ T4688] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 136.277618][ T4688] RSP: 002b:00007ffc3c26e780 EFLAGS: 00000202 ORIG_RAX: 000000000000002a [ 136.277631][ T4688] RAX: ffffffffffffffda RBX: 00007f4c8dc34c80 RCX: 00007f4c8dd84407 [ 136.277639][ T4688] RDX: 000000000000006e RSI: 00007f4c8de8b560 RDI: 0000000000000003 [ 136.277646][ T4688] RBP: 00007f4c8de8b560 R08: 0000000000000000 R09: 0000000000000000 [ 136.277652][ T4688] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 136.277658][ T4688] R13: 0000000000000069 R14: 0000000000000031 R15: 00007ffc3c26e8f0 [ 136.277668][ T4688] [ 136.282243][ T4688] FAULT_INJECTION: forcing a failure. [ 136.282243][ T4688] name failslab, interval 1, probability 1, space 0, times 994 [ 136.290210][ C0] FAULT_INJECTION: forcing a failure. [ 136.290210][ C0] name failslab, interval 1, probability 1, space 0, times 994 [ 136.290242][ C0] CPU: 0 UID: 0 PID: 4688 Comm: klogd Tainted: G D syzkaller #0 PREEMPT(full) [ 136.290258][ C0] Tainted: [D]=DIE [ 136.290263][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.290269][ C0] Call Trace: [ 136.290277][ C0] [ 136.290283][ C0] dump_stack_lvl+0xe8/0x150 [ 136.290303][ C0] should_fail_ex+0x40c/0x560 [ 136.290327][ C0] should_failslab+0xa8/0x100 [ 136.290343][ C0] __kmalloc_noprof+0xfe/0x720 [ 136.290356][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 136.290375][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 136.290392][ C0] cfg80211_inform_single_bss_data+0x990/0x1be0 [ 136.290409][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 136.290429][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 136.290448][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290459][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 136.290472][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 136.290488][ C0] ? kernel_text_address+0xa5/0xe0 [ 136.290500][ C0] ? unwind_get_return_address+0x4d/0x90 [ 136.290510][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 136.290524][ C0] ? arch_stack_walk+0xfb/0x150 [ 136.290539][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 136.290554][ C0] ? stack_trace_save+0xa9/0x100 [ 136.290568][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 136.290581][ C0] ? unwind_next_frame+0x8f/0x2550 [ 136.290590][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290597][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 136.290606][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290613][ C0] ? unwind_next_frame+0x8f/0x2550 [ 136.290619][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290626][ C0] ? unwind_next_frame+0x8f/0x2550 [ 136.290633][ C0] ? unwind_next_frame+0x8f/0x2550 [ 136.290640][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290648][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 136.290657][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290664][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 136.290675][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 136.290685][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 136.290696][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290706][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 136.290718][ C0] ieee80211_scan_rx+0x552/0xa40 [ 136.290729][ C0] ieee80211_rx_list+0x2d0a/0x3b00 [ 136.290740][ C0] ? __irq_exit_rcu+0xca/0x220 [ 136.290752][ C0] ? irq_exit_rcu+0x9/0x30 [ 136.290763][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290774][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 136.290789][ C0] ? update_load_avg+0x11a6/0x1950 [ 136.290801][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 136.290810][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.290819][ C0] ? lock_acquire+0x5f/0x350 [ 136.290832][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.290845][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 136.290855][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 136.290868][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 136.290878][ C0] ? trace_irq_enable+0x3b/0x140 [ 136.290891][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 136.290905][ C0] ? skb_dequeue+0x124/0x160 [ 136.290919][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 136.290933][ C0] tasklet_action_common+0x2d7/0x490 [ 136.290946][ C0] handle_softirqs+0x225/0x840 [ 136.290956][ C0] ? __irq_exit_rcu+0xca/0x220 [ 136.290967][ C0] __irq_exit_rcu+0xca/0x220 [ 136.290977][ C0] irq_exit_rcu+0x9/0x30 [ 136.290988][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 136.290999][ C0] [ 136.291003][ C0] [ 136.291006][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.291018][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 136.291031][ C0] Code: ff ff e8 81 3f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 73 3f 21 00 e8 3e 20 2d 0a 48 85 db 74 c0 e8 64 3f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 16 70 [ 136.291039][ C0] RSP: 0018:ffffc900025b73a0 EFLAGS: 00000293 [ 136.291050][ C0] RAX: ffffffff81a5e4ec RBX: ffffc900025b7500 RCX: ffff88801d298000 [ 136.291056][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.291062][ C0] RBP: ffffc900025b74b0 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 136.291069][ C0] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 136.291076][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f471c60 [ 136.291084][ C0] ? console_flush_all+0x7cc/0xaf0 [ 136.291096][ C0] ? console_flush_all+0x123/0xaf0 [ 136.291107][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 136.291118][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 136.291131][ C0] console_unlock+0xd1/0x1c0 [ 136.291139][ C0] ? do_raw_spin_unlock+0x4d/0x210 [ 136.291149][ C0] ? __pfx_console_unlock+0x10/0x10 [ 136.291158][ C0] ? rcu_needs_cpu+0xb0/0xb0 [ 136.291166][ C0] ? _printk+0xdd/0x130 [ 136.291179][ C0] vprintk_emit+0x485/0x560 [ 136.291188][ C0] ? unix_dgram_sendmsg+0x4fe/0x1870 [ 136.291200][ C0] ? sock_sendmsg_nosec+0x13a/0x180 [ 136.291212][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 136.291223][ C0] _printk+0xdd/0x130 [ 136.291233][ C0] ? __pfx__printk+0x10/0x10 [ 136.291242][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 136.291254][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.291263][ C0] ? lock_acquire+0x5f/0x350 [ 136.291275][ C0] should_fail_ex+0x3ed/0x560 [ 136.291286][ C0] should_failslab+0xa8/0x100 [ 136.291298][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 136.291317][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 136.291330][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 136.291344][ C0] __alloc_skb+0x1d7/0x7a0 [ 136.291357][ C0] alloc_skb_with_frags+0xc6/0x760 [ 136.291373][ C0] sock_alloc_send_pskb+0x878/0x990 [ 136.291387][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 136.291397][ C0] ? lock_release+0x4b/0x3c0 [ 136.291409][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.291419][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 136.291488][ C0] unix_dgram_sendmsg+0x4fe/0x1870 [ 136.291502][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.291515][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 136.291533][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.291548][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 136.291562][ C0] __sys_sendto+0x408/0x5a0 [ 136.291575][ C0] ? bpf_lsm_capable+0x9/0x20 [ 136.291588][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 136.291605][ C0] ? __pfx___sys_connect+0x10/0x10 [ 136.291620][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.291631][ C0] __x64_sys_sendto+0xde/0x100 [ 136.291646][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.291656][ C0] do_syscall_64+0x174/0x580 [ 136.291669][ C0] ? trace_irq_disable+0x3b/0x140 [ 136.291682][ C0] ? clear_bhb_loop+0x40/0x90 [ 136.291694][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.291704][ C0] RIP: 0033:0x7f4c8dd84407 [ 136.291715][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 136.291724][ C0] RSP: 002b:00007ffc3c26e7b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 136.291735][ C0] RAX: ffffffffffffffda RBX: 00007f4c8dc34c80 RCX: 00007f4c8dd84407 [ 136.291742][ C0] RDX: 0000000000000053 RSI: 00007ffc3c26e8f0 RDI: 0000000000000003 [ 136.291748][ C0] RBP: 00007ffc3c26ed20 R08: 0000000000000000 R09: 0000000000000000 [ 136.291754][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc3c26ed38 [ 136.291760][ C0] R13: 00007ffc3c26e8f0 R14: 0000000000000038 R15: 00007ffc3c26e8f0 [ 136.291771][ C0] [ 136.770562][ T5326] RIP: 0010:usb_put_function_instance+0x54/0xb0 [ 136.773229][ T5326] Code: 8d b3 98 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ea 1b 7f fa 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 cd 1b 7f fa 4d 8b 36 48 8d bb a8 [ 136.782328][ T5326] RSP: 0018:ffffc9000df4fa50 EFLAGS: 00010202 [ 136.785097][ T5326] RAX: 0000000000000001 RBX: ffff88801f44e000 RCX: ffff888000c72540 [ 136.790708][ T5326] RDX: 0000000000000003 RSI: ffffffff8e230467 RDI: ffff88801f44e000 [ 136.795739][ C0] FAULT_INJECTION: forcing a failure. [ 136.795739][ C0] name failslab, interval 1, probability 1, space 0, times 993 [ 136.801510][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G D syzkaller #0 PREEMPT(full) [ 136.801535][ C0] Tainted: [D]=DIE [ 136.801539][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.801549][ C0] Workqueue: mld mld_dad_work [ 136.801572][ C0] Call Trace: [ 136.801580][ C0] [ 136.801588][ C0] dump_stack_lvl+0xe8/0x150 [ 136.801610][ C0] should_fail_ex+0x40c/0x560 [ 136.801627][ C0] should_failslab+0xa8/0x100 [ 136.801647][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 136.801666][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 136.801682][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 136.801702][ C0] __alloc_skb+0x1d7/0x7a0 [ 136.801728][ C0] __netdev_alloc_skb+0xc1/0x810 [ 136.801744][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 136.801761][ C0] __ieee80211_beacon_get+0xcfd/0x1920 [ 136.801776][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 136.801794][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 136.801811][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 136.801827][ C0] ? process_backlog+0x3c3/0x1860 [ 136.801848][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 136.801864][ C0] ? lock_acquire+0x5f/0x350 [ 136.801885][ C0] __iterate_interfaces+0x2af/0x5a0 [ 136.801905][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.801919][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 136.801941][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 136.801956][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 136.801976][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.801996][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 136.802014][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.802033][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 136.802053][ C0] hrtimer_run_softirq+0x17a/0x240 [ 136.802067][ C0] handle_softirqs+0x225/0x840 [ 136.802083][ C0] ? __irq_exit_rcu+0xca/0x220 [ 136.802098][ C0] __irq_exit_rcu+0xca/0x220 [ 136.802112][ C0] irq_exit_rcu+0x9/0x30 [ 136.802125][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 136.802142][ C0] [ 136.802146][ C0] [ 136.802151][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.802166][ C0] RIP: 0010:post_alloc_hook+0x0/0x250 [ 136.802180][ C0] Code: c7 c6 80 22 fb 8b e8 4f 9d 00 ff 90 0f 0b 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 50 89 d5 89 f3 49 89 fe [ 136.802190][ C0] RSP: 0018:ffffc9000023f360 EFLAGS: 00000246 [ 136.802201][ C0] RAX: 0300000000000000 RBX: 00000000000d20c0 RCX: 0000000080000001 [ 136.802209][ C0] RDX: 00000000000d20c0 RSI: 0000000000000003 RDI: ffffea00007f3c00 [ 136.802217][ C0] RBP: ffffea00007f3c00 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 136.802224][ C0] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 136.802231][ C0] R13: 0000000000000001 R14: ffffffff8e4ff7d0 R15: 0000000000000003 [ 136.802242][ C0] get_page_from_freelist+0x21fa/0x2270 [ 136.802256][ C0] ? unwind_next_frame+0x8f/0x2550 [ 136.802268][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 136.802285][ C0] ? stack_trace_save+0xa9/0x100 [ 136.802300][ C0] ? prepare_alloc_pages+0x230/0x650 [ 136.802320][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 136.802337][ C0] ? mld_newpack+0x165/0xcb0 [ 136.802354][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.802368][ C0] ? ret_from_fork+0x514/0xb70 [ 136.802391][ C0] allocate_slab+0x79/0x5e0 [ 136.802414][ C0] refill_objects+0x2d5/0x350 [ 136.802436][ C0] __pcs_replace_empty_main+0x2bf/0x6b0 [ 136.802455][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.802471][ C0] __kmalloc_node_track_caller_noprof+0x557/0x730 [ 136.802488][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 136.802503][ C0] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 136.802519][ C0] ? mld_newpack+0x165/0xcb0 [ 136.802536][ C0] ? mld_newpack+0x165/0xcb0 [ 136.802555][ C0] __alloc_skb+0x2bd/0x7a0 [ 136.802573][ C0] mld_newpack+0x165/0xcb0 [ 136.802594][ C0] ? __pfx_mld_newpack+0x10/0x10 [ 136.802609][ C0] ? trace_contention_end+0x3d/0x140 [ 136.802624][ C0] ? __mutex_lock+0x30d/0x1550 [ 136.802640][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.802652][ C0] add_grec+0x119f/0x19d0 [ 136.802670][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 136.802685][ C0] ? rcu_is_watching+0x15/0xb0 [ 136.802697][ C0] mld_send_initial_cr+0x288/0x550 [ 136.802723][ C0] mld_dad_work+0x3d/0x480 [ 136.802738][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 136.802752][ C0] process_scheduled_works+0xa8e/0x14e0 [ 136.802771][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.802783][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.802800][ C0] ? assign_work+0x3cf/0x5d0 [ 136.802817][ C0] worker_thread+0xa47/0xfb0 [ 136.802839][ C0] kthread+0x388/0x470 [ 136.802858][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.802872][ C0] ? __pfx_kthread+0x10/0x10 [ 136.802888][ C0] ret_from_fork+0x514/0xb70 [ 136.802908][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 136.802928][ C0] ? __switch_to+0xc89/0x1420 [ 136.802945][ C0] ? __pfx_kthread+0x10/0x10 [ 136.802961][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.802977][ C0] [ 136.803795][ T5326] RBP: 1ffff11003e89c00 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 137.123850][ T5326] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 137.127425][ T5326] R13: dffffc0000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 137.130813][ T5326] FS: 00007fd4a7b176c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 137.135459][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.139461][ T5326] CR2: 00007f44d6af16b0 CR3: 000000001d11d000 CR4: 0000000000352ef0 [ 137.143802][ T5326] Kernel panic - not syncing: Fatal exception [ 137.146746][ T5326] Kernel Offset: disabled [ 137.148547][ T5326] Rebooting in 86400 seconds..