last executing test programs: 22.96598351s ago: executing program 3 (id=8): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x8, 0x19) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431dee", 0x9, 0x4040004, 0x0, 0x0) 22.760618568s ago: executing program 3 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 22.757922837s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='0x1d6b\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000160)='0x0102\n\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 22.618460694s ago: executing program 1 (id=11): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 22.576875851s ago: executing program 3 (id=12): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="616e306d058d8ef0ea4e8c880aeaacc859553d", 0x13) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 22.548448219s ago: executing program 3 (id=14): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='7777\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='3\x00', 0x2) close(r4) mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x1, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='0\x00', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='2000\x00', 0x5) close(r7) syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000680)='4\x00', 0x2) close(r8) nanosleep(&(0x7f00000006c0)={0xa}, 0x0) 21.90735569s ago: executing program 1 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x2ff, 0x0, 0x6}]}) 21.734295468s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='0x1d6b\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000160)='0x0102\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000780)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000008c0)='dummy_udc.0\x00', 0xb) r3 = syz_open_dev$video(&(0x7f0000000900), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4010565a, &(0x7f0000000940)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4010565b, &(0x7f0000000980)={0x8000004}) 21.635305283s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='0x1d6b\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000160)='0x0102\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000780)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000008c0)='dummy_udc.0\x00', 0xb) close(r2) r3 = syz_open_dev$video(&(0x7f0000000900), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4010565a, &(0x7f0000000940)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4010565b, &(0x7f0000000980)={0x8000004}) close(r3) 21.579142234s ago: executing program 1 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 21.578906997s ago: executing program 3 (id=24): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x801, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='3\n', 0x2) close(r1) 15.758517337s ago: executing program 0 (id=54): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000004000)=""/4096, 0x50) 15.679592379s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='1234 5678\x00', 0xa) 15.679398085s ago: executing program 0 (id=56): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b200101000000090400000202060000052406000005240000000d240f01"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x20, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0x9}, {0x7, 0x9, 0xe, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7c, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0x9, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x6, 0x2, '\x00', 0xb}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0x10, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180)) 12.597060182s ago: executing program 0 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "be0004", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 5.55225061s ago: executing program 32 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 5.536190321s ago: executing program 33 (id=24): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x801, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='3\n', 0x2) close(r1) 2.989416343s ago: executing program 0 (id=74): socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='add 1-1\x00', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='add 2-1\x00', 0x8) close(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1-1\x00', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='2-1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1-1\x00', 0x4) close(r5) write(0xffffffffffffffff, &(0x7f00000004c0)='2-1\x00', 0x4) close(0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/usbip_sockfd\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='3\x00', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)='3\x00', 0x2) close(r7) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write(r0, &(0x7f0000000600)="00000002000000010000000000000000000000000000000200"/48, 0x30) 2.388466102s ago: executing program 2 (id=76): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.738039474s ago: executing program 2 (id=77): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='none\x00', &(0x7f0000000800)='./my_dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_dev/ttyGS0\x00', 0x2, 0x0) 1.714641451s ago: executing program 2 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.rn0\x00', 0x1ed) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.rn0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/rndis.rn0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='dummy_udc.0\n\x00', 0xc) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) 1.647280277s ago: executing program 2 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000180)={@local, @empty, @void, {@arp={0x806, @generic={0x323, 0x80f3, 0x6, 0x0, 0xa, @local, "", @remote}}}}, 0x0) 1.507472424s ago: executing program 2 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x210000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) connect$inet6(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './config/usb_gadget/g1/functions/uac2.usb0\x00'}) pipe2(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) fcntl$dupfd(r4, 0x406, r4) 1.432065826s ago: executing program 2 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) 0s ago: executing program 0 (id=82): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') socket$inet_smc(0x2b, 0x1, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x1403, 0x5, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x48, r3, 0x5, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000c00)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000d00)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x38, 0x1403, 0x5, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x48, r3, 0x5, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) kernel console output (not intermixed with test programs): ][ T5726] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.929250][ T5726] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 67.929270][ T5726] ksys_write+0x1f8/0x250 [ 67.929284][ T5726] ? __pfx_ksys_write+0x10/0x10 [ 67.929306][ T5726] do_syscall_64+0x115/0x840 [ 67.929325][ T5726] ? clear_bhb_loop+0x40/0x90 [ 67.929345][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.929362][ T5726] RIP: 0033:0x7f7e0aca7407 [ 67.929377][ T5726] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 67.929392][ T5726] RSP: 002b:00007ffcc71b7820 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 67.929409][ T5726] RAX: ffffffffffffffda RBX: 00007f7e0b469300 RCX: 00007f7e0aca7407 [ 67.929420][ T5726] RDX: 000000000000005c RSI: 0000561d821ecd40 RDI: 0000000000000004 [ 67.929430][ T5726] RBP: 0000561d821c5050 R08: 0000000000000000 R09: 0000000000000000 [ 67.929440][ T5726] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 67.929450][ T5726] R13: 00007ffcc71b7970 R14: 0000000000000000 R15: 0000000000000004 [ 67.929471][ T5726] [ 67.966862][ T5747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.971287][ T5759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.980096][ T5747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.984287][ T5759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.987190][ T5759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.998043][ T5747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.005567][ T5759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.013698][ T5747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.024220][ T6132] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 68.031888][ T5747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.033800][ T6132] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 68.036004][ T5821] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.039724][ T6132] udc dummy_udc.0: failed to start g1: -22 [ 68.040343][ T5821] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.048809][ T6132] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 68.050440][ T5821] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.052871][ T6132] UDC core: g1: couldn't find an available UDC or it's busy [ 68.054028][ T5821] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.082141][ T5747] Bluetooth: hci4: command tx timeout [ 70.082170][ T5753] Bluetooth: hci5: command tx timeout [ 70.426154][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.511907][ T6167] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 70.515492][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.516327][ T6167] lvs 2-0:1.0: probe with driver lvs failed with error -22 [ 70.521161][ T6129] bridge_slave_0: entered allmulticast mode [ 70.562676][ T6167] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 70.565185][ T6129] bridge_slave_0: entered promiscuous mode [ 70.565488][ T6167] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 70.569549][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.602010][ T6167] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 70.606294][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.610222][ T6167] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 70.610528][ T6129] bridge_slave_1: entered allmulticast mode [ 70.643315][ T6167] lvs 4-0:1.0: Bind LVS driver with SS root Hub only [ 70.646259][ T6129] bridge_slave_1: entered promiscuous mode [ 70.646385][ T6167] lvs 4-0:1.0: probe with driver lvs failed with error -22 [ 70.651808][ T6173] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 70.651851][ T6173] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 70.669279][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.670500][ T6167] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 70.672650][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.675691][ T6167] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 70.701934][ T6173] lvs 2-0:1.0: Bind LVS driver with SS root Hub only [ 70.706739][ T6126] bridge_slave_0: entered allmulticast mode [ 70.708062][ T6173] lvs 2-0:1.0: probe with driver lvs failed with error -22 [ 70.711193][ T6126] bridge_slave_0: entered promiscuous mode [ 70.751811][ T6167] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 70.756148][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.758015][ T6167] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 70.760119][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.765505][ T6167] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 70.766033][ T6126] bridge_slave_1: entered allmulticast mode [ 70.767611][ T6167] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 70.770848][ T6126] bridge_slave_1: entered promiscuous mode [ 70.874283][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.931531][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.933533][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.936220][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.677191][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.694677][ T6178] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.76'. [ 71.704492][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.714700][ T6129] team0: Port device team_slave_0 added [ 71.720647][ T6129] team0: Port device team_slave_1 added [ 71.734127][ T6126] team0: Port device team_slave_0 added [ 71.744555][ T6126] team0: Port device team_slave_1 added [ 71.762170][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.770939][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.779779][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.794853][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.797265][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.804779][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.808283][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.810272][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.817248][ T6182] UDC core: g1: couldn't find an available UDC or it's busy [ 71.817658][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.828812][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.830767][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.838465][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.882601][ T6126] hsr_slave_0: entered promiscuous mode [ 71.885153][ T6126] hsr_slave_1: entered promiscuous mode [ 71.887509][ T6126] debugfs: 'hsr0' already exists in 'hsr' [ 71.889188][ T6126] Cannot create hsr debugfs directory [ 71.894531][ T6184] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 71.901268][ T6184] syz_tun: entered promiscuous mode [ 71.908357][ T6184] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.918388][ T6129] hsr_slave_0: entered promiscuous mode [ 71.921033][ T6129] hsr_slave_1: entered promiscuous mode [ 71.923670][ T6129] debugfs: 'hsr0' already exists in 'hsr' [ 71.925469][ T6129] Cannot create hsr debugfs directory [ 71.942306][ T13] bond0: (slave bond_slave_0): interface is now down [ 71.947214][ T13] bond0: (slave bond_slave_1): interface is now down [ 71.950743][ T13] bond0: (slave syz_tun): interface is now down [ 71.974577][ T13] bond0: (slave bond_slave_0): interface is now down [ 71.986315][ T13] bond0: (slave bond_slave_1): interface is now down [ 71.988850][ T13] bond0: (slave syz_tun): interface is now down [ 72.001877][ T5821] bond0: (slave bond_slave_0): interface is now down [ 72.003810][ T5821] bond0: (slave bond_slave_1): interface is now down [ 72.005681][ T13] FAULT_INJECTION: forcing a failure. [ 72.005681][ T13] name failslab, interval 1, probability 10, space 0, times 99 [ 72.006383][ C0] FAULT_INJECTION: forcing a failure. [ 72.006383][ C0] name failslab, interval 1, probability 10, space 0, times 99 [ 72.006497][ C3] FAULT_INJECTION: forcing a failure. [ 72.006497][ C3] name failslab, interval 1, probability 10, space 0, times 99 [ 72.006517][ C3] CPU: 3 UID: 0 PID: 6185 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 72.006530][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.006537][ C3] Call Trace: [ 72.006542][ C3] [ 72.006546][ C3] dump_stack_lvl+0x100/0x190 [ 72.006563][ C3] should_fail_ex.cold+0x5/0xa [ 72.006577][ C3] should_failslab+0xc2/0x120 [ 72.006593][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.006608][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.006623][ C3] ? __alloc_skb+0x140/0x710 [ 72.006639][ C3] __alloc_skb+0x140/0x710 [ 72.006652][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.006665][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.006680][ C3] ? lock_acquire+0x1b9/0x370 [ 72.006700][ C3] __netdev_alloc_skb+0x7a/0x960 [ 72.006716][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 72.006733][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.006752][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 72.006768][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 72.006787][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 72.006808][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.006822][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.006845][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.006861][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.006878][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.006891][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.006903][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.006922][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.006937][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.006951][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.006964][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.006975][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.006991][ C3] __irq_exit_rcu+0x162/0x210 [ 72.007004][ C3] irq_exit_rcu+0x9/0x30 [ 72.007015][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.007029][ C3] [ 72.007032][ C3] [ 72.007037][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.007050][ C3] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 72.007064][ C3] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 60 eb e5 09 e8 4b 8f 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 72.007075][ C3] RSP: 0018:ffffc9000edef890 EFLAGS: 00000202 [ 72.007084][ C3] RAX: 0000000000000879 RBX: ffff8880293b4a80 RCX: 0000000000000000 [ 72.007104][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffff8880293b6178 [ 72.007112][ C3] RBP: ffffc9000edef8e8 R08: 0000000000000001 R09: 0000000000000000 [ 72.007119][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888024efa540 [ 72.007126][ C3] R13: 0000000000000000 R14: ffffffff9122d084 R15: ffff88802b53b600 [ 72.007143][ C3] __schedule+0x1264/0x6730 [ 72.007162][ C3] ? __pfx___schedule+0x10/0x10 [ 72.007173][ C3] ? __resched_curr+0x42e/0x500 [ 72.007185][ C3] ? __pfx___resched_curr+0x10/0x10 [ 72.007197][ C3] ? preempt_schedule_thunk+0x16/0x40 [ 72.007209][ T5821] bond0: (slave syz_tun): interface is now down [ 72.007215][ C3] preempt_schedule_common+0x42/0xc0 [ 72.007228][ C3] preempt_schedule_thunk+0x16/0x40 [ 72.007248][ C3] try_to_wake_up+0x70a/0x1c90 [ 72.007275][ C3] ? __pfx_try_to_wake_up+0x10/0x10 [ 72.007286][ C3] ? futex_hash+0x311/0x400 [ 72.007297][ C3] ? futex_hash+0x311/0x400 [ 72.007310][ C3] ? plist_del+0x308/0x510 [ 72.007320][ C3] ? find_held_lock+0x2b/0x80 [ 72.007333][ C3] ? futex_wake+0x4ea/0x5e0 [ 72.007349][ C3] wake_up_q+0xa1/0x130 [ 72.007361][ C3] futex_wake+0x4f4/0x5e0 [ 72.007377][ C3] ? __pfx_futex_wake+0x10/0x10 [ 72.007393][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.007409][ C3] ? __css_rstat_updated+0x1ce/0x5a0 [ 72.007426][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 72.007437][ C3] ? __pfx___css_rstat_updated+0x10/0x10 [ 72.007456][ C3] do_futex+0x2b2/0x440 [ 72.007469][ C3] ? __pfx_do_futex+0x10/0x10 [ 72.007481][ C3] ? find_held_lock+0x2b/0x80 [ 72.007494][ C3] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 72.007509][ C3] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 72.007525][ C3] __ia32_sys_futex_time32+0x2f4/0x470 [ 72.007541][ C3] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 72.007560][ C3] __do_fast_syscall_32+0xe7/0x970 [ 72.007576][ C3] do_fast_syscall_32+0x32/0x70 [ 72.007591][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.007605][ C3] RIP: 0023:0xf6fdefec [ 72.007617][ C3] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 72.007622][ C3] RSP: 002b:00000000fffe58bc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 72.007633][ C3] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000081 [ 72.007640][ C3] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.007646][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.007652][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 72.007659][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.007672][ C3] [ 72.007727][ C3] FAULT_INJECTION: forcing a failure. [ 72.007727][ C3] name failslab, interval 1, probability 10, space 0, times 97 [ 72.007742][ C3] CPU: 3 UID: 0 PID: 6185 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 72.007753][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.007760][ C3] Call Trace: [ 72.007764][ C3] [ 72.007768][ C3] dump_stack_lvl+0x100/0x190 [ 72.007781][ C3] should_fail_ex.cold+0x5/0xa [ 72.007793][ C3] should_failslab+0xc2/0x120 [ 72.007808][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.007822][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.007841][ C3] ? __alloc_skb+0x140/0x710 [ 72.007857][ C3] __alloc_skb+0x140/0x710 [ 72.007870][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.007883][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.007898][ C3] ? lock_acquire+0x1b9/0x370 [ 72.007917][ C3] __netdev_alloc_skb+0x7a/0x960 [ 72.007933][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 72.007949][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.007967][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 72.007983][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 72.007995][ T6129] FAULT_INJECTION: forcing a failure. [ 72.007995][ T6129] name failslab, interval 1, probability 10, space 0, times 96 [ 72.008002][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 72.008021][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.008035][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.008052][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.008068][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.008084][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.008097][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.008109][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.008127][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.008141][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.008155][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.008168][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.008178][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.008194][ C3] __irq_exit_rcu+0x162/0x210 [ 72.008206][ C3] irq_exit_rcu+0x9/0x30 [ 72.008221][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.008239][ C3] [ 72.008244][ C3] [ 72.008250][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.008268][ C3] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 72.008287][ C3] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 60 eb e5 09 e8 4b 8f 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 72.008303][ C3] RSP: 0018:ffffc9000edef890 EFLAGS: 00000202 [ 72.008316][ C3] RAX: 0000000000000879 RBX: ffff8880293b4a80 RCX: 0000000000000000 [ 72.008327][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffff8880293b6178 [ 72.008338][ C3] RBP: ffffc9000edef8e8 R08: 0000000000000001 R09: 0000000000000000 [ 72.008349][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888024efa540 [ 72.008359][ C3] R13: 0000000000000000 R14: ffffffff9122d084 R15: ffff88802b53b600 [ 72.008387][ C3] __schedule+0x1264/0x6730 [ 72.008418][ C3] ? __pfx___schedule+0x10/0x10 [ 72.008434][ C3] ? __resched_curr+0x42e/0x500 [ 72.008451][ C3] ? __pfx___resched_curr+0x10/0x10 [ 72.008470][ C3] ? preempt_schedule_thunk+0x16/0x40 [ 72.008496][ C3] preempt_schedule_common+0x42/0xc0 [ 72.008515][ C3] preempt_schedule_thunk+0x16/0x40 [ 72.008544][ C3] try_to_wake_up+0x70a/0x1c90 [ 72.008564][ C3] ? __pfx_try_to_wake_up+0x10/0x10 [ 72.008580][ C3] ? futex_hash+0x311/0x400 [ 72.008596][ C3] ? futex_hash+0x311/0x400 [ 72.008617][ C3] ? plist_del+0x308/0x510 [ 72.008633][ C3] ? find_held_lock+0x2b/0x80 [ 72.008652][ C3] ? futex_wake+0x4ea/0x5e0 [ 72.008675][ C3] wake_up_q+0xa1/0x130 [ 72.008694][ C3] futex_wake+0x4f4/0x5e0 [ 72.008718][ C3] ? __pfx_futex_wake+0x10/0x10 [ 72.008741][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.008764][ C3] ? __css_rstat_updated+0x1ce/0x5a0 [ 72.008789][ C3] ? __pfx___handle_mm_fault+0x10/0x10 [ 72.008806][ C3] ? __pfx___css_rstat_updated+0x10/0x10 [ 72.008838][ C3] do_futex+0x2b2/0x440 [ 72.008857][ C3] ? __pfx_do_futex+0x10/0x10 [ 72.008875][ C3] ? find_held_lock+0x2b/0x80 [ 72.008894][ C3] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 72.008917][ C3] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 72.008941][ C3] __ia32_sys_futex_time32+0x2f4/0x470 [ 72.008965][ C3] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 72.008994][ C3] __do_fast_syscall_32+0xe7/0x970 [ 72.009018][ C3] do_fast_syscall_32+0x32/0x70 [ 72.009040][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.009061][ C3] RIP: 0023:0xf6fdefec [ 72.009077][ C3] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 72.009084][ C3] RSP: 002b:00000000fffe58bc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 72.009099][ C3] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000081 [ 72.009110][ C3] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.009120][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.009130][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 72.009140][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.009162][ C3] [ 72.009171][ T6129] CPU: 2 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.009185][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.009191][ T6129] Call Trace: [ 72.009195][ T6129] [ 72.009199][ T6129] dump_stack_lvl+0x100/0x190 [ 72.009214][ T6129] should_fail_ex.cold+0x5/0xa [ 72.009226][ T6129] should_failslab+0xc2/0x120 [ 72.009244][ T6129] __kmalloc_cache_noprof+0x91/0x6c0 [ 72.009256][ T6129] ? netdevice_event+0x308/0x9a0 [ 72.009269][ T6129] netdevice_event+0x308/0x9a0 [ 72.009281][ T6129] ? __pfx_netdevice_event+0x10/0x10 [ 72.009291][ T6129] ? __pfx_del_default_gids+0x10/0x10 [ 72.009301][ T6129] ? __pfx_is_upper_ndev_bond_master_filter+0x10/0x10 [ 72.009314][ T6129] ? __pfx_add_default_gids+0x10/0x10 [ 72.009324][ T6129] ? __pfx_is_upper_ndev_bond_master_filter+0x10/0x10 [ 72.009336][ T6129] ? __pfx_add_netdev_upper_ips+0x10/0x10 [ 72.009347][ T6129] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 72.009359][ T6129] ? wext_netdev_notifier_call+0xe/0x20 [ 72.009372][ T6129] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 72.009388][ T6129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.009406][ T6129] notifier_call_chain+0x99/0x3f0 [ 72.009423][ T6129] call_netdevice_notifiers_info+0xbe/0x110 [ 72.009442][ T6129] __netdev_upper_dev_link+0x43c/0x7e0 [ 72.009454][ T6129] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 72.009468][ T6129] ? call_netdevice_notifiers_info+0xc5/0x110 [ 72.009486][ T6129] ? register_netdevice+0x190/0x25a0 [ 72.009504][ T6129] netdev_upper_dev_link+0x91/0xc0 [ 72.009532][ T6129] ? __pfx_netdev_upper_dev_link+0x10/0x10 [ 72.009549][ T6129] macvlan_common_newlink+0xfbb/0x18b0 [ 72.009568][ T6129] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 72.009586][ T6129] ? rtnl_create_link+0xa4b/0xf80 [ 72.009602][ T6129] ? __pfx_macvlan_newlink+0x10/0x10 [ 72.009618][ T6129] rtnl_newlink+0x1499/0x2380 [ 72.009638][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.009653][ T6129] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.009668][ T6129] ? __kernel_text_address+0xd/0x30 [ 72.009684][ T6129] ? unwind_get_return_address+0x59/0xa0 [ 72.009709][ T6129] ? __pfx_stack_trace_save+0x10/0x10 [ 72.009743][ T6129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.009761][ T6129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.009777][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.009793][ T6129] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.009810][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.009829][ T6129] ? __lock_acquire+0x49f/0x1a40 [ 72.009848][ T6129] netlink_rcv_skb+0x159/0x420 [ 72.009860][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.009877][ T6129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.009894][ T6129] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.009908][ T6129] netlink_unicast+0x585/0x850 [ 72.009922][ T6129] ? __pfx_netlink_unicast+0x10/0x10 [ 72.009938][ T6129] netlink_sendmsg+0x8b0/0xda0 [ 72.009969][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.009985][ T6129] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.010000][ T6129] __sys_sendto+0x48b/0x4e0 [ 72.010013][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.010025][ T6129] ? __pfx___sys_sendto+0x10/0x10 [ 72.010052][ T6129] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.010072][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.010092][ T6129] ? __pfx_fput_close_sync+0x10/0x10 [ 72.010112][ T6129] do_int80_emulation+0x14b/0x720 [ 72.010128][ T6129] asm_int80_emulation+0x1a/0x20 [ 72.010139][ T6129] RIP: 0023:0xf71172eb [ 72.010148][ T6129] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.010159][ T6129] RSP: 002b:00000000ffcef36c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.010170][ T6129] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ffcef414 [ 72.010177][ T6129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.010183][ T6129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.010189][ T6129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.010196][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.010209][ T6129] [ 72.010550][ T6129] FAULT_INJECTION: forcing a failure. [ 72.010550][ T6129] name failslab, interval 1, probability 10, space 0, times 93 [ 72.010572][ T6129] CPU: 3 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.010590][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.010600][ T6129] Call Trace: [ 72.010606][ T6129] [ 72.010612][ T6129] dump_stack_lvl+0x100/0x190 [ 72.010632][ T6129] should_fail_ex.cold+0x5/0xa [ 72.010650][ T6129] should_failslab+0xc2/0x120 [ 72.010671][ T6129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.010690][ T6129] ? __pfx_map_id_range_down+0x10/0x10 [ 72.010712][ T6129] ? security_inode_alloc+0x3b/0x2c0 [ 72.010735][ T6129] security_inode_alloc+0x3b/0x2c0 [ 72.010754][ T6129] inode_init_always_gfp+0xc77/0xfb0 [ 72.010774][ T6129] alloc_inode+0x8e/0x250 [ 72.010795][ T6129] sock_alloc+0x44/0x280 [ 72.010816][ T6129] ? security_socket_create+0x7f/0x250 [ 72.010841][ T6129] __sock_create+0xc2/0x860 [ 72.010862][ T6129] __sys_socket+0x14d/0x260 [ 72.010880][ T6129] ? __pfx___sys_socket+0x10/0x10 [ 72.010902][ T6129] __ia32_compat_sys_socketcall+0x65b/0x770 [ 72.010929][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.010954][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.010994][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.011014][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.011034][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.011055][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.011075][ T6129] RIP: 0023:0xf7f15fec [ 72.011092][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.011099][ T6129] RSP: 002b:00000000ffcef3e0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 72.011114][ T6129] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffcef3f0 [ 72.011125][ T6129] RDX: 00000000f73a6ff4 RSI: 00000000f71e2361 RDI: 00000000ffcef44c [ 72.011135][ T6129] RBP: 00000000f71e2361 R08: 0000000000000000 R09: 0000000000000000 [ 72.011145][ T6129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.011155][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.011176][ T6129] [ 72.011193][ T6129] net_ratelimit: 4 callbacks suppressed [ 72.011202][ T6129] socket: no more sockets [ 72.011220][ T6129] FAULT_INJECTION: forcing a failure. [ 72.011220][ T6129] name failslab, interval 1, probability 10, space 0, times 92 [ 72.011233][ T6129] CPU: 3 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.011245][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.011251][ T6129] Call Trace: [ 72.011255][ T6129] [ 72.011259][ T6129] dump_stack_lvl+0x100/0x190 [ 72.011271][ T6129] should_fail_ex.cold+0x5/0xa [ 72.011283][ T6129] should_failslab+0xc2/0x120 [ 72.011298][ T6129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.011311][ T6129] ? __pfx_map_id_range_down+0x10/0x10 [ 72.011326][ T6129] ? security_inode_alloc+0x3b/0x2c0 [ 72.011341][ T6129] security_inode_alloc+0x3b/0x2c0 [ 72.011353][ T6129] inode_init_always_gfp+0xc77/0xfb0 [ 72.011366][ T6129] alloc_inode+0x8e/0x250 [ 72.011396][ T6129] sock_alloc+0x44/0x280 [ 72.011410][ T6129] ? security_socket_create+0x7f/0x250 [ 72.011423][ T6129] __sock_create+0xc2/0x860 [ 72.011436][ T6129] __sys_socket+0x14d/0x260 [ 72.011448][ T6129] ? __pfx___sys_socket+0x10/0x10 [ 72.011463][ T6129] __ia32_compat_sys_socketcall+0x65b/0x770 [ 72.011482][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.011499][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.011525][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.011539][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.011552][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.011566][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.011579][ T6129] RIP: 0023:0xf7f15fec [ 72.011589][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.011594][ T6129] RSP: 002b:00000000ffcef3e0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 72.011604][ T6129] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffcef3f0 [ 72.011611][ T6129] RDX: 00000000f73a6ff4 RSI: 00000000f71e2361 RDI: 00000000ffcef44c [ 72.011617][ T6129] RBP: 00000000f71e2361 R08: 0000000000000000 R09: 0000000000000000 [ 72.011624][ T6129] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 72.011630][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.011643][ T6129] [ 72.012152][ T6126] FAULT_INJECTION: forcing a failure. [ 72.012152][ T6126] name failslab, interval 1, probability 10, space 0, times 92 [ 72.012195][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.012215][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.012224][ T13] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 72.012247][ T13] Call Trace: [ 72.012252][ T13] [ 72.012258][ T13] dump_stack_lvl+0x100/0x190 [ 72.012276][ T13] should_fail_ex.cold+0x5/0xa [ 72.012289][ T13] ? rcu_is_watching+0x12/0xc0 [ 72.012309][ T13] should_failslab+0xc2/0x120 [ 72.012329][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 72.012344][ T13] ? __netdev_alloc_skb+0x631/0x960 [ 72.012364][ T13] ? batadv_forw_packet_alloc+0x3a9/0x4d0 [ 72.012389][ T13] batadv_forw_packet_alloc+0x3a9/0x4d0 [ 72.012412][ T13] batadv_iv_ogm_aggregate_new+0x126/0x4b0 [ 72.012433][ T13] batadv_iv_ogm_schedule_buff+0x95d/0x15e0 [ 72.012458][ T13] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 72.012485][ T13] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 72.012512][ T13] process_one_work+0xa23/0x1940 [ 72.012543][ T13] ? __pfx_process_one_work+0x10/0x10 [ 72.012570][ T13] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 72.012592][ T13] worker_thread+0x5ef/0xe50 [ 72.012620][ T6129] socket: no more sockets [ 72.012621][ T13] ? kthread+0x13a/0x450 [ 72.012642][ T6129] FAULT_INJECTION: forcing a failure. [ 72.012642][ T6129] name failslab, interval 1, probability 10, space 0, times 91 [ 72.012644][ T13] ? __pfx_worker_thread+0x10/0x10 [ 72.012663][ T13] kthread+0x370/0x450 [ 72.012682][ T13] ? __pfx_kthread+0x10/0x10 [ 72.012702][ T13] ret_from_fork+0x72b/0xd50 [ 72.012721][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 72.012740][ T13] ? __switch_to+0x800/0x10f0 [ 72.012763][ T13] ? __pfx_kthread+0x10/0x10 [ 72.012783][ T13] ret_from_fork_asm+0x1a/0x30 [ 72.012814][ T13] [ 72.012821][ T6129] CPU: 3 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.012837][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.012843][ T6129] Call Trace: [ 72.012847][ T6129] [ 72.012850][ T6129] dump_stack_lvl+0x100/0x190 [ 72.012863][ T6129] should_fail_ex.cold+0x5/0xa [ 72.012877][ T6129] should_failslab+0xc2/0x120 [ 72.012897][ T6129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.012916][ T6129] ? sk_prot_alloc+0x60/0x2a0 [ 72.012935][ T6129] sk_prot_alloc+0x60/0x2a0 [ 72.012952][ T6129] sk_alloc+0x36/0xe80 [ 72.012973][ T6129] inet6_create+0x385/0x12b0 [ 72.012992][ T6129] ? inet6_create+0x7f/0x12b0 [ 72.013012][ T6129] __sock_create+0x339/0x860 [ 72.013032][ T6129] __sys_socket+0x14d/0x260 [ 72.013064][ T6129] ? __pfx___sys_socket+0x10/0x10 [ 72.013090][ T6129] __ia32_compat_sys_socketcall+0x65b/0x770 [ 72.013116][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.013141][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.013181][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.013201][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.013221][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.013242][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.013261][ T6129] RIP: 0023:0xf7f15fec [ 72.013276][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.013283][ T6129] RSP: 002b:00000000ffcef3e0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 72.013297][ T6129] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffcef3f0 [ 72.013307][ T6129] RDX: 00000000f73a6ff4 RSI: 00000000f71e2361 RDI: 00000000ffcef44c [ 72.013317][ T6129] RBP: 00000000f71e2361 R08: 0000000000000000 R09: 0000000000000000 [ 72.013327][ T6129] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 72.013337][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.013358][ T6129] [ 72.014176][ T6186] FAULT_INJECTION: forcing a failure. [ 72.014176][ T6186] name failslab, interval 1, probability 10, space 0, times 89 [ 72.014199][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 72.014217][ T6186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.014227][ T6186] Call Trace: [ 72.014233][ T6186] [ 72.014240][ T6186] dump_stack_lvl+0x100/0x190 [ 72.014260][ T6186] should_fail_ex.cold+0x5/0xa [ 72.014279][ T6186] should_failslab+0xc2/0x120 [ 72.014300][ T6186] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 72.014322][ T6186] ? sock_alloc_inode+0x26/0x2c0 [ 72.014348][ T6186] ? __pfx_sock_alloc_inode+0x10/0x10 [ 72.014372][ T6186] sock_alloc_inode+0x26/0x2c0 [ 72.014397][ T6186] ? __pfx_sock_alloc_inode+0x10/0x10 [ 72.014420][ T6186] alloc_inode+0x68/0x250 [ 72.014440][ T6186] sock_alloc+0x44/0x280 [ 72.014462][ T6186] ? security_socket_create+0x7f/0x250 [ 72.014481][ T6186] __sock_create+0xc2/0x860 [ 72.014502][ T6186] __sys_socketpair+0x1e4/0x5b0 [ 72.014521][ T6186] ? __pfx___sys_socketpair+0x10/0x10 [ 72.014546][ T6186] __ia32_sys_socketpair+0x95/0x100 [ 72.014563][ T6186] ? lockdep_hardirqs_on+0x78/0x100 [ 72.014582][ T6186] __do_fast_syscall_32+0xe7/0x970 [ 72.014604][ T6186] do_fast_syscall_32+0x32/0x70 [ 72.014624][ T6186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.014650][ T6186] RIP: 0023:0xf6fdefec [ 72.014665][ T6186] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 72.014673][ T6186] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 72.014689][ T6186] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000005 [ 72.014700][ T6186] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 72.014711][ T6186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.014722][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.014733][ T6186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.014754][ T6186] [ 72.014762][ T6186] socket: no more sockets [ 72.015764][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 72.015786][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.015796][ C0] Call Trace: [ 72.015803][ C0] [ 72.015810][ C0] dump_stack_lvl+0x100/0x190 [ 72.015832][ C0] should_fail_ex.cold+0x5/0xa [ 72.015848][ C0] should_failslab+0xc2/0x120 [ 72.015871][ C0] __kmalloc_noprof+0xfc/0x820 [ 72.015891][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.015911][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.015937][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.015960][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.015992][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 72.016030][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 72.016053][ C0] ? common_startup_64+0x13e/0x158 [ 72.016082][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 72.016106][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 72.016131][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.016161][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 72.016185][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.016212][ C0] ? lock_acquire+0x1b9/0x370 [ 72.016239][ C0] ? find_held_lock+0x2b/0x80 [ 72.016259][ C0] ? unwind_next_frame+0x3be/0x2090 [ 72.016283][ C0] ? unwind_next_frame+0x3be/0x2090 [ 72.016315][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.016344][ C0] ? common_startup_64+0x13e/0x158 [ 72.016375][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.016399][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 72.016429][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 72.016456][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.016480][ C0] ? do_idle+0x3a7/0x5b0 [ 72.016496][ C0] ? cpu_startup_entry+0x4f/0x60 [ 72.016515][ C0] ? start_kernel+0x48e/0x490 [ 72.016535][ C0] ? x86_64_start_reservations+0x24/0x30 [ 72.016557][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.016575][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 72.016601][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.016629][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 72.016652][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 72.016670][ C0] ? do_raw_spin_lock+0x128/0x260 [ 72.016691][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 72.016712][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 72.016746][ C0] ieee80211_rx_list+0xf19/0x2160 [ 72.016765][ C0] ? lock_acquire+0x1b9/0x370 [ 72.016790][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 72.016814][ C0] ieee80211_rx_napi+0xdc/0x400 [ 72.016832][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 72.016847][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 72.016864][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.016887][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 72.016914][ C0] tasklet_action_common+0x2de/0x3d0 [ 72.016940][ C0] handle_softirqs+0x1ea/0x9b0 [ 72.016958][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 72.016977][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.016993][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.017019][ C0] __irq_exit_rcu+0x162/0x210 [ 72.017035][ C0] irq_exit_rcu+0x9/0x30 [ 72.017052][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.017072][ C0] [ 72.017078][ C0] [ 72.017085][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.017104][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.017124][ C0] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.017138][ C0] RSP: 0000:ffffffff8e807e10 EFLAGS: 00000202 [ 72.017151][ C0] RAX: 00000000000cf723 RBX: ffffffff8e891480 RCX: ffffffff8bb872d5 [ 72.017164][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.017175][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 72.017186][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.017198][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 72.017215][ C0] ? ct_kernel_exit+0x125/0x180 [ 72.017241][ C0] default_idle+0x9/0x10 [ 72.017257][ C0] default_idle_call+0x6c/0xb0 [ 72.017279][ C0] do_idle+0x3a7/0x5b0 [ 72.017299][ C0] ? __pfx_do_idle+0x10/0x10 [ 72.017317][ C0] ? rest_init+0x23d/0x260 [ 72.017346][ C0] cpu_startup_entry+0x4f/0x60 [ 72.017362][ C0] rest_init+0x251/0x260 [ 72.017385][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 72.017409][ C0] start_kernel+0x48e/0x490 [ 72.017432][ C0] x86_64_start_reservations+0x24/0x30 [ 72.017450][ C0] x86_64_start_kernel+0x12b/0x130 [ 72.017473][ C0] common_startup_64+0x13e/0x158 [ 72.017509][ C0] [ 72.019614][ T6186] FAULT_INJECTION: forcing a failure. [ 72.019614][ T6186] name failslab, interval 1, probability 10, space 0, times 87 [ 72.020341][ T6126] CPU: 3 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.020360][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.020370][ T6126] Call Trace: [ 72.020376][ T6126] [ 72.020383][ T6126] dump_stack_lvl+0x100/0x190 [ 72.020403][ T6126] should_fail_ex.cold+0x5/0xa [ 72.020422][ T6126] should_failslab+0xc2/0x120 [ 72.020444][ T6126] __kvmalloc_node_noprof+0x116/0x970 [ 72.020464][ T6126] ? lockdep_init_map_type+0x5c/0x250 [ 72.020479][ T6126] ? lockdep_init_map_type+0x5c/0x250 [ 72.020494][ T6126] ? alloc_netdev_mqs+0xb4e/0x15c0 [ 72.020519][ T6126] ? __pfx_macvlan_setup+0x10/0x10 [ 72.020542][ T6126] alloc_netdev_mqs+0xb4e/0x15c0 [ 72.020569][ T6126] rtnl_create_link+0xc13/0xf80 [ 72.020595][ T6126] rtnl_newlink+0x13bd/0x2380 [ 72.020625][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.020646][ T6126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.020669][ T6126] ? __kernel_text_address+0xd/0x30 [ 72.020691][ T6126] ? unwind_get_return_address+0x59/0xa0 [ 72.020730][ T6126] ? __pfx_stack_trace_save+0x10/0x10 [ 72.020760][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.020782][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.020805][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.020833][ T6126] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.020859][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.020885][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.020913][ T6126] netlink_rcv_skb+0x159/0x420 [ 72.020931][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.020955][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.020981][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.021001][ T6126] netlink_unicast+0x585/0x850 [ 72.021023][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.021046][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.021068][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.021088][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.021111][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.021131][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.021149][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.021191][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.021220][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.021248][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.021279][ T6126] do_int80_emulation+0x14b/0x720 [ 72.021303][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.021320][ T6126] RIP: 0023:0xf71a72eb [ 72.021333][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.021347][ T6126] RSP: 002b:00000000ff8a629c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.021362][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6344 [ 72.021372][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.021401][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.021410][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.021420][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.021441][ T6126] [ 72.022337][ T6126] FAULT_INJECTION: forcing a failure. [ 72.022337][ T6126] name failslab, interval 1, probability 10, space 0, times 86 [ 72.022416][ T6129] FAULT_INJECTION: forcing a failure. [ 72.022416][ T6129] name failslab, interval 1, probability 10, space 0, times 86 [ 72.022442][ T6129] CPU: 2 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.022461][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.022470][ T6129] Call Trace: [ 72.022476][ T6129] [ 72.022482][ T6129] dump_stack_lvl+0x100/0x190 [ 72.022504][ T6129] should_fail_ex.cold+0x5/0xa [ 72.022521][ T6129] should_failslab+0xc2/0x120 [ 72.022545][ T6129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.022564][ T6129] ? __pfx_map_id_range_down+0x10/0x10 [ 72.022589][ T6129] ? security_inode_alloc+0x3b/0x2c0 [ 72.022613][ T6129] security_inode_alloc+0x3b/0x2c0 [ 72.022630][ T6129] inode_init_always_gfp+0xc77/0xfb0 [ 72.022650][ T6129] alloc_inode+0x8e/0x250 [ 72.022678][ T6129] sock_alloc+0x44/0x280 [ 72.022702][ T6129] ? security_socket_create+0x7f/0x250 [ 72.022722][ T6129] __sock_create+0xc2/0x860 [ 72.022742][ T6129] __sys_socket+0x14d/0x260 [ 72.022762][ T6129] ? __pfx___sys_socket+0x10/0x10 [ 72.022786][ T6129] __ia32_compat_sys_socketcall+0x65b/0x770 [ 72.022816][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.022854][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.022899][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.022918][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.022938][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.022958][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.022977][ T6129] RIP: 0023:0xf7f15fec [ 72.022995][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.023002][ T6129] RSP: 002b:00000000ffcef3e0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 72.023017][ T6129] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffcef3f0 [ 72.023029][ T6129] RDX: 00000000f73a6ff4 RSI: 00000000f71e2361 RDI: 00000000ffcef44c [ 72.023039][ T6129] RBP: 00000000f71e2361 R08: 0000000000000000 R09: 0000000000000000 [ 72.023049][ T6129] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 72.023059][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.023080][ T6129] [ 72.023098][ T6129] socket: no more sockets [ 72.024192][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 72.024215][ T6186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.024225][ T6186] Call Trace: [ 72.024230][ T6186] [ 72.024238][ T6186] dump_stack_lvl+0x100/0x190 [ 72.024258][ T6186] should_fail_ex.cold+0x5/0xa [ 72.024276][ T6186] should_failslab+0xc2/0x120 [ 72.024299][ T6186] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.024320][ T6186] ? __pfx___might_resched+0x10/0x10 [ 72.024343][ T6186] ? configfs_new_dirent+0x312/0x570 [ 72.024360][ T6186] ? configfs_new_dirent+0x52/0x570 [ 72.024380][ T6186] configfs_new_dirent+0x52/0x570 [ 72.024396][ T6186] ? __pfx_down_write_nested+0x10/0x10 [ 72.024415][ T6186] configfs_make_dirent+0x36/0x1a0 [ 72.024436][ T6186] configfs_create_file+0xfe/0x180 [ 72.024454][ T6186] configfs_attach_item.part.0+0x147/0x4f0 [ 72.024477][ T6186] configfs_attach_group+0x63/0x440 [ 72.024500][ T6186] configfs_mkdir+0x65c/0xb70 [ 72.024523][ T6186] ? __pfx_configfs_mkdir+0x10/0x10 [ 72.024553][ T6186] vfs_mkdir+0x361/0x850 [ 72.024577][ T6186] filename_mkdirat+0x48b/0x5e0 [ 72.024597][ T6186] ? __pfx_filename_mkdirat+0x10/0x10 [ 72.024614][ T6186] ? strncpy_from_user+0x19d/0x2d0 [ 72.024645][ T6186] ? do_getname+0x191/0x390 [ 72.024667][ T6186] __ia32_sys_mkdirat+0x88/0xc0 [ 72.024685][ T6186] __do_fast_syscall_32+0xe7/0x970 [ 72.024708][ T6186] do_fast_syscall_32+0x32/0x70 [ 72.024730][ T6186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.024751][ T6186] RIP: 0023:0xf6fdefec [ 72.024768][ T6186] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 72.024776][ T6186] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 72.024791][ T6186] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 72.024802][ T6186] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 72.024812][ T6186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.024822][ T6186] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.024832][ T6186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.024852][ T6186] [ 72.031968][ T5821] bond0: (slave bond_slave_0): interface is now down [ 72.032861][ T6126] CPU: 2 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.032877][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.032884][ T6126] Call Trace: [ 72.032888][ T6126] [ 72.032893][ T6126] dump_stack_lvl+0x100/0x190 [ 72.032908][ T6126] should_fail_ex.cold+0x5/0xa [ 72.032921][ T6126] should_failslab+0xc2/0x120 [ 72.032936][ T6126] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 72.032950][ T6126] ? start_dirop+0x79/0xb0 [ 72.032967][ T6126] ? alloc_inode+0x68/0x250 [ 72.032982][ T6126] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 72.032998][ T6126] alloc_inode+0x68/0x250 [ 72.033012][ T6126] new_inode+0x22/0x1c0 [ 72.033027][ T6126] __debugfs_create_file+0x105/0x4f0 [ 72.033045][ T6126] debugfs_create_file_full+0x41/0x60 [ 72.033062][ T6126] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 72.033074][ T6126] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 72.033103][ T6126] ? lockdep_init_map_type+0x5c/0x250 [ 72.033115][ T6126] ? __pfx_macvlan_setup+0x10/0x10 [ 72.033132][ T6126] alloc_netdev_mqs+0x314/0x15c0 [ 72.033151][ T6126] rtnl_create_link+0xc13/0xf80 [ 72.033169][ T6126] rtnl_newlink+0x13bd/0x2380 [ 72.033189][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.033204][ T6126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.033219][ T6126] ? __kernel_text_address+0xd/0x30 [ 72.033236][ T6126] ? unwind_get_return_address+0x59/0xa0 [ 72.033266][ T6126] ? __pfx_stack_trace_save+0x10/0x10 [ 72.033286][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.033301][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.033318][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.033334][ T6126] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.033351][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.033370][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.033389][ T6126] netlink_rcv_skb+0x159/0x420 [ 72.033402][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.033419][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.033436][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.033450][ T6126] netlink_unicast+0x585/0x850 [ 72.033463][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.033479][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.033493][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.033507][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.033522][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.033535][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.033547][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.033574][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.033593][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.033613][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.033637][ T6126] do_int80_emulation+0x14b/0x720 [ 72.033653][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.033665][ T6126] RIP: 0023:0xf71a72eb [ 72.033675][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.033686][ T6126] RSP: 002b:00000000ff8a629c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.033696][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6344 [ 72.033704][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.033712][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.033720][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.033731][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.033759][ T6126] [ 72.033766][ T6126] debugfs: out of free dentries, can not create file 'netdev@ffff88805f634700' [ 72.033839][ T5821] bond0: (slave bond_slave_1): interface is now down [ 72.035832][ T6126] FAULT_INJECTION: forcing a failure. [ 72.035832][ T6126] name failslab, interval 1, probability 10, space 0, times 82 [ 72.037306][ T5821] bond0: (slave syz_tun): interface is now down [ 72.038628][ T6126] CPU: 2 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.038642][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.038649][ T6126] Call Trace: [ 72.038653][ T6126] [ 72.038658][ T6126] dump_stack_lvl+0x100/0x190 [ 72.038673][ T6126] should_fail_ex.cold+0x5/0xa [ 72.038686][ T6126] should_failslab+0xc2/0x120 [ 72.038701][ T6126] __kvmalloc_node_noprof+0x116/0x970 [ 72.038715][ T6126] ? lockdep_init_map_type+0x5c/0x250 [ 72.038726][ T6126] ? alloc_netdev_mqs+0xd40/0x15c0 [ 72.038748][ T6126] alloc_netdev_mqs+0xd40/0x15c0 [ 72.038766][ T6126] rtnl_create_link+0xc13/0xf80 [ 72.038784][ T6126] rtnl_newlink+0x13bd/0x2380 [ 72.038804][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.038818][ T6126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.038834][ T6126] ? __kernel_text_address+0xd/0x30 [ 72.038851][ T6126] ? unwind_get_return_address+0x59/0xa0 [ 72.038876][ T6126] ? __pfx_stack_trace_save+0x10/0x10 [ 72.038896][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.038912][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.038928][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.038944][ T6126] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.038961][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.038980][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.038999][ T6126] netlink_rcv_skb+0x159/0x420 [ 72.039012][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.039029][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.039045][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.039059][ T6126] netlink_unicast+0x585/0x850 [ 72.039073][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.039088][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.039102][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.039116][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.039131][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.039144][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.039157][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.039183][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.039202][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.039222][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.039242][ T6126] do_int80_emulation+0x14b/0x720 [ 72.039258][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.039270][ T6126] RIP: 0023:0xf71a72eb [ 72.039279][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.039290][ T6126] RSP: 002b:00000000ff8a629c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.039301][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6344 [ 72.039308][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.039314][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.039321][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.039327][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.039340][ T6126] [ 72.039767][ T6126] FAULT_INJECTION: forcing a failure. [ 72.039767][ T6126] name failslab, interval 1, probability 10, space 0, times 81 [ 72.045237][ T5744] FAULT_INJECTION: forcing a failure. [ 72.045237][ T5744] name failslab, interval 1, probability 10, space 0, times 80 [ 72.049235][ T6126] CPU: 2 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.049253][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.049261][ T6126] Call Trace: [ 72.049265][ T6126] [ 72.049270][ T6126] dump_stack_lvl+0x100/0x190 [ 72.049285][ T6126] should_fail_ex.cold+0x5/0xa [ 72.049298][ T6126] should_failslab+0xc2/0x120 [ 72.049314][ T6126] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 72.049328][ T6126] ? start_dirop+0x79/0xb0 [ 72.049345][ T6126] ? alloc_inode+0x68/0x250 [ 72.049359][ T6126] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 72.049376][ T6126] alloc_inode+0x68/0x250 [ 72.049390][ T6126] new_inode+0x22/0x1c0 [ 72.049405][ T6126] __debugfs_create_file+0x105/0x4f0 [ 72.049423][ T6126] debugfs_create_file_full+0x41/0x60 [ 72.049440][ T6126] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 72.049452][ T6126] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 72.049481][ T6126] ? lockdep_init_map_type+0x5c/0x250 [ 72.049493][ T6126] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 72.049505][ T6126] alloc_netdev_mqs+0x314/0x15c0 [ 72.049524][ T6126] rtnl_create_link+0xc13/0xf80 [ 72.049541][ T6126] rtnl_newlink+0x13bd/0x2380 [ 72.049561][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.049576][ T6126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.049592][ T6126] ? __kernel_text_address+0xd/0x30 [ 72.049608][ T6126] ? unwind_get_return_address+0x59/0xa0 [ 72.049633][ T6126] ? __pfx_stack_trace_save+0x10/0x10 [ 72.049654][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.049669][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.049686][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.049702][ T6126] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.049719][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.049738][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.049763][ T6126] netlink_rcv_skb+0x159/0x420 [ 72.049777][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.049794][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.049810][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.049824][ T6126] netlink_unicast+0x585/0x850 [ 72.049838][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.049854][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.049868][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.049882][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.049896][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.049908][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.049921][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.049948][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.049989][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.050009][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.050030][ T6126] do_int80_emulation+0x14b/0x720 [ 72.050046][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.050057][ T6126] RIP: 0023:0xf71a72eb [ 72.050067][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.050078][ T6126] RSP: 002b:00000000ff8a628c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.050089][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6334 [ 72.050096][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.050103][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.050109][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.050116][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.050129][ T6126] [ 72.050134][ T6126] debugfs: out of free dentries, can not create file 'netdev@ffff88806afc2700' [ 72.050843][ T5744] CPU: 1 UID: 0 PID: 5744 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.050862][ T5744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.050871][ T5744] Call Trace: [ 72.050877][ T5744] [ 72.050883][ T5744] dump_stack_lvl+0x100/0x190 [ 72.050902][ T5744] should_fail_ex.cold+0x5/0xa [ 72.050919][ T5744] should_failslab+0xc2/0x120 [ 72.050939][ T5744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.050958][ T5744] ? do_getname+0x35/0x390 [ 72.050980][ T5744] do_getname+0x35/0x390 [ 72.051000][ T5744] do_sys_openat2+0xc7/0x1e0 [ 72.051020][ T5744] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.051039][ T5744] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 72.051058][ T5744] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 72.051083][ T5744] __ia32_compat_sys_openat+0x12d/0x210 [ 72.051104][ T5744] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 72.051132][ T5744] __do_fast_syscall_32+0xe7/0x970 [ 72.051155][ T5744] do_fast_syscall_32+0x32/0x70 [ 72.051174][ T5744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.051193][ T5744] RIP: 0023:0xf6fdefec [ 72.051205][ T5744] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 72.051219][ T5744] RSP: 002b:00000000fffe4a50 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 72.051234][ T5744] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000fffe5bb4 [ 72.051244][ T5744] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f73a6ff4 [ 72.051253][ T5744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.051262][ T5744] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.051271][ T5744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.051291][ T5744] [ 72.051298][ T5726] FAULT_INJECTION: forcing a failure. [ 72.051298][ T5726] name failslab, interval 1, probability 10, space 0, times 77 [ 72.052584][ T6126] FAULT_INJECTION: forcing a failure. [ 72.052584][ T6126] name failslab, interval 1, probability 10, space 0, times 77 [ 72.054866][ T5726] CPU: 0 UID: 0 PID: 5726 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 72.054887][ T5726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.054897][ T5726] Call Trace: [ 72.054903][ T5726] [ 72.054910][ T5726] dump_stack_lvl+0x100/0x190 [ 72.054932][ T5726] should_fail_ex.cold+0x5/0xa [ 72.054952][ T5726] should_failslab+0xc2/0x120 [ 72.054971][ T5726] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.054990][ T5726] ? lock_acquire+0x1b9/0x370 [ 72.055016][ T5726] ? skb_clone+0x190/0x400 [ 72.055046][ T5726] skb_clone+0x190/0x400 [ 72.055069][ T5726] dev_queue_xmit_nit+0x255/0xa60 [ 72.055096][ T5726] dev_hard_start_xmit+0x2f5/0x760 [ 72.055121][ T5726] sch_direct_xmit+0x1b2/0xc70 [ 72.055148][ T5726] ? lock_acquire+0x1b9/0x370 [ 72.055172][ T5726] ? __pfx_sch_direct_xmit+0x10/0x10 [ 72.055192][ T5726] ? do_raw_spin_lock+0x240/0x260 [ 72.055217][ T5726] __dev_queue_xmit+0x27ac/0x4970 [ 72.055243][ T5726] ? __lock_acquire+0x49f/0x1a40 [ 72.055268][ T5726] ? __pfx___dev_queue_xmit+0x10/0x10 [ 72.055286][ T5726] ? __lock_acquire+0x49f/0x1a40 [ 72.055312][ T5726] ? __lock_acquire+0x49f/0x1a40 [ 72.055337][ T5726] ? __lock_acquire+0x49f/0x1a40 [ 72.055371][ T5726] ip_finish_output2+0xf4a/0x2400 [ 72.055397][ T5726] ? __pfx_ip_finish_output2+0x10/0x10 [ 72.055416][ T5726] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 72.055440][ T5726] __ip_finish_output.part.0+0x444/0x6f0 [ 72.055463][ T5726] ip_output+0x39b/0xc10 [ 72.055480][ T5726] ? __pfx_ip_output+0x10/0x10 [ 72.055500][ T5726] ? __pfx_ip_finish_output+0x10/0x10 [ 72.055523][ T5726] ? __pfx_ip_output+0x10/0x10 [ 72.055543][ T5726] ip_local_out+0x193/0x1f0 [ 72.055564][ T5726] __ip_queue_xmit+0x885/0x1e90 [ 72.055582][ T5726] ? __pfx_ip_queue_xmit+0x10/0x10 [ 72.055602][ T5726] __tcp_transmit_skb+0x3506/0x4f20 [ 72.055640][ T5726] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 72.055676][ T5726] ? ktime_get+0x22c/0x320 [ 72.055697][ T5726] ? lockdep_hardirqs_on+0x78/0x100 [ 72.055722][ T5726] tcp_write_xmit+0x1130/0x8470 [ 72.055766][ T5726] ? __sk_mem_schedule+0xd0/0x100 [ 72.055790][ T5726] tcp_sendmsg_locked+0x2c8c/0x44d0 [ 72.055830][ T5726] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 72.055856][ T5726] ? do_raw_spin_lock+0x128/0x260 [ 72.055870][ T5726] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.055894][ T5726] ? __local_bh_enable_ip+0x9e/0x120 [ 72.055916][ T5726] tcp_sendmsg+0x2e/0x50 [ 72.055938][ T5726] ? __pfx_tcp_sendmsg+0x10/0x10 [ 72.055959][ T5726] inet_sendmsg+0xb9/0x140 [ 72.055979][ T5726] sock_write_iter+0x4ea/0x5b0 [ 72.055996][ T5726] ? __pfx_inet_sendmsg+0x10/0x10 [ 72.056018][ T5726] ? __pfx_sock_write_iter+0x10/0x10 [ 72.056041][ T5726] ? bpf_lsm_file_permission+0x9/0x10 [ 72.056052][ T5726] ? security_file_permission+0x76/0x210 [ 72.056076][ T5726] ? rw_verify_area+0xce/0x6d0 [ 72.056102][ T5726] vfs_write+0x6ac/0x1050 [ 72.056119][ T5726] ? __pfx_sock_write_iter+0x10/0x10 [ 72.056137][ T5726] ? __pfx_vfs_write+0x10/0x10 [ 72.056153][ T5726] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 72.056172][ T5726] ? lockdep_hardirqs_on+0x78/0x100 [ 72.056191][ T5726] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.056208][ T5726] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 72.056228][ T5726] ksys_write+0x1f8/0x250 [ 72.056241][ T5726] ? __pfx_ksys_write+0x10/0x10 [ 72.056262][ T5726] do_syscall_64+0x115/0x840 [ 72.056282][ T5726] ? clear_bhb_loop+0x40/0x90 [ 72.056302][ T5726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.056319][ T5726] RIP: 0033:0x7f7e0aca7407 [ 72.056330][ T5726] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 72.056345][ T5726] RSP: 002b:00007ffcc71b7820 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 72.056360][ T5726] RAX: ffffffffffffffda RBX: 00007f7e0b469300 RCX: 00007f7e0aca7407 [ 72.056371][ T5726] RDX: 0000000000008024 RSI: 0000561d821ecd40 RDI: 0000000000000004 [ 72.056381][ T5726] RBP: 0000561d821c5050 R08: 0000000000000000 R09: 0000000000000000 [ 72.056391][ T5726] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 72.056401][ T5726] R13: 00007ffcc71b7970 R14: 0000000000000000 R15: 0000000000000004 [ 72.056417][ T5726] [ 72.058156][ T5821] bond0: (slave bond_slave_0): interface is now down [ 72.058174][ T5821] bond0: (slave bond_slave_1): interface is now down [ 72.058186][ T5821] bond0: (slave syz_tun): interface is now down [ 72.071910][ T127] FAULT_INJECTION: forcing a failure. [ 72.071910][ T127] name failslab, interval 1, probability 10, space 0, times 66 [ 72.073431][ T6126] CPU: 2 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.073447][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.073454][ T6126] Call Trace: [ 72.073458][ T6126] [ 72.073463][ T6126] dump_stack_lvl+0x100/0x190 [ 72.073479][ T6126] should_fail_ex.cold+0x5/0xa [ 72.073492][ T6126] should_failslab+0xc2/0x120 [ 72.073507][ T6126] __kvmalloc_node_noprof+0x116/0x970 [ 72.073522][ T6126] ? lockdep_init_map_type+0x5c/0x250 [ 72.073533][ T6126] ? alloc_netdev_mqs+0xd40/0x15c0 [ 72.073551][ T6126] alloc_netdev_mqs+0xd40/0x15c0 [ 72.073569][ T6126] rtnl_create_link+0xc13/0xf80 [ 72.073588][ T6126] rtnl_newlink+0x13bd/0x2380 [ 72.073608][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.073623][ T6126] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.073638][ T6126] ? __kernel_text_address+0xd/0x30 [ 72.073654][ T6126] ? unwind_get_return_address+0x59/0xa0 [ 72.073680][ T6126] ? __pfx_stack_trace_save+0x10/0x10 [ 72.073700][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.073715][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.073732][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.073752][ T6126] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.073770][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.073788][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.073808][ T6126] netlink_rcv_skb+0x159/0x420 [ 72.073820][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.073837][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.073854][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.073868][ T6126] netlink_unicast+0x585/0x850 [ 72.073882][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.073898][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.073912][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.073927][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.073949][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.073991][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.074015][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.074057][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.074080][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.074098][ T5821] bond0: (slave bond_slave_0): interface is now down [ 72.074100][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.074121][ T6126] do_int80_emulation+0x14b/0x720 [ 72.074137][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.074149][ T6126] RIP: 0023:0xf71a72eb [ 72.074159][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.074170][ T6126] RSP: 002b:00000000ff8a628c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.074180][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6334 [ 72.074188][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.074194][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.074200][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.074207][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.074220][ T6126] [ 72.074881][ T6129] FAULT_INJECTION: forcing a failure. [ 72.074881][ T6129] name failslab, interval 1, probability 10, space 0, times 65 [ 72.074898][ T6129] CPU: 2 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.074910][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.074917][ T6129] Call Trace: [ 72.074922][ T6129] [ 72.074928][ T6129] dump_stack_lvl+0x100/0x190 [ 72.074949][ T6129] should_fail_ex.cold+0x5/0xa [ 72.074969][ T6129] should_failslab+0xc2/0x120 [ 72.074993][ T6129] __kmalloc_cache_noprof+0x91/0x6c0 [ 72.075009][ T6129] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 72.075032][ T6129] ? alloc_netdev_mqs+0xe3c/0x15c0 [ 72.075050][ T6129] alloc_netdev_mqs+0xe3c/0x15c0 [ 72.075068][ T6129] rtnl_create_link+0xc13/0xf80 [ 72.075085][ T6129] rtnl_newlink+0x13bd/0x2380 [ 72.075105][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.075120][ T6129] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.075135][ T6129] ? __kernel_text_address+0xd/0x30 [ 72.075151][ T6129] ? unwind_get_return_address+0x59/0xa0 [ 72.075176][ T6129] ? __pfx_stack_trace_save+0x10/0x10 [ 72.075195][ T6129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.075211][ T6129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.075227][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.075245][ T6129] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.075262][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.075281][ T6129] ? __lock_acquire+0x49f/0x1a40 [ 72.075300][ T6129] netlink_rcv_skb+0x159/0x420 [ 72.075311][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.075328][ T6129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.075345][ T6129] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.075359][ T6129] netlink_unicast+0x585/0x850 [ 72.075372][ T6129] ? __pfx_netlink_unicast+0x10/0x10 [ 72.075388][ T6129] netlink_sendmsg+0x8b0/0xda0 [ 72.075402][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.075416][ T6129] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.075430][ T6129] __sys_sendto+0x48b/0x4e0 [ 72.075442][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.075454][ T6129] ? __pfx___sys_sendto+0x10/0x10 [ 72.075490][ T6129] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.075521][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.075554][ T6129] ? __pfx_fput_close_sync+0x10/0x10 [ 72.075592][ T6129] do_int80_emulation+0x14b/0x720 [ 72.075609][ T6129] asm_int80_emulation+0x1a/0x20 [ 72.075620][ T6129] RIP: 0023:0xf71172eb [ 72.075630][ T6129] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.075640][ T6129] RSP: 002b:00000000ffcef35c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.075651][ T6129] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ffcef404 [ 72.075658][ T6129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.075664][ T6129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.075670][ T6129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.075677][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.075690][ T6129] [ 72.075699][ T127] CPU: 3 UID: 0 PID: 127 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 72.075722][ T127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.075734][ T127] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.075760][ T127] Call Trace: [ 72.075766][ T127] [ 72.075773][ T127] dump_stack_lvl+0x100/0x190 [ 72.075798][ T127] should_fail_ex.cold+0x5/0xa [ 72.075818][ T127] should_failslab+0xc2/0x120 [ 72.075880][ T127] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.075904][ T127] ? __alloc_skb+0x140/0x710 [ 72.075929][ T127] __alloc_skb+0x140/0x710 [ 72.075942][ T6129] FAULT_INJECTION: forcing a failure. [ 72.075942][ T6129] name failslab, interval 1, probability 10, space 0, times 64 [ 72.075950][ T127] ? __alloc_skb+0x5b7/0x710 [ 72.075970][ T127] ? __pfx___alloc_skb+0x10/0x10 [ 72.075990][ T127] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.076009][ T127] ? __pfx___might_resched+0x10/0x10 [ 72.076040][ T127] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.076074][ T127] process_one_work+0xa23/0x1940 [ 72.076108][ T127] ? __pfx_process_one_work+0x10/0x10 [ 72.076137][ T127] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.076163][ T127] worker_thread+0x5ef/0xe50 [ 72.076195][ T127] ? kthread+0x13a/0x450 [ 72.076216][ T127] ? __pfx_worker_thread+0x10/0x10 [ 72.076238][ T127] kthread+0x370/0x450 [ 72.076258][ T127] ? __pfx_kthread+0x10/0x10 [ 72.076282][ T127] ret_from_fork+0x72b/0xd50 [ 72.076304][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 72.076325][ T127] ? __switch_to+0x800/0x10f0 [ 72.076351][ T127] ? __pfx_kthread+0x10/0x10 [ 72.076372][ T127] ret_from_fork_asm+0x1a/0x30 [ 72.076406][ T127] [ 72.076699][ T127] FAULT_INJECTION: forcing a failure. [ 72.076699][ T127] name failslab, interval 1, probability 10, space 0, times 63 [ 72.076721][ T127] CPU: 3 UID: 0 PID: 127 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 72.076739][ T127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.076749][ T127] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.076771][ T127] Call Trace: [ 72.076776][ T127] [ 72.076783][ T127] dump_stack_lvl+0x100/0x190 [ 72.076809][ T127] should_fail_ex.cold+0x5/0xa [ 72.076827][ T127] should_failslab+0xc2/0x120 [ 72.076850][ T127] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.076871][ T127] ? __alloc_skb+0x140/0x710 [ 72.076895][ T127] __alloc_skb+0x140/0x710 [ 72.076915][ T127] ? __alloc_skb+0x5b7/0x710 [ 72.076934][ T127] ? __pfx___alloc_skb+0x10/0x10 [ 72.076958][ T127] ? kfree_skbmem+0x19f/0x210 [ 72.076977][ T127] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.077010][ T127] process_one_work+0xa23/0x1940 [ 72.077043][ T127] ? __pfx_process_one_work+0x10/0x10 [ 72.077072][ T127] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.077097][ T127] worker_thread+0x5ef/0xe50 [ 72.077129][ T127] ? kthread+0x13a/0x450 [ 72.077149][ T127] ? __pfx_worker_thread+0x10/0x10 [ 72.077170][ T127] kthread+0x370/0x450 [ 72.077191][ T127] ? __pfx_kthread+0x10/0x10 [ 72.077213][ T127] ret_from_fork+0x72b/0xd50 [ 72.077234][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 72.077254][ T127] ? __switch_to+0x800/0x10f0 [ 72.077279][ T127] ? __pfx_kthread+0x10/0x10 [ 72.077301][ T127] ret_from_fork_asm+0x1a/0x30 [ 72.077334][ T127] [ 72.077342][ T127] FAULT_INJECTION: forcing a failure. [ 72.077342][ T127] name failslab, interval 1, probability 10, space 0, times 62 [ 72.078611][ T6126] FAULT_INJECTION: forcing a failure. [ 72.078611][ T6126] name failslab, interval 1, probability 10, space 0, times 62 [ 72.078909][ T5821] bond0: (slave bond_slave_1): interface is now down [ 72.078925][ T5821] bond0: (slave syz_tun): interface is now down [ 72.080480][ T127] CPU: 3 UID: 0 PID: 127 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 72.080494][ T127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.080501][ T127] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.080517][ T127] Call Trace: [ 72.080521][ T127] [ 72.080526][ T127] dump_stack_lvl+0x100/0x190 [ 72.080539][ T127] should_fail_ex.cold+0x5/0xa [ 72.080550][ T127] should_failslab+0xc2/0x120 [ 72.080565][ T127] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.080580][ T127] ? __alloc_skb+0x140/0x710 [ 72.080596][ T127] __alloc_skb+0x140/0x710 [ 72.080609][ T127] ? __alloc_skb+0x5b7/0x710 [ 72.080622][ T127] ? __pfx___alloc_skb+0x10/0x10 [ 72.080637][ T127] ? kfree_skbmem+0x19f/0x210 [ 72.080650][ T127] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.080670][ T127] process_one_work+0xa23/0x1940 [ 72.080691][ T127] ? __pfx_process_one_work+0x10/0x10 [ 72.080710][ T127] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.080727][ T127] worker_thread+0x5ef/0xe50 [ 72.080747][ T127] ? kthread+0x13a/0x450 [ 72.080760][ T127] ? __pfx_worker_thread+0x10/0x10 [ 72.080774][ T127] kthread+0x370/0x450 [ 72.080788][ T127] ? __pfx_kthread+0x10/0x10 [ 72.080807][ T127] ret_from_fork+0x72b/0xd50 [ 72.080821][ T127] ? __pfx_ret_from_fork+0x10/0x10 [ 72.080835][ T127] ? __switch_to+0x800/0x10f0 [ 72.080851][ T127] ? __pfx_kthread+0x10/0x10 [ 72.080866][ T127] ret_from_fork_asm+0x1a/0x30 [ 72.080887][ T127] [ 72.080895][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.080914][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.080923][ T6129] Call Trace: [ 72.080929][ T6129] [ 72.080935][ T6129] dump_stack_lvl+0x100/0x190 [ 72.080954][ T6129] should_fail_ex.cold+0x5/0xa [ 72.080971][ T6129] should_failslab+0xc2/0x120 [ 72.080991][ T6129] __kmalloc_cache_noprof+0x91/0x6c0 [ 72.081008][ T6129] ? rtnl_newlink+0x126/0x2380 [ 72.081029][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.081050][ T6129] rtnl_newlink+0x126/0x2380 [ 72.081086][ T6129] ? find_held_lock+0x2b/0x80 [ 72.081104][ T6129] ? is_bpf_text_address+0x8a/0x1a0 [ 72.081125][ T6129] ? bpf_ksym_find+0x124/0x1c0 [ 72.081142][ T6129] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.081163][ T6129] ? is_bpf_text_address+0x94/0x1a0 [ 72.081183][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.081202][ T6129] ? is_bpf_text_address+0x8a/0x1a0 [ 72.081221][ T6129] ? __kernel_text_address+0xd/0x30 [ 72.081242][ T6129] ? unwind_get_return_address+0x59/0xa0 [ 72.081264][ T6129] ? arch_stack_walk+0xa6/0xf0 [ 72.081293][ T6129] ? __lock_acquire+0x49f/0x1a40 [ 72.081315][ T6129] ? stack_depot_save_flags+0x27/0x9d0 [ 72.081347][ T6129] ? find_held_lock+0x2b/0x80 [ 72.081364][ T6129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.081398][ T6129] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.081419][ T6129] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.081441][ T6129] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.081463][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.081488][ T6129] ? __lock_acquire+0x49f/0x1a40 [ 72.081514][ T6129] netlink_rcv_skb+0x159/0x420 [ 72.081530][ T6129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.081553][ T6129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.081576][ T6129] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.081595][ T6129] netlink_unicast+0x585/0x850 [ 72.081614][ T6129] ? __pfx_netlink_unicast+0x10/0x10 [ 72.081640][ T6129] netlink_sendmsg+0x8b0/0xda0 [ 72.081660][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.081680][ T6129] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.081699][ T6129] __sys_sendto+0x48b/0x4e0 [ 72.081716][ T6129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.081733][ T6129] ? __pfx___sys_sendto+0x10/0x10 [ 72.081771][ T6129] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.081797][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.081823][ T6129] ? xfd_validate_state+0x129/0x190 [ 72.081849][ T6129] do_int80_emulation+0x14b/0x720 [ 72.081870][ T6129] asm_int80_emulation+0x1a/0x20 [ 72.081886][ T6129] RIP: 0023:0xf71172eb [ 72.081898][ T6129] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.081912][ T6129] RSP: 002b:00000000ffcef37c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.081926][ T6129] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ffcef424 [ 72.081936][ T6129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.081945][ T6129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.081975][ T6129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.081985][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.082005][ T6129] [ 72.082413][ T6129] FAULT_INJECTION: forcing a failure. [ 72.082413][ T6129] name failslab, interval 1, probability 10, space 0, times 59 [ 72.083199][ T5821] FAULT_INJECTION: forcing a failure. [ 72.083199][ T5821] name failslab, interval 1, probability 10, space 0, times 58 [ 72.083432][ T6126] CPU: 3 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.083453][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.083463][ T6126] Call Trace: [ 72.083469][ T6126] [ 72.083475][ T6126] dump_stack_lvl+0x100/0x190 [ 72.083497][ T6126] should_fail_ex.cold+0x5/0xa [ 72.083516][ T6126] should_failslab+0xc2/0x120 [ 72.083538][ T6126] __kvmalloc_node_noprof+0x116/0x970 [ 72.083561][ T6126] ? alloc_netdev_mqs+0xd7/0x15c0 [ 72.083587][ T6126] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 72.083606][ T6126] alloc_netdev_mqs+0xd7/0x15c0 [ 72.083633][ T6126] rtnl_create_link+0xc13/0xf80 [ 72.083660][ T6126] rtnl_newlink+0x13bd/0x2380 [ 72.083691][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.083713][ T6126] ? is_bpf_text_address+0x8a/0x1a0 [ 72.083736][ T6126] ? __kernel_text_address+0xd/0x30 [ 72.083760][ T6126] ? unwind_get_return_address+0x59/0xa0 [ 72.083814][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.083837][ T6126] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 72.083861][ T6126] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.083885][ T6126] rtnetlink_rcv_msg+0x95e/0xe90 [ 72.083910][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.083938][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.083967][ T6126] netlink_rcv_skb+0x159/0x420 [ 72.083985][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.084011][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.084036][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.084058][ T6126] netlink_unicast+0x585/0x850 [ 72.084079][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.084103][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.084126][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.084147][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.084169][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.084188][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.084207][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.084250][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.084279][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.084310][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.084342][ T6126] do_int80_emulation+0x14b/0x720 [ 72.084366][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.084383][ T6126] RIP: 0023:0xf71a72eb [ 72.084396][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.084412][ T6126] RSP: 002b:00000000ff8a628c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.084428][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6334 [ 72.084439][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.084449][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.084459][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.084469][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.084491][ T6126] [ 72.084514][ T6126] FAULT_INJECTION: forcing a failure. [ 72.084514][ T6126] name failslab, interval 1, probability 10, space 0, times 57 [ 72.084533][ T6126] CPU: 3 UID: 0 PID: 6126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.084550][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.084559][ T6126] Call Trace: [ 72.084565][ T6126] [ 72.084570][ T6126] dump_stack_lvl+0x100/0x190 [ 72.084589][ T6126] should_fail_ex.cold+0x5/0xa [ 72.084608][ T6126] should_failslab+0xc2/0x120 [ 72.084630][ T6126] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.084650][ T6126] ? __alloc_skb+0x5b7/0x710 [ 72.084670][ T6126] ? __alloc_skb+0x140/0x710 [ 72.084694][ T6126] __alloc_skb+0x140/0x710 [ 72.084713][ T6126] ? __alloc_skb+0x5b7/0x710 [ 72.084732][ T6126] ? __pfx___alloc_skb+0x10/0x10 [ 72.084759][ T6126] netlink_ack+0x117/0xb80 [ 72.084778][ T6126] ? __lock_acquire+0x49f/0x1a40 [ 72.084811][ T6126] netlink_rcv_skb+0x333/0x420 [ 72.084829][ T6126] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.084854][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.084879][ T6126] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.084900][ T6126] netlink_unicast+0x585/0x850 [ 72.084921][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 72.084946][ T6126] netlink_sendmsg+0x8b0/0xda0 [ 72.084967][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.084988][ T6126] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.085009][ T6126] __sys_sendto+0x48b/0x4e0 [ 72.085027][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.085046][ T6126] ? __pfx___sys_sendto+0x10/0x10 [ 72.085088][ T6126] __ia32_compat_sys_socketcall+0x59a/0x770 [ 72.085115][ T6126] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.085145][ T6126] ? __pfx_fput_close_sync+0x10/0x10 [ 72.085175][ T6126] do_int80_emulation+0x14b/0x720 [ 72.085199][ T6126] asm_int80_emulation+0x1a/0x20 [ 72.085215][ T6126] RIP: 0023:0xf71a72eb [ 72.085228][ T6126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 72.085243][ T6126] RSP: 002b:00000000ff8a628c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 72.085258][ T6126] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8a6334 [ 72.085270][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.085280][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.085289][ T6126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.085299][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.085320][ T6126] [ 72.087448][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.087468][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.087477][ T6129] Call Trace: [ 72.087482][ T6129] [ 72.087488][ T6129] dump_stack_lvl+0x100/0x190 [ 72.087529][ T6129] should_fail_ex.cold+0x5/0xa [ 72.087547][ T6129] should_failslab+0xc2/0x120 [ 72.087566][ T6129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.087584][ T6129] ? d_instantiate+0x8a/0xb0 [ 72.087601][ T6129] ? d_instantiate+0x8a/0xb0 [ 72.087617][ T6129] ? alloc_empty_file+0x5b/0x1c0 [ 72.087644][ T6129] alloc_empty_file+0x5b/0x1c0 [ 72.087664][ T6129] alloc_file_pseudo+0x183/0x290 [ 72.087683][ T6129] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 72.087702][ T6129] ? alloc_fd+0x471/0x7a0 [ 72.087721][ T6129] sock_alloc_file+0x50/0x210 [ 72.087743][ T6129] __sys_socket+0x1c0/0x260 [ 72.087762][ T6129] ? __pfx___sys_socket+0x10/0x10 [ 72.087784][ T6129] __ia32_compat_sys_socketcall+0x65b/0x770 [ 72.087809][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.087832][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.087869][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.087888][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.087907][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.087926][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.087944][ T6129] RIP: 0023:0xf7f15fec [ 72.087961][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.087968][ T6129] RSP: 002b:00000000ffcef3e0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 72.087982][ T6129] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffcef3f0 [ 72.087992][ T6129] RDX: 00000000f73a6ff4 RSI: 00000000f71e26d9 RDI: 00000000ffcef44c [ 72.088002][ T6129] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 72.088011][ T6129] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 72.088020][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.088040][ T6129] [ 72.088290][ T6129] FAULT_INJECTION: forcing a failure. [ 72.088290][ T6129] name failslab, interval 1, probability 10, space 0, times 55 [ 72.090249][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 72.090271][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.090283][ T5821] Workqueue: bat_events batadv_mcast_mla_update [ 72.090326][ T5821] Call Trace: [ 72.090332][ T5821] [ 72.090339][ T5821] dump_stack_lvl+0x100/0x190 [ 72.090359][ T5821] should_fail_ex.cold+0x5/0xa [ 72.090377][ T5821] should_failslab+0xc2/0x120 [ 72.090397][ T5821] __kmalloc_cache_noprof+0x91/0x6c0 [ 72.090414][ T5821] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 72.090444][ T5821] batadv_mcast_mla_update+0x19ae/0x3200 [ 72.090474][ T5821] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 72.090499][ T5821] ? debug_object_deactivate+0x2e4/0x3b0 [ 72.090533][ T5821] ? rcu_is_watching+0x12/0xc0 [ 72.090556][ T5821] process_one_work+0xa23/0x1940 [ 72.090584][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 72.090614][ T5821] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 72.090642][ T5821] worker_thread+0x5ef/0xe50 [ 72.090669][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 72.090691][ T5821] ? kthread+0x13a/0x450 [ 72.090710][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 72.090732][ T5821] kthread+0x370/0x450 [ 72.090752][ T5821] ? __pfx_kthread+0x10/0x10 [ 72.090774][ T5821] ret_from_fork+0x72b/0xd50 [ 72.090791][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 72.090818][ T5821] ? __switch_to+0x800/0x10f0 [ 72.090842][ T5821] ? __pfx_kthread+0x10/0x10 [ 72.090865][ T5821] ret_from_fork_asm+0x1a/0x30 [ 72.090892][ T5821] [ 72.091944][ T5821] bond0: (slave bond_slave_0): interface is now down [ 72.091989][ T5821] bond0: (slave bond_slave_1): interface is now down [ 72.092003][ T5821] bond0: (slave syz_tun): interface is now down [ 72.099465][ T5821] bond0: now running without any active interface! [ 72.103169][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.103190][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.103199][ T6129] Call Trace: [ 72.103204][ T6129] [ 72.103210][ T6129] dump_stack_lvl+0x100/0x190 [ 72.103231][ T6129] should_fail_ex.cold+0x5/0xa [ 72.103248][ T6129] should_failslab+0xc2/0x120 [ 72.103269][ T6129] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.103286][ T6129] ? d_instantiate+0x8a/0xb0 [ 72.103304][ T6129] ? d_instantiate+0x8a/0xb0 [ 72.103320][ T6129] ? alloc_empty_file+0x5b/0x1c0 [ 72.103342][ T6129] alloc_empty_file+0x5b/0x1c0 [ 72.103360][ T6129] alloc_file_pseudo+0x183/0x290 [ 72.103380][ T6129] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 72.103399][ T6129] ? alloc_fd+0x471/0x7a0 [ 72.103417][ T6129] sock_alloc_file+0x50/0x210 [ 72.103439][ T6129] __sys_socket+0x1c0/0x260 [ 72.103455][ T6129] ? __pfx___sys_socket+0x10/0x10 [ 72.103477][ T6129] __ia32_compat_sys_socketcall+0x65b/0x770 [ 72.103502][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.103525][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.103561][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.103580][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.103600][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.103618][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.103641][ T6129] RIP: 0023:0xf7f15fec [ 72.103659][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.103666][ T6129] RSP: 002b:00000000ffcef3e0 EFLAGS: 00000286 ORIG_RAX: 0000000000000066 [ 72.103681][ T6129] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffcef3f0 [ 72.103691][ T6129] RDX: 00000000f73a6ff4 RSI: 00000000f71e26d9 RDI: 00000000ffcef44c [ 72.103700][ T6129] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 72.103709][ T6129] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 72.103718][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.103737][ T6129] [ 72.104533][ T6129] FAULT_INJECTION: forcing a failure. [ 72.104533][ T6129] name failslab, interval 1, probability 10, space 0, times 49 [ 72.108531][ T5155] FAULT_INJECTION: forcing a failure. [ 72.108531][ T5155] name failslab, interval 1, probability 10, space 0, times 49 [ 72.108613][ C3] FAULT_INJECTION: forcing a failure. [ 72.108613][ C3] name failslab, interval 1, probability 10, space 0, times 49 [ 72.108639][ C3] CPU: 3 UID: 0 PID: 5821 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 72.108661][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.108672][ C3] Workqueue: bond0 bond_arp_monitor [ 72.108695][ C3] Call Trace: [ 72.108702][ C3] [ 72.108709][ C3] dump_stack_lvl+0x100/0x190 [ 72.108731][ C3] should_fail_ex.cold+0x5/0xa [ 72.108752][ C3] should_failslab+0xc2/0x120 [ 72.108776][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.108804][ C3] ? __alloc_skb+0x140/0x710 [ 72.108831][ C3] __alloc_skb+0x140/0x710 [ 72.108851][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.108871][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.108894][ C3] ? lock_acquire+0x1b9/0x370 [ 72.108924][ C3] __netdev_alloc_skb+0x7a/0x960 [ 72.108951][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 72.108977][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.109006][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 72.109019][ T37] FAULT_INJECTION: forcing a failure. [ 72.109019][ T37] name failslab, interval 1, probability 10, space 0, times 49 [ 72.109029][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 72.109060][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 72.109093][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.109115][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.109142][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.109167][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.109193][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.109214][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.109233][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.109258][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.109273][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.109288][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.109300][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.109311][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.109327][ C3] __irq_exit_rcu+0x162/0x210 [ 72.109340][ C3] irq_exit_rcu+0x9/0x30 [ 72.109351][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.109367][ C3] [ 72.109371][ C3] [ 72.109375][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.109388][ C3] RIP: 0010:smp_call_function_many_cond+0x5a8/0x1870 [ 72.109407][ C3] Code: e4 07 49 01 c5 41 83 c4 03 e8 f4 8f 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 <41> 89 c6 89 c6 e8 3e 8a 0c 00 45 85 f6 75 d0 e8 c4 8f 0c 00 e8 bf [ 72.109418][ C3] RSP: 0018:ffffc90004b0f7c8 EFLAGS: 00000202 [ 72.109427][ C3] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81fd1c92 [ 72.109434][ C3] RDX: ffff888021f8a540 RSI: ffffffff81fd1c6c RDI: 0000000000000000 [ 72.109441][ C3] RBP: ffff88802b3433a0 R08: 0000000000000005 R09: 0000000000000000 [ 72.109448][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 72.109454][ C3] R13: ffffed1005668675 R14: 0000000000000001 R15: ffff88802b53c9c0 [ 72.109465][ C3] ? smp_call_function_many_cond+0x5b2/0x1870 [ 72.109482][ C3] ? smp_call_function_many_cond+0x58c/0x1870 [ 72.109500][ C3] ? smp_call_function_many_cond+0x58c/0x1870 [ 72.109518][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 72.109537][ C3] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 72.109554][ C3] ? __pfx_text_poke_memcpy+0x10/0x10 [ 72.109571][ C3] ? __pfx___text_poke+0x10/0x10 [ 72.109587][ C3] ? __pfx_do_sync_core+0x10/0x10 [ 72.109602][ C3] on_each_cpu_cond_mask+0x40/0x90 [ 72.109620][ C3] smp_text_poke_batch_finish+0x919/0xc60 [ 72.109639][ C3] ? bond_start_xmit+0x7e/0x10b0 [ 72.109651][ C3] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 72.109670][ C3] ? arch_jump_label_transform_queue+0xc0/0x120 [ 72.109686][ C3] arch_jump_label_transform_apply+0x1c/0x30 [ 72.109698][ C3] jump_label_update+0x37a/0x550 [ 72.109714][ C3] __static_key_slow_dec_cpuslocked.part.0+0xc5/0xf0 [ 72.109729][ C3] static_key_slow_dec+0x7c/0xc0 [ 72.109743][ C3] bond_arp_monitor+0x8f8/0x46a0 [ 72.109759][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 72.109776][ C3] ? __pfx_bond_arp_monitor+0x10/0x10 [ 72.109796][ C3] ? preempt_schedule_thunk+0x16/0x40 [ 72.109815][ C3] process_one_work+0xa23/0x1940 [ 72.109837][ C3] ? __pfx_process_one_work+0x10/0x10 [ 72.109857][ C3] ? __pfx_bond_arp_monitor+0x10/0x10 [ 72.109871][ C3] worker_thread+0x5ef/0xe50 [ 72.109891][ C3] ? __pfx_worker_thread+0x10/0x10 [ 72.109907][ C3] ? kthread+0x13a/0x450 [ 72.109922][ C3] ? __pfx_worker_thread+0x10/0x10 [ 72.109937][ C3] kthread+0x370/0x450 [ 72.109951][ C3] ? __pfx_kthread+0x10/0x10 [ 72.109986][ C3] ret_from_fork+0x72b/0xd50 [ 72.110000][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 72.110014][ C3] ? __switch_to+0x800/0x10f0 [ 72.110032][ C3] ? __pfx_kthread+0x10/0x10 [ 72.110047][ C3] ret_from_fork_asm+0x1a/0x30 [ 72.110068][ C3] [ 72.110078][ T37] CPU: 2 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.110100][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.110112][ T37] Workqueue: events_unbound cfg80211_wiphy_work [ 72.110141][ T37] Call Trace: [ 72.110147][ T37] [ 72.110155][ T37] dump_stack_lvl+0x100/0x190 [ 72.110176][ T37] should_fail_ex.cold+0x5/0xa [ 72.110197][ T37] should_failslab+0xc2/0x120 [ 72.110222][ T37] __kmalloc_noprof+0xfc/0x820 [ 72.110245][ T37] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.110280][ T37] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.110309][ T37] ? __mod_timer+0x40e/0xca0 [ 72.110335][ T37] ? __lock_acquire+0x49f/0x1a40 [ 72.110363][ T37] ? sta_get_last_rx_stats+0x1ad/0x3a0 [ 72.110390][ T37] ? __pfx_round_jiffies+0x10/0x10 [ 72.110420][ T37] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 72.110477][ T37] ? rcu_is_watching+0x12/0xc0 [ 72.110504][ T37] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 72.110533][ T37] ? do_raw_spin_lock+0x128/0x260 [ 72.110554][ T37] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 72.110595][ T37] ieee80211_iface_work+0xa9a/0x1070 [ 72.110629][ T37] cfg80211_wiphy_work+0x2b7/0x550 [ 72.110659][ T37] process_one_work+0xa23/0x1940 [ 72.110702][ T37] ? __pfx_process_one_work+0x10/0x10 [ 72.110736][ T37] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 72.110766][ T37] worker_thread+0x5ef/0xe50 [ 72.110799][ T37] ? __pfx_worker_thread+0x10/0x10 [ 72.110826][ T37] ? kthread+0x13a/0x450 [ 72.110848][ T37] ? __pfx_worker_thread+0x10/0x10 [ 72.110872][ T37] kthread+0x370/0x450 [ 72.110896][ T37] ? __pfx_kthread+0x10/0x10 [ 72.110921][ T37] ret_from_fork+0x72b/0xd50 [ 72.110945][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 72.110967][ T37] ? __switch_to+0x800/0x10f0 [ 72.110995][ T37] ? __pfx_kthread+0x10/0x10 [ 72.111020][ T37] ret_from_fork_asm+0x1a/0x30 [ 72.111057][ T37] [ 72.111068][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 72.111086][ T6129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.111095][ T6129] Call Trace: [ 72.111101][ T6129] [ 72.111107][ T6129] dump_stack_lvl+0x100/0x190 [ 72.111126][ T6129] should_fail_ex.cold+0x5/0xa [ 72.111143][ T6129] should_failslab+0xc2/0x120 [ 72.111163][ T6129] __kmalloc_noprof+0xfc/0x820 [ 72.111180][ T6129] ? __pfx_dynamic_dname+0x10/0x10 [ 72.111201][ T6129] ? tomoyo_encode2+0xfb/0x3c0 [ 72.111226][ T6129] tomoyo_encode2+0xfb/0x3c0 [ 72.111250][ T6129] tomoyo_encode+0x29/0x50 [ 72.111270][ T6129] tomoyo_realpath_from_path+0x18c/0x690 [ 72.111296][ T6129] tomoyo_path_number_perm+0x23c/0x580 [ 72.111315][ T6129] ? tomoyo_path_number_perm+0x22e/0x580 [ 72.111335][ T6129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.111355][ T6129] ? find_held_lock+0x2b/0x80 [ 72.111406][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.111430][ T6129] ? hook_file_ioctl_common+0x140/0x440 [ 72.111449][ T6129] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 72.111472][ T6129] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 72.111503][ T6129] security_file_ioctl_compat+0xd3/0x230 [ 72.111524][ T6129] __ia32_compat_sys_ioctl+0xc2/0x360 [ 72.111548][ T6129] __do_fast_syscall_32+0xe7/0x970 [ 72.111566][ T6129] ? lockdep_hardirqs_on+0x78/0x100 [ 72.111586][ T6129] do_fast_syscall_32+0x32/0x70 [ 72.111605][ T6129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.111623][ T6129] RIP: 0023:0xf7f15fec [ 72.111644][ T6129] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 72.111651][ T6129] RSP: 002b:00000000ffcef414 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 72.111665][ T6129] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008933 [ 72.111675][ T6129] RDX: 00000000ffcef44c RSI: 00000000f73a6ff4 RDI: 00000000ffcef44c [ 72.111684][ T6129] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 72.111693][ T6129] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 72.111702][ T6129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.111722][ T6129] [ 72.111785][ T6129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 72.114607][ T1163] FAULT_INJECTION: forcing a failure. [ 72.114607][ T1163] name failslab, interval 1, probability 10, space 0, times 45 [ 72.116289][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 72.116328][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.116340][ T5155] Call Trace: [ 72.116347][ T5155] [ 72.116354][ T5155] dump_stack_lvl+0x100/0x190 [ 72.116377][ T5155] should_fail_ex.cold+0x5/0xa [ 72.116398][ T5155] should_failslab+0xc2/0x120 [ 72.116438][ T5155] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.116457][ T5155] ? stack_trace_save+0x8e/0xc0 [ 72.116480][ T5155] ? alloc_empty_file+0x5b/0x1c0 [ 72.116505][ T5155] alloc_empty_file+0x5b/0x1c0 [ 72.116528][ T5155] path_openat+0xe7/0x4280 [ 72.116544][ T5155] ? __kasan_slab_alloc+0x89/0x90 [ 72.116564][ T5155] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 72.116583][ T5155] ? do_getname+0x35/0x390 [ 72.116603][ T5155] ? do_sys_openat2+0xc7/0x1e0 [ 72.116624][ T5155] ? __x64_sys_openat+0x12d/0x210 [ 72.116645][ T5155] ? do_syscall_64+0x115/0x840 [ 72.116671][ T5155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.116696][ T5155] ? __pfx_path_openat+0x10/0x10 [ 72.116722][ T5155] do_file_open+0x20e/0x430 [ 72.116742][ T5155] ? __pfx_do_file_open+0x10/0x10 [ 72.116775][ T5155] ? alloc_fd+0x471/0x7a0 [ 72.116795][ T5155] ? do_getname+0x191/0x390 [ 72.116817][ T5155] do_sys_openat2+0x10f/0x1e0 [ 72.116839][ T5155] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.116865][ T5155] ? __x64_sys_recvmsg+0x1b9/0x260 [ 72.116891][ T5155] __x64_sys_openat+0x12d/0x210 [ 72.116913][ T5155] ? __pfx___x64_sys_openat+0x10/0x10 [ 72.116946][ T5155] do_syscall_64+0x115/0x840 [ 72.116966][ T5155] ? clear_bhb_loop+0x40/0x90 [ 72.116989][ T5155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.117006][ T5155] RIP: 0033:0x7fbe0eea7407 [ 72.117021][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 72.117038][ T5155] RSP: 002b:00007ffe762e9060 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 72.117056][ T5155] RAX: ffffffffffffffda RBX: 00007fbe0f5a7880 RCX: 00007fbe0eea7407 [ 72.117068][ T5155] RDX: 0000000000080141 RSI: 000055570376c02e RDI: ffffffffffffff9c [ 72.117079][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.117088][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 72.117099][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 72.117121][ T5155] [ 72.117250][ T6134] FAULT_INJECTION: forcing a failure. [ 72.117250][ T6134] name failslab, interval 1, probability 10, space 0, times 44 [ 72.117313][ T5155] udevd[5155]: could not touch /run/udev/queue: Cannot allocate memory [ 72.117835][ T37] FAULT_INJECTION: forcing a failure. [ 72.117835][ T37] name failslab, interval 1, probability 10, space 0, times 42 [ 72.117859][ T37] CPU: 2 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.117880][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.117892][ T37] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.117915][ T37] Call Trace: [ 72.117920][ T37] [ 72.117926][ T37] dump_stack_lvl+0x100/0x190 [ 72.117943][ T37] should_fail_ex.cold+0x5/0xa [ 72.117984][ T37] should_failslab+0xc2/0x120 [ 72.118007][ T37] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.118028][ T37] ? __alloc_skb+0x140/0x710 [ 72.118054][ T37] __alloc_skb+0x140/0x710 [ 72.118076][ T37] ? __alloc_skb+0x5b7/0x710 [ 72.118096][ T37] ? __pfx___alloc_skb+0x10/0x10 [ 72.118117][ T37] ? kfree_skbmem+0x19f/0x210 [ 72.118136][ T37] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.118168][ T37] process_one_work+0xa23/0x1940 [ 72.118204][ T37] ? __pfx_process_one_work+0x10/0x10 [ 72.118238][ T37] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.118265][ T37] worker_thread+0x5ef/0xe50 [ 72.118295][ T37] ? __pfx_worker_thread+0x10/0x10 [ 72.118321][ T37] ? kthread+0x13a/0x450 [ 72.118342][ T37] ? __pfx_worker_thread+0x10/0x10 [ 72.118366][ T37] kthread+0x370/0x450 [ 72.118388][ T37] ? __pfx_kthread+0x10/0x10 [ 72.118413][ T37] ret_from_fork+0x72b/0xd50 [ 72.118436][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 72.118459][ T37] ? __switch_to+0x800/0x10f0 [ 72.118486][ T37] ? __pfx_kthread+0x10/0x10 [ 72.118512][ T37] ret_from_fork_asm+0x1a/0x30 [ 72.118548][ T37] [ 72.118558][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.118579][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.118586][ T1163] Workqueue: events_unbound cfg80211_wiphy_work [ 72.118612][ T1163] Call Trace: [ 72.118618][ T1163] [ 72.118625][ T1163] dump_stack_lvl+0x100/0x190 [ 72.118644][ T1163] should_fail_ex.cold+0x5/0xa [ 72.118663][ T1163] should_failslab+0xc2/0x120 [ 72.118685][ T1163] __kmalloc_noprof+0xfc/0x820 [ 72.118702][ T1163] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.118733][ T1163] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.118767][ T1163] ? kasan_save_stack+0x3f/0x50 [ 72.118784][ T1163] ? kasan_save_stack+0x30/0x50 [ 72.118801][ T1163] ? __kasan_kmalloc+0xaa/0xb0 [ 72.118819][ T1163] ? __kmalloc_noprof+0x322/0x820 [ 72.118841][ T1163] ? lock_acquire+0x1b9/0x370 [ 72.118866][ T1163] ? find_held_lock+0x2b/0x80 [ 72.118884][ T1163] ? __kfree_rcu_sheaf+0x195/0x730 [ 72.118901][ T1163] ? __kfree_rcu_sheaf+0x195/0x730 [ 72.118922][ T1163] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 72.118955][ T1163] ? kvfree_call_rcu+0x1be/0x4f0 [ 72.118975][ T1163] ? __asan_memcpy+0x3c/0x60 [ 72.118995][ T1163] ieee80211_inform_bss+0x159/0x1170 [ 72.119019][ T1163] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.119048][ T1163] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.119074][ T1163] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.119094][ T1163] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 72.119117][ T1163] ? unwind_next_frame+0x3be/0x2090 [ 72.119146][ T1163] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 72.119169][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 72.119203][ T1163] ? stack_trace_save+0x8e/0xc0 [ 72.119225][ T1163] ? __pfx_stack_trace_save+0x10/0x10 [ 72.119251][ T1163] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 72.119274][ T1163] cfg80211_inform_bss_data+0x230/0x3b60 [ 72.119275][ T6187] FAULT_INJECTION: forcing a failure. [ 72.119275][ T6187] name failslab, interval 1, probability 10, space 0, times 41 [ 72.119293][ T1163] ? __kmalloc_noprof+0x322/0x820 [ 72.119312][ T1163] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.119338][ T1163] ? cfg80211_wiphy_work+0x2b7/0x550 [ 72.119360][ T1163] ? process_one_work+0xa23/0x1940 [ 72.119377][ T1163] ? worker_thread+0x5ef/0xe50 [ 72.119398][ T1163] ? kthread+0x370/0x450 [ 72.119418][ T1163] ? ret_from_fork+0x72b/0xd50 [ 72.119437][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 72.119457][ T1163] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 72.119485][ T1163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.119511][ T1163] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 72.119537][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.119561][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.119594][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.119619][ T1163] ? find_held_lock+0x2b/0x80 [ 72.119634][ T1163] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 72.119659][ T1163] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 72.119691][ T1163] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.119721][ T1163] ieee80211_bss_info_update+0x310/0xab0 [ 72.119743][ T1163] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 72.119780][ T1163] ? rcu_is_watching+0x12/0xc0 [ 72.119800][ T1163] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.119822][ T1163] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 72.119846][ T1163] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 72.119881][ T1163] ieee80211_iface_work+0xa9a/0x1070 [ 72.119923][ T1163] cfg80211_wiphy_work+0x2b7/0x550 [ 72.119945][ T1163] process_one_work+0xa23/0x1940 [ 72.119980][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.120010][ T1163] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 72.120036][ T1163] worker_thread+0x5ef/0xe50 [ 72.120062][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.120086][ T1163] ? kthread+0x13a/0x450 [ 72.120105][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.120127][ T1163] kthread+0x370/0x450 [ 72.120148][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.120165][ T1163] ret_from_fork+0x72b/0xd50 [ 72.120186][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.120207][ T1163] ? __switch_to+0x800/0x10f0 [ 72.120232][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.120255][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.120281][ T1163] [ 72.120290][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 72.120308][ T6134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.120317][ T6134] Call Trace: [ 72.120322][ T6134] [ 72.120328][ T6134] dump_stack_lvl+0x100/0x190 [ 72.120346][ T6134] should_fail_ex.cold+0x5/0xa [ 72.120363][ T6134] should_failslab+0xc2/0x120 [ 72.120383][ T6134] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.120403][ T6134] ? skb_clone+0x190/0x400 [ 72.120427][ T6134] skb_clone+0x190/0x400 [ 72.120447][ T6134] netlink_broadcast_filtered+0xb22/0xf20 [ 72.120473][ T6134] netlink_sendmsg+0xa16/0xda0 [ 72.120493][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.120512][ T6134] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.120532][ T6134] ____sys_sendmsg+0xa4d/0xbe0 [ 72.120546][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.120564][ T6134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.120588][ T6134] ___sys_sendmsg+0x190/0x1e0 [ 72.120605][ T6134] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.120643][ T6134] ? do_sys_openat2+0x159/0x1e0 [ 72.120663][ T6134] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.120686][ T6134] __sys_sendmsg+0x160/0x210 [ 72.120706][ T6134] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.120738][ T6134] do_syscall_64+0x115/0x840 [ 72.120755][ T6134] ? clear_bhb_loop+0x40/0x90 [ 72.120773][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.120788][ T6134] RIP: 0033:0x7fbe0eea7407 [ 72.120801][ T6134] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 72.120816][ T6134] RSP: 002b:00007ffe762e8ea0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 72.120829][ T6134] RAX: ffffffffffffffda RBX: 00007fbe0f5a7880 RCX: 00007fbe0eea7407 [ 72.120839][ T6134] RDX: 0000000000000000 RSI: 00007ffe762e8f00 RDI: 000000000000000c [ 72.120848][ T6134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.120856][ T6134] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000c5 [ 72.120866][ T6134] R13: 0000555707cbe650 R14: 0000000000000000 R15: 0000000000000000 [ 72.120886][ T6134] [ 72.121040][ T6134] udevd[6134]: failed to send result of seq 11281 to main daemon: No buffer space available [ 72.121547][ T5457] FAULT_INJECTION: forcing a failure. [ 72.121547][ T5457] name failslab, interval 1, probability 10, space 0, times 38 [ 72.121569][ T5457] CPU: 0 UID: 0 PID: 5457 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 72.121587][ T5457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.121597][ T5457] Call Trace: [ 72.121602][ T5457] [ 72.121609][ T5457] dump_stack_lvl+0x100/0x190 [ 72.121626][ T5457] should_fail_ex.cold+0x5/0xa [ 72.121645][ T5457] should_failslab+0xc2/0x120 [ 72.121667][ T5457] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.121688][ T5457] ? __alloc_skb+0x5b7/0x710 [ 72.121707][ T5457] ? __alloc_skb+0x140/0x710 [ 72.121727][ T5457] __alloc_skb+0x140/0x710 [ 72.121746][ T5457] ? __alloc_skb+0x5b7/0x710 [ 72.121771][ T5457] ? __pfx___alloc_skb+0x10/0x10 [ 72.121791][ T5457] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.121808][ T5457] ? lockdep_hardirqs_on+0x78/0x100 [ 72.121824][ T5457] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.121845][ T5457] alloc_skb_with_frags+0xdd/0x760 [ 72.121867][ T5457] ? netlink_recvmsg+0x6b6/0xa90 [ 72.121884][ T5457] ? __pfx_netlink_recvmsg+0x10/0x10 [ 72.121903][ T5457] sock_alloc_send_pskb+0x801/0x980 [ 72.121920][ T5457] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 72.121942][ T5457] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 72.121986][ T5457] ? ____sys_recvmsg+0x36b/0x670 [ 72.122006][ T5457] unix_dgram_sendmsg+0x3c7/0x1810 [ 72.122029][ T5457] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 72.122056][ T5457] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 72.122080][ T5457] ? ___sys_recvmsg+0x177/0x1a0 [ 72.122094][ T5457] ? kfree+0x1e5/0x6c0 [ 72.122107][ T5457] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 72.122134][ T5457] ? apparmor_socket_sendmsg+0x15b/0x270 [ 72.122155][ T5457] __sys_sendto+0x48b/0x4e0 [ 72.122173][ T5457] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 72.122191][ T5457] ? __pfx___sys_sendto+0x10/0x10 [ 72.122227][ T5457] ? find_held_lock+0x2b/0x80 [ 72.122247][ T5457] ? __task_pid_nr_ns+0x1ca/0x510 [ 72.122264][ T5457] ? __task_pid_nr_ns+0x1ca/0x510 [ 72.122287][ T5457] __x64_sys_sendto+0xe0/0x1c0 [ 72.122307][ T5457] ? do_syscall_64+0x90/0x840 [ 72.122326][ T5457] ? lockdep_hardirqs_on+0x78/0x100 [ 72.122345][ T5457] do_syscall_64+0x115/0x840 [ 72.122362][ T5457] ? clear_bhb_loop+0x40/0x90 [ 72.122379][ T5457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.122396][ T5457] RIP: 0033:0x7f14175de407 [ 72.122410][ T5457] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 72.122427][ T5457] RSP: 002b:00007ffc98dbeed0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 72.122442][ T5457] RAX: ffffffffffffffda RBX: 00007f1417554780 RCX: 00007f14175de407 [ 72.122451][ T5457] RDX: 000000000000003f RSI: 00007ffc98dbf010 RDI: 0000000000000003 [ 72.122457][ T5457] RBP: 00007ffc98dbf440 R08: 0000000000000000 R09: 0000000000000000 [ 72.122467][ T5457] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc98dbf890 [ 72.122478][ T5457] R13: 00007ffc98dbf010 R14: 000000000000001d R15: 00007ffc98dbf010 [ 72.122501][ T5457] [ 72.122510][ T6187] CPU: 2 UID: 0 PID: 6187 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.122525][ T6187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.122532][ T6187] Call Trace: [ 72.122536][ T6187] [ 72.122541][ T6187] dump_stack_lvl+0x100/0x190 [ 72.122554][ T6187] should_fail_ex.cold+0x5/0xa [ 72.122566][ T6187] should_failslab+0xc2/0x120 [ 72.122581][ T6187] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.122594][ T6187] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 72.122605][ T6187] ? mm_alloc+0x1b/0x60 [ 72.122619][ T6187] mm_alloc+0x1b/0x60 [ 72.122630][ T6187] alloc_bprm+0x2ba/0x9d0 [ 72.122646][ T6187] ? do_getname_kernel+0x1be/0x250 [ 72.122660][ T6187] kernel_execve+0x8f/0x3a0 [ 72.122684][ T6187] call_usermodehelper_exec_async+0x239/0x4b0 [ 72.122703][ T6187] ? lockdep_hardirqs_on+0x78/0x100 [ 72.122716][ T6187] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.122734][ T6187] ret_from_fork+0x72b/0xd50 [ 72.122747][ T6187] ? __pfx_ret_from_fork+0x10/0x10 [ 72.122761][ T6187] ? native_load_gs_index+0x1e/0xc0 [ 72.122777][ T6187] ? __switch_to+0x800/0x10f0 [ 72.122794][ T6187] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.122813][ T6187] ret_from_fork_asm+0x1a/0x30 [ 72.122834][ T6187] [ 72.123229][ T37] FAULT_INJECTION: forcing a failure. [ 72.123229][ T37] name failslab, interval 1, probability 10, space 0, times 36 [ 72.151579][ T5747] Bluetooth: hci5: command tx timeout [ 72.152745][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.152768][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.152778][ T37] Workqueue: events_unbound call_usermodehelper_exec_work [ 72.152809][ T37] Call Trace: [ 72.152815][ T37] [ 72.152823][ T37] dump_stack_lvl+0x100/0x190 [ 72.152843][ T37] should_fail_ex.cold+0x5/0xa [ 72.152863][ T37] should_failslab+0xc2/0x120 [ 72.152881][ T37] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.152903][ T37] ? alloc_vmap_area+0x182f/0x2bb0 [ 72.152928][ T37] alloc_vmap_area+0x182f/0x2bb0 [ 72.152955][ T37] ? kasan_save_track+0x14/0x30 [ 72.152971][ T37] ? __kasan_kmalloc+0xaa/0xb0 [ 72.152991][ T37] ? __pfx_alloc_vmap_area+0x10/0x10 [ 72.153014][ T37] ? __get_vm_area_node+0x101/0x330 [ 72.153040][ T37] __get_vm_area_node+0x1ca/0x330 [ 72.153063][ T37] __vmalloc_node_range_noprof+0x228/0x1630 [ 72.153086][ T37] ? kernel_clone+0x176/0x9d0 [ 72.153113][ T37] ? kernel_clone+0x176/0x9d0 [ 72.153138][ T37] ? __memcg_slab_post_alloc_hook+0x1bb/0x1160 [ 72.153159][ T37] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.153190][ T37] ? trace_kmem_cache_alloc+0xdd/0x100 [ 72.153217][ T37] ? kernel_clone+0x176/0x9d0 [ 72.153234][ T37] __vmalloc_node_noprof+0xad/0xf0 [ 72.153255][ T37] ? kernel_clone+0x176/0x9d0 [ 72.153282][ T37] copy_process+0x7fb/0x8030 [ 72.153302][ T37] ? _raw_spin_unlock+0x28/0x50 [ 72.153329][ T37] ? __pfx_copy_process+0x10/0x10 [ 72.153345][ T37] ? __lock_acquire+0x49f/0x1a40 [ 72.153381][ T37] kernel_clone+0x176/0x9d0 [ 72.153402][ T37] ? __pfx_kernel_clone+0x10/0x10 [ 72.153418][ T37] ? __lock_acquire+0x49f/0x1a40 [ 72.153444][ T37] ? look_up_lock_class+0x55/0x120 [ 72.153467][ T37] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.153495][ T37] user_mode_thread+0xcc/0x110 [ 72.153515][ T37] ? __pfx_user_mode_thread+0x10/0x10 [ 72.153533][ T37] ? find_held_lock+0x2b/0x80 [ 72.153555][ T37] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.153584][ T37] ? __pfx_kernel_sigaction+0x10/0x10 [ 72.153613][ T37] call_usermodehelper_exec_work+0x6b/0x180 [ 72.153635][ T37] process_one_work+0xa23/0x1940 [ 72.153667][ T37] ? __pfx_process_one_work+0x10/0x10 [ 72.153697][ T37] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 72.153726][ T37] worker_thread+0x5ef/0xe50 [ 72.153751][ T37] ? __pfx_worker_thread+0x10/0x10 [ 72.153775][ T37] ? kthread+0x13a/0x450 [ 72.153795][ T37] ? __pfx_worker_thread+0x10/0x10 [ 72.153816][ T37] kthread+0x370/0x450 [ 72.153836][ T37] ? __pfx_kthread+0x10/0x10 [ 72.153854][ T37] ret_from_fork+0x72b/0xd50 [ 72.153876][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 72.153897][ T37] ? __switch_to+0x800/0x10f0 [ 72.153922][ T37] ? __pfx_kthread+0x10/0x10 [ 72.153939][ T37] ret_from_fork_asm+0x1a/0x30 [ 72.153995][ T37] [ 72.154147][ T37] ------------[ cut here ]------------ [ 72.161424][ C1] FAULT_INJECTION: forcing a failure. [ 72.161424][ C1] name failslab, interval 1, probability 10, space 0, times 32 [ 72.162406][ T37] ret [ 72.164005][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 72.164025][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.164036][ C1] Call Trace: [ 72.164042][ C1] [ 72.164049][ C1] dump_stack_lvl+0x100/0x190 [ 72.164071][ C1] should_fail_ex.cold+0x5/0xa [ 72.164090][ C1] should_failslab+0xc2/0x120 [ 72.164112][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.164135][ C1] ? __alloc_skb+0x140/0x710 [ 72.164160][ C1] __alloc_skb+0x140/0x710 [ 72.164179][ C1] ? __alloc_skb+0x5b7/0x710 [ 72.164198][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 72.164219][ C1] ? lock_acquire+0x1b9/0x370 [ 72.164246][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 72.164272][ C1] wg_packet_send_keepalive+0x7a/0x300 [ 72.164292][ C1] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 72.164317][ C1] call_timer_fn+0x19a/0x610 [ 72.164341][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 72.164366][ C1] ? __run_timers+0x747/0xb00 [ 72.164389][ C1] ? rcu_is_watching+0x12/0xc0 [ 72.164411][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 72.164435][ C1] __run_timers+0x757/0xb00 [ 72.164464][ C1] ? __pfx___run_timers+0x10/0x10 [ 72.164495][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 72.164516][ C1] run_timer_base+0x114/0x190 [ 72.164539][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 72.164565][ C1] run_timer_softirq+0x1a/0x50 [ 72.164587][ C1] handle_softirqs+0x1ea/0x9b0 [ 72.164609][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 72.164626][ C1] ? _raw_spin_unlock+0x28/0x50 [ 72.164647][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.164669][ C1] __irq_exit_rcu+0x162/0x210 [ 72.164686][ C1] irq_exit_rcu+0x9/0x30 [ 72.164703][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.164721][ C1] [ 72.164726][ C1] [ 72.164733][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.164752][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.164771][ C1] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.164786][ C1] RSP: 0018:ffffc9000046fe00 EFLAGS: 00000202 [ 72.164800][ C1] RAX: 000000000006443d RBX: ffff88801cb42540 RCX: ffffffff8bb872d5 [ 72.164812][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.164823][ C1] RBP: ffffed10039684a8 R08: 0000000000000001 R09: ffffed100566678d [ 72.164834][ C1] R10: ffff88802b333c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.164844][ C1] R13: 0000000000000000 R14: 1ffff9200008dfc4 R15: dffffc0000000000 [ 72.164861][ C1] ? ct_kernel_exit+0x125/0x180 [ 72.164884][ C1] default_idle+0x9/0x10 [ 72.164903][ C1] default_idle_call+0x6c/0xb0 [ 72.164923][ C1] do_idle+0x3a7/0x5b0 [ 72.164942][ C1] ? __pfx_do_idle+0x10/0x10 [ 72.164958][ C1] ? rcu_is_watching+0x12/0xc0 [ 72.164976][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.164994][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 72.165016][ C1] cpu_startup_entry+0x4f/0x60 [ 72.165034][ C1] start_secondary+0x21d/0x2d0 [ 72.165053][ C1] ? __pfx_start_secondary+0x10/0x10 [ 72.165075][ C1] common_startup_64+0x13e/0x158 [ 72.165108][ C1] [ 72.181785][ T1163] FAULT_INJECTION: forcing a failure. [ 72.181785][ T1163] name failslab, interval 1, probability 10, space 0, times 30 [ 72.182388][ T37] WARNING: mm/vmalloc.c:1820 at alloc_vmap_area+0x17f6/0x2bb0, CPU#0: kworker/u33:1/37 [ 72.184670][ T1163] CPU: 3 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.184686][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.184695][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.184714][ T1163] Call Trace: [ 72.184719][ T1163] [ 72.184724][ T1163] dump_stack_lvl+0x100/0x190 [ 72.184737][ T1163] should_fail_ex.cold+0x5/0xa [ 72.184750][ T1163] should_failslab+0xc2/0x120 [ 72.184765][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.184780][ T1163] ? __alloc_skb+0x140/0x710 [ 72.184801][ T1163] __alloc_skb+0x140/0x710 [ 72.184814][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.184827][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.184843][ T1163] ? kfree_skbmem+0x19f/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 72.184856][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.184877][ T1163] process_one_work+0xa23/0x1940 [ 72.184898][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.184917][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.184934][ T1163] worker_thread+0x5ef/0xe50 [ 72.184953][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.184969][ T1163] ? kthread+0x13a/0x450 [ 72.184982][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.184997][ T1163] kthread+0x370/0x450 [ 72.185011][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.185026][ T1163] ret_from_fork+0x72b/0xd50 [ 72.185042][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.185056][ T1163] ? __switch_to+0x800/0x10f0 [ 72.185073][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.185088][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.185109][ T1163] [ 72.191610][ T1163] FAULT_INJECTION: forcing a failure. [ 72.191610][ T1163] name failslab, interval 1, probability 10, space 0, times 27 [ 72.193450][ T37] Modules linked in: [ 72.195912][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.195934][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.195947][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.195975][ T1163] Call Trace: [ 72.195982][ T1163] [ 72.195989][ T1163] dump_stack_lvl+0x100/0x190 [ 72.196013][ T1163] should_fail_ex.cold+0x5/0xa [ 72.196033][ T1163] should_failslab+0xc2/0x120 [ 72.196056][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.196079][ T1163] ? __alloc_skb+0x140/0x710 [ 72.196104][ T1163] __alloc_skb+0x140/0x710 [ 72.196123][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.196143][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.196163][ T1163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.196178][ T1163] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.196197][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.196231][ T1163] process_one_work+0xa23/0x1940 [ 72.196265][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.196295][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.196320][ T1163] worker_thread+0x5ef/0xe50 [ 72.196349][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.196373][ T1163] ? kthread+0x13a/0x450 [ 72.196393][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.196415][ T1163] kthread+0x370/0x450 [ 72.196435][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.196458][ T1163] ret_from_fork+0x72b/0xd50 [ 72.196480][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.196497][ T1163] ? __switch_to+0x800/0x10f0 [ 72.196520][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.196542][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.196576][ T1163] [ 72.196715][ T1163] FAULT_INJECTION: forcing a failure. [ 72.196715][ T1163] name failslab, interval 1, probability 10, space 0, times 25 [ 72.198714][ T37] [ 72.201507][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.201523][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.201531][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.201548][ T1163] Call Trace: [ 72.201552][ T1163] [ 72.201557][ T1163] dump_stack_lvl+0x100/0x190 [ 72.201570][ T1163] should_fail_ex.cold+0x5/0xa [ 72.201582][ T1163] should_failslab+0xc2/0x120 [ 72.201598][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.201613][ T1163] ? __alloc_skb+0x140/0x710 [ 72.201653][ T1163] __alloc_skb+0x140/0x710 [ 72.201666][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.201680][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.201692][ T1163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.201705][ T1163] ? __pfx___might_resched+0x10/0x10 [ 72.201724][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.201745][ T1163] process_one_work+0xa23/0x1940 [ 72.201770][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.201789][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.201806][ T1163] worker_thread+0x5ef/0xe50 [ 72.201825][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.201841][ T1163] ? kthread+0x13a/0x450 [ 72.201854][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.201869][ T1163] kthread+0x370/0x450 [ 72.201882][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.201897][ T1163] ret_from_fork+0x72b/0xd50 [ 72.201911][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.201925][ T1163] ? __switch_to+0x800/0x10f0 [ 72.201942][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.201973][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.201995][ T1163] [ 72.211169][ C2] FAULT_INJECTION: forcing a failure. [ 72.211169][ C2] name failslab, interval 1, probability 10, space 0, times 23 [ 72.211239][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 72.211255][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.211262][ C2] Call Trace: [ 72.211267][ C2] [ 72.211271][ C2] dump_stack_lvl+0x100/0x190 [ 72.211288][ C2] should_fail_ex.cold+0x5/0xa [ 72.211301][ C2] should_failslab+0xc2/0x120 [ 72.211317][ C2] __kmalloc_noprof+0xfc/0x820 [ 72.211331][ C2] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.211345][ C3] FAULT_INJECTION: forcing a failure. [ 72.211345][ C3] name failslab, interval 1, probability 10, space 0, times 23 [ 72.211353][ C2] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.211387][ C2] ? ct_nmi_exit+0xd5/0x1b0 [ 72.211403][ C2] ? lock_acquire+0x1b9/0x370 [ 72.211420][ C2] ? find_held_lock+0x2b/0x80 [ 72.211434][ C2] ? __kfree_rcu_sheaf+0x195/0x730 [ 72.211448][ C2] ? __kfree_rcu_sheaf+0x195/0x730 [ 72.211462][ C2] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 72.211495][ C2] ? kvfree_call_rcu+0x1be/0x4f0 [ 72.211515][ C2] ? __asan_memcpy+0x3c/0x60 [ 72.211537][ C2] ieee80211_inform_bss+0x159/0x1170 [ 72.211564][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.211595][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.211622][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.211644][ C2] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 72.211668][ C2] ? __lock_acquire+0x49f/0x1a40 [ 72.211700][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 72.211734][ C2] ? unwind_next_frame+0x3c8/0x2090 [ 72.211766][ C2] ? common_startup_64+0x13e/0x158 [ 72.211796][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 72.211812][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 72.211831][ C2] ? __lock_acquire+0x49f/0x1a40 [ 72.211850][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 72.211870][ C2] ? lock_acquire+0x1b9/0x370 [ 72.211895][ C2] ? find_held_lock+0x2b/0x80 [ 72.211915][ C2] ? unwind_next_frame+0x3be/0x2090 [ 72.211939][ C2] ? unwind_next_frame+0x3be/0x2090 [ 72.211964][ C2] ? __lock_acquire+0x49f/0x1a40 [ 72.211984][ C2] ? common_startup_64+0x13e/0x158 [ 72.212016][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.212047][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 72.212070][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 72.212095][ C2] ? rcu_is_watching+0x12/0xc0 [ 72.212115][ C2] ? trace_kmem_cache_alloc+0xdd/0x100 [ 72.212138][ C2] ? __netdev_alloc_skb+0x631/0x960 [ 72.212164][ C2] ? __netdev_alloc_skb+0x631/0x960 [ 72.212186][ C2] ? __netdev_alloc_skb+0x252/0x960 [ 72.212209][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.212233][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 72.212258][ C2] ? __lock_acquire+0x49f/0x1a40 [ 72.212287][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 72.212310][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 72.212328][ C2] ? do_raw_spin_lock+0x128/0x260 [ 72.212355][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 72.212375][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 72.212403][ C2] ieee80211_rx_list+0xf19/0x2160 [ 72.212429][ C2] ? lock_acquire+0x1b9/0x370 [ 72.212454][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 72.212479][ C2] ieee80211_rx_napi+0xdc/0x400 [ 72.212497][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 72.212515][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 72.212535][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.212557][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 72.212584][ C2] tasklet_action_common+0x2de/0x3d0 [ 72.212609][ C2] handle_softirqs+0x1ea/0x9b0 [ 72.212632][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 72.212651][ C2] ? _raw_spin_unlock+0x28/0x50 [ 72.212669][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.212694][ C2] __irq_exit_rcu+0x162/0x210 [ 72.212713][ C2] irq_exit_rcu+0x9/0x30 [ 72.212731][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.212756][ C2] [ 72.212762][ C2] [ 72.212769][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.212789][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.212810][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.212826][ C2] RSP: 0000:ffffc9000047fe00 EFLAGS: 00000206 [ 72.212841][ C2] RAX: 0000000000071d33 RBX: ffff88801cbe4a80 RCX: ffffffff8bb872d5 [ 72.212854][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.212865][ C2] RBP: ffffed100397c950 R08: 0000000000000001 R09: ffffed100568678d [ 72.212877][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.212888][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 72.212906][ C2] ? ct_kernel_exit+0x125/0x180 [ 72.212928][ C2] default_idle+0x9/0x10 [ 72.212949][ C2] default_idle_call+0x6c/0xb0 [ 72.212971][ C2] do_idle+0x3a7/0x5b0 [ 72.212990][ C2] ? __pfx_do_idle+0x10/0x10 [ 72.213008][ C2] ? rcu_is_watching+0x12/0xc0 [ 72.213027][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.213039][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 72.213054][ C2] cpu_startup_entry+0x4f/0x60 [ 72.213067][ C2] start_secondary+0x21d/0x2d0 [ 72.213080][ C2] ? __pfx_start_secondary+0x10/0x10 [ 72.213095][ C2] common_startup_64+0x13e/0x158 [ 72.213117][ C2] [ 72.215075][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.216615][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 72.216639][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.216649][ C3] Call Trace: [ 72.216657][ C3] [ 72.216664][ C3] dump_stack_lvl+0x100/0x190 [ 72.216689][ C3] should_fail_ex.cold+0x5/0xa [ 72.216710][ C3] should_failslab+0xc2/0x120 [ 72.216734][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.216758][ C3] ? __alloc_skb+0x140/0x710 [ 72.216785][ C3] __alloc_skb+0x140/0x710 [ 72.216812][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.216833][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.216856][ C3] ? do_raw_spin_lock+0x128/0x260 [ 72.216880][ C3] skb_copy+0x1ca/0x3a0 [ 72.216905][ C3] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 72.216938][ C3] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 72.216963][ C3] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 72.216988][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.217018][ C3] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 72.217045][ C3] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 72.217072][ C3] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 72.217103][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.217125][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.217152][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.217177][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.217203][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.217224][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.217243][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.217273][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.217297][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.217321][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.217340][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.217358][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.217384][ C3] __irq_exit_rcu+0x162/0x210 [ 72.217403][ C3] irq_exit_rcu+0x9/0x30 [ 72.217420][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.217442][ C3] [ 72.217447][ C3] [ 72.217454][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.217474][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.217495][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.217512][ C3] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000202 [ 72.217527][ C3] RAX: 00000000000649cb RBX: ffff88801cbe2540 RCX: ffffffff8bb872d5 [ 72.217540][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.217552][ C3] RBP: ffffed100397c4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 72.217563][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.217575][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 72.217592][ C3] ? ct_kernel_exit+0x125/0x180 [ 72.217617][ C3] default_idle+0x9/0x10 [ 72.217638][ C3] default_idle_call+0x6c/0xb0 [ 72.217661][ C3] do_idle+0x3a7/0x5b0 [ 72.217680][ C3] ? __pfx_do_idle+0x10/0x10 [ 72.217698][ C3] ? rcu_is_watching+0x12/0xc0 [ 72.217718][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.217736][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 72.217760][ C3] cpu_startup_entry+0x4f/0x60 [ 72.217780][ C3] start_secondary+0x21d/0x2d0 [ 72.217805][ C3] ? __pfx_start_secondary+0x10/0x10 [ 72.217829][ C3] common_startup_64+0x13e/0x158 [ 72.217865][ C3] [ 72.218052][ T45] FAULT_INJECTION: forcing a failure. [ 72.218052][ T45] name failslab, interval 1, probability 10, space 0, times 21 [ 72.219434][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.221386][ T45] CPU: 3 UID: 0 PID: 45 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 72.221407][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.221418][ T45] Workqueue: events_unbound cfg80211_wiphy_work [ 72.221445][ T45] Call Trace: [ 72.221451][ T45] [ 72.221458][ T45] dump_stack_lvl+0x100/0x190 [ 72.221480][ T45] should_fail_ex.cold+0x5/0xa [ 72.221499][ T45] should_failslab+0xc2/0x120 [ 72.221522][ T45] __kmalloc_noprof+0xfc/0x820 [ 72.221542][ T45] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.221564][ T45] ? ieee80211_bss_info_update+0x310/0xab0 [ 72.221588][ T45] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 72.221611][ T45] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.221642][ T45] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.221671][ T45] ? __lock_acquire+0x49f/0x1a40 [ 72.221706][ T45] ? do_raw_spin_lock+0x128/0x260 [ 72.221725][ T45] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 72.221750][ T45] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.221776][ T45] ? mark_held_locks+0x40/0x70 [ 72.221805][ T45] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.221825][ T45] ? __asan_memcpy+0x3c/0x60 [ 72.221845][ T45] ieee80211_inform_bss+0x159/0x1170 [ 72.221874][ T45] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.221903][ T45] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.221929][ T45] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.221972][ T45] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 72.221997][ T45] ? unwind_next_frame+0x3be/0x2090 [ 72.222026][ T45] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 72.222049][ T45] ? ret_from_fork_asm+0x1a/0x30 [ 72.222086][ T45] ? stack_trace_save+0x8e/0xc0 [ 72.222108][ T45] ? __pfx_stack_trace_save+0x10/0x10 [ 72.222134][ T45] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 72.222157][ T45] cfg80211_inform_bss_data+0x230/0x3b60 [ 72.222180][ T45] ? __kmalloc_noprof+0x322/0x820 [ 72.222199][ T45] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.222225][ T45] ? cfg80211_wiphy_work+0x2b7/0x550 [ 72.222246][ T45] ? process_one_work+0xa23/0x1940 [ 72.222269][ T45] ? worker_thread+0x5ef/0xe50 [ 72.222290][ T45] ? kthread+0x370/0x450 [ 72.222310][ T45] ? ret_from_fork+0x72b/0xd50 [ 72.222329][ T45] ? ret_from_fork_asm+0x1a/0x30 [ 72.222356][ T45] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 72.222384][ T45] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.222409][ T45] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 72.222439][ T45] ? __lock_acquire+0x49f/0x1a40 [ 72.222463][ T45] ? __lock_acquire+0x49f/0x1a40 [ 72.222497][ T45] ? __lock_acquire+0x49f/0x1a40 [ 72.222522][ T45] ? find_held_lock+0x2b/0x80 [ 72.222541][ T45] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 72.222565][ T45] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 72.222597][ T45] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.222627][ T45] ieee80211_bss_info_update+0x310/0xab0 [ 72.222654][ T45] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 72.222685][ T45] ? rcu_is_watching+0x12/0xc0 [ 72.222705][ T45] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.222727][ T45] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 72.222756][ T45] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 72.222796][ T45] ieee80211_iface_work+0xa9a/0x1070 [ 72.222826][ T45] cfg80211_wiphy_work+0x2b7/0x550 [ 72.222853][ T45] process_one_work+0xa23/0x1940 [ 72.222886][ T45] ? __pfx_process_one_work+0x10/0x10 [ 72.222916][ T45] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 72.222942][ T45] worker_thread+0x5ef/0xe50 [ 72.222974][ T45] ? kthread+0x13a/0x450 [ 72.222994][ T45] ? __pfx_worker_thread+0x10/0x10 [ 72.223016][ T45] kthread+0x370/0x450 [ 72.223036][ T45] ? __pfx_kthread+0x10/0x10 [ 72.223059][ T45] ret_from_fork+0x72b/0xd50 [ 72.223080][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 72.223101][ T45] ? __switch_to+0x800/0x10f0 [ 72.223126][ T45] ? __pfx_kthread+0x10/0x10 [ 72.223149][ T45] ret_from_fork_asm+0x1a/0x30 [ 72.223183][ T45] [ 72.231633][ T1163] FAULT_INJECTION: forcing a failure. [ 72.231633][ T1163] name failslab, interval 1, probability 10, space 0, times 20 [ 72.232807][ T37] Workqueue: events_unbound call_usermodehelper_exec_work [ 72.234687][ T1163] CPU: 3 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.234711][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.234723][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.234749][ T1163] Call Trace: [ 72.234756][ T1163] [ 72.234764][ T1163] dump_stack_lvl+0x100/0x190 [ 72.234784][ T1163] should_fail_ex.cold+0x5/0xa [ 72.234809][ T1163] should_failslab+0xc2/0x120 [ 72.234833][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.234856][ T1163] ? __alloc_skb+0x140/0x710 [ 72.234881][ T1163] __alloc_skb+0x140/0x710 [ 72.234901][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.234921][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.234944][ T1163] ? kfree_skbmem+0x19f/0x210 [ 72.234963][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.234995][ T1163] process_one_work+0xa23/0x1940 [ 72.235028][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.235058][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.235084][ T1163] worker_thread+0x5ef/0xe50 [ 72.235113][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.235137][ T1163] ? kthread+0x13a/0x450 [ 72.235157][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.235178][ T1163] kthread+0x370/0x450 [ 72.235197][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.235219][ T1163] ret_from_fork+0x72b/0xd50 [ 72.235241][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.235262][ T1163] ? __switch_to+0x800/0x10f0 [ 72.235287][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.235309][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.235342][ T1163] [ 72.235687][ T1163] FAULT_INJECTION: forcing a failure. [ 72.235687][ T1163] name failslab, interval 1, probability 10, space 0, times 18 [ 72.236420][ T37] [ 72.236429][ T37] RIP: 0010:alloc_vmap_area+0x17f6/0x2bb0 [ 72.238246][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.238262][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.238270][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.238288][ T1163] Call Trace: [ 72.238293][ T1163] [ 72.238297][ T1163] dump_stack_lvl+0x100/0x190 [ 72.238311][ T1163] should_fail_ex.cold+0x5/0xa [ 72.238324][ T1163] should_failslab+0xc2/0x120 [ 72.238340][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.238356][ T1163] ? __alloc_skb+0x140/0x710 [ 72.238382][ T1163] __alloc_skb+0x140/0x710 [ 72.238402][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.238421][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.238440][ T1163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.238459][ T1163] ? __pfx___might_resched+0x10/0x10 [ 72.238489][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.238564][ T1163] process_one_work+0xa23/0x1940 [ 72.238599][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.238630][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.238655][ T1163] worker_thread+0x5ef/0xe50 [ 72.238684][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.238709][ T1163] ? kthread+0x13a/0x450 [ 72.238722][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.238741][ T1163] kthread+0x370/0x450 [ 72.238766][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.238789][ T1163] ret_from_fork+0x72b/0xd50 [ 72.238808][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.238821][ T1163] ? __switch_to+0x800/0x10f0 [ 72.238839][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.238862][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.238896][ T1163] [ 72.313422][ C2] FAULT_INJECTION: forcing a failure. [ 72.313422][ C2] name failslab, interval 1, probability 10, space 0, times 14 [ 72.313710][ C3] FAULT_INJECTION: forcing a failure. [ 72.313710][ C3] name failslab, interval 1, probability 10, space 0, times 13 [ 72.313743][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 72.313766][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.313777][ C3] Call Trace: [ 72.313783][ C3] [ 72.313792][ C3] dump_stack_lvl+0x100/0x190 [ 72.313819][ C3] should_fail_ex.cold+0x5/0xa [ 72.313842][ C3] should_failslab+0xc2/0x120 [ 72.313868][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.313894][ C3] ? __alloc_skb+0x140/0x710 [ 72.313923][ C3] __alloc_skb+0x140/0x710 [ 72.313945][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.314011][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.314034][ C3] ? do_raw_spin_lock+0x128/0x260 [ 72.314058][ C3] skb_copy+0x1ca/0x3a0 [ 72.314083][ C3] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 72.314119][ C3] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 72.314144][ C3] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 72.314171][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.314201][ C3] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 72.314228][ C3] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 72.314254][ C3] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 72.314286][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.314309][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.314338][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.314364][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.314393][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.314415][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.314436][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.314467][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.314489][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.314508][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.314525][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.314539][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.314560][ C3] __irq_exit_rcu+0x162/0x210 [ 72.314577][ C3] irq_exit_rcu+0x9/0x30 [ 72.314593][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.314611][ C3] [ 72.314616][ C3] [ 72.314622][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.314640][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.314666][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.314682][ C3] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000206 [ 72.314695][ C3] RAX: 0000000000064b33 RBX: ffff88801cbe2540 RCX: ffffffff8bb872d5 [ 72.314705][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.314715][ C3] RBP: ffffed100397c4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 72.314726][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.314735][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 72.314751][ C3] ? ct_kernel_exit+0x125/0x180 [ 72.314773][ C3] default_idle+0x9/0x10 [ 72.314792][ C3] default_idle_call+0x6c/0xb0 [ 72.314812][ C3] do_idle+0x3a7/0x5b0 [ 72.314829][ C3] ? __pfx_do_idle+0x10/0x10 [ 72.314844][ C3] ? rcu_is_watching+0x12/0xc0 [ 72.314864][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.314880][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 72.314902][ C3] cpu_startup_entry+0x4f/0x60 [ 72.314921][ C3] start_secondary+0x21d/0x2d0 [ 72.314938][ C3] ? __pfx_start_secondary+0x10/0x10 [ 72.314965][ C3] common_startup_64+0x13e/0x158 [ 72.315004][ C3] [ 72.315153][ T37] Code: 48 8d 3d 0d d4 c0 0e 8b 74 24 10 67 48 0f b9 3a c7 44 24 70 00 00 00 00 e9 95 ed ff ff 48 c7 c3 ea ff ff ff e8 fb b1 a2 ff 90 <0f> 0b 90 41 be 01 00 00 00 e9 ae f9 ff ff 41 be 01 00 00 00 48 c7 [ 72.316009][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 72.316035][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.316047][ C2] Call Trace: [ 72.316055][ C2] [ 72.316063][ C2] dump_stack_lvl+0x100/0x190 [ 72.316088][ C2] should_fail_ex.cold+0x5/0xa [ 72.316111][ C2] should_failslab+0xc2/0x120 [ 72.316138][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.316164][ C2] ? __alloc_skb+0x5b7/0x710 [ 72.316187][ C2] ? __alloc_skb+0x140/0x710 [ 72.316216][ C2] __alloc_skb+0x140/0x710 [ 72.316238][ C2] ? __alloc_skb+0x5b7/0x710 [ 72.316261][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 72.316286][ C2] ? lock_acquire+0x1b9/0x370 [ 72.316321][ C2] __netdev_alloc_skb+0x7a/0x960 [ 72.316349][ C2] __ieee80211_beacon_get+0xba1/0x1ee0 [ 72.316378][ C2] ? __lock_acquire+0x49f/0x1a40 [ 72.316411][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 72.316438][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 72.316471][ C2] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 72.316505][ C2] __iterate_interfaces+0x2e6/0x650 [ 72.316529][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.316555][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.316581][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.316607][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.316627][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.316647][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 72.316680][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 72.316706][ C2] handle_softirqs+0x1ea/0x9b0 [ 72.316731][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 72.316759][ C2] ? _raw_spin_unlock+0x28/0x50 [ 72.316779][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.316806][ C2] __irq_exit_rcu+0x162/0x210 [ 72.316827][ C2] irq_exit_rcu+0x9/0x30 [ 72.316847][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.316871][ C2] [ 72.316878][ C2] [ 72.316885][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.316907][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.316930][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.316949][ C2] RSP: 0000:ffffc9000047fe00 EFLAGS: 00000206 [ 72.316966][ C2] RAX: 0000000000071f4d RBX: ffff88801cbe4a80 RCX: ffffffff8bb872d5 [ 72.316980][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.316992][ C2] RBP: ffffed100397c950 R08: 0000000000000001 R09: ffffed100568678d [ 72.317005][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.317017][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 72.317037][ C2] ? ct_kernel_exit+0x125/0x180 [ 72.317066][ C2] default_idle+0x9/0x10 [ 72.317089][ C2] default_idle_call+0x6c/0xb0 [ 72.317114][ C2] do_idle+0x3a7/0x5b0 [ 72.317136][ C2] ? __pfx_do_idle+0x10/0x10 [ 72.317155][ C2] ? rcu_is_watching+0x12/0xc0 [ 72.317179][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.317200][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 72.317227][ C2] cpu_startup_entry+0x4f/0x60 [ 72.317248][ C2] start_secondary+0x21d/0x2d0 [ 72.317271][ C2] ? __pfx_start_secondary+0x10/0x10 [ 72.317299][ C2] common_startup_64+0x13e/0x158 [ 72.317340][ C2] [ 72.321532][ C0] FAULT_INJECTION: forcing a failure. [ 72.321532][ C0] name failslab, interval 1, probability 10, space 0, times 11 [ 72.321561][ C0] CPU: 0 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.321579][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.321590][ C0] Workqueue: events_unbound call_usermodehelper_exec_work [ 72.321635][ C0] Call Trace: [ 72.321642][ C0] [ 72.321650][ C0] dump_stack_lvl+0x100/0x190 [ 72.321667][ C0] should_fail_ex.cold+0x5/0xa [ 72.321687][ C0] should_failslab+0xc2/0x120 [ 72.321712][ C0] __kmalloc_noprof+0xfc/0x820 [ 72.321733][ C0] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.321754][ C0] ? ieee80211_bss_info_update+0x310/0xab0 [ 72.321779][ C0] ? ieee80211_scan_rx+0x4e6/0xb60 [ 72.321803][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.321836][ C0] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.321860][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.321886][ C0] ? handle_bug+0x16a/0x2a0 [ 72.321908][ C0] ? exc_invalid_op+0x17/0x50 [ 72.321929][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 72.321946][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.321986][ C0] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 72.322013][ C0] ? kernel_clone+0x176/0x9d0 [ 72.322033][ C0] ? user_mode_thread+0xcc/0x110 [ 72.322054][ C0] ? do_raw_spin_lock+0x128/0x260 [ 72.322072][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 72.322099][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.322125][ C0] ? mark_held_locks+0x40/0x70 [ 72.322145][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.322166][ C0] ? __asan_memcpy+0x3c/0x60 [ 72.322188][ C0] ieee80211_inform_bss+0x159/0x1170 [ 72.322217][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.322244][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.322276][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.322302][ C0] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 72.322326][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.322352][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 72.322395][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 72.322419][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 72.322445][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 72.322465][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 72.322495][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.322525][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 72.322555][ C0] ? lock_acquire+0x1b9/0x370 [ 72.322579][ C0] ? find_held_lock+0x2b/0x80 [ 72.322600][ C0] ? unwind_next_frame+0x3be/0x2090 [ 72.322624][ C0] ? unwind_next_frame+0x3be/0x2090 [ 72.322660][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.322684][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 72.322714][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.322746][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 72.322771][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 72.322796][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.322824][ C0] ? _printk+0xcf/0x110 [ 72.322839][ C0] ? show_ip+0x26/0x40 [ 72.322860][ C0] ? show_regs+0x33/0x50 [ 72.322879][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.322898][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 72.322923][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.322952][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 72.322975][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 72.322993][ C0] ? do_raw_spin_lock+0x128/0x260 [ 72.323014][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 72.323035][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 72.323063][ C0] ieee80211_rx_list+0xf19/0x2160 [ 72.323089][ C0] ? lock_acquire+0x1b9/0x370 [ 72.323109][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 72.323134][ C0] ieee80211_rx_napi+0xdc/0x400 [ 72.323152][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 72.323170][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 72.323190][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.323210][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 72.323234][ C0] tasklet_action_common+0x2de/0x3d0 [ 72.323265][ C0] handle_softirqs+0x1ea/0x9b0 [ 72.323287][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 72.323301][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.323318][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.323344][ C0] __irq_exit_rcu+0x162/0x210 [ 72.323363][ C0] irq_exit_rcu+0x9/0x30 [ 72.323381][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.323401][ C0] [ 72.323407][ C0] [ 72.323411][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.323428][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 72.323451][ C0] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 72.323468][ C0] RSP: 0018:ffffc90000606d78 EFLAGS: 00000293 [ 72.323482][ C0] RAX: ffffffff8f9af1d8 RBX: ffffffff8f9af180 RCX: ffffffff81e7f251 [ 72.323494][ C0] RDX: ffff88801d374a80 RSI: ffffffff81e7f25f RDI: ffff88801d374a80 [ 72.323506][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 72.323517][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000096ba [ 72.323523][ C0] R13: ffffffff8f9af1d8 R14: ffffc90000606df8 R15: dffffc0000000000 [ 72.323539][ C0] ? console_flush_one_record+0xab1/0xe50 [ 72.323560][ C0] ? console_flush_one_record+0xabf/0xe50 [ 72.323584][ C0] ? console_flush_one_record+0xabf/0xe50 [ 72.323610][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 72.323625][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.323656][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 72.323683][ C0] console_unlock+0x103/0x260 [ 72.323700][ C0] ? __pfx_console_unlock+0x10/0x10 [ 72.323718][ C0] ? lock_acquire+0x140/0x370 [ 72.323752][ C0] vprintk_emit+0x407/0x6b0 [ 72.323774][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 72.323796][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 72.323814][ C0] _printk+0xcf/0x110 [ 72.323831][ C0] ? __pfx__printk+0x10/0x10 [ 72.323850][ C0] ? _printk+0xcf/0x110 [ 72.323866][ C0] ? __pfx__printk+0x10/0x10 [ 72.323887][ C0] ? alloc_vmap_area+0x17cc/0x2bb0 [ 72.323907][ C0] show_opcodes+0xc2/0xe0 [ 72.323929][ C0] show_iret_regs+0x11/0x40 [ 72.323951][ C0] __show_regs+0x2b/0x70 [ 72.323976][ C0] ? dump_stack_print_info+0x18c/0x220 [ 72.324001][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.324019][ C0] show_regs+0x33/0x50 [ 72.324038][ C0] __warn.cold+0x185/0x318 [ 72.324059][ C0] __report_bug+0x30f/0x440 [ 72.324078][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.324099][ C0] ? __pfx___report_bug+0x10/0x10 [ 72.324116][ C0] ? __show_trace_log_lvl+0x28f/0x2c4 [ 72.324149][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.324172][ C0] report_bug+0xb2/0x220 [ 72.324190][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.324209][ C0] handle_bug+0x16a/0x2a0 [ 72.324233][ C0] exc_invalid_op+0x17/0x50 [ 72.324256][ C0] asm_exc_invalid_op+0x1a/0x20 [ 72.324275][ C0] RIP: 0010:alloc_vmap_area+0x17f6/0x2bb0 [ 72.324295][ C0] Code: 48 8d 3d 0d d4 c0 0e 8b 74 24 10 67 48 0f b9 3a c7 44 24 70 00 00 00 00 e9 95 ed ff ff 48 c7 c3 ea ff ff ff e8 fb b1 a2 ff 90 <0f> 0b 90 41 be 01 00 00 00 e9 ae f9 ff ff 41 be 01 00 00 00 48 c7 [ 72.324311][ C0] RSP: 0018:ffffc90000607458 EFLAGS: 00010293 [ 72.324325][ C0] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000002800 [ 72.324336][ C0] RDX: ffff88801d374a80 RSI: ffffffff8266fa65 RDI: ffffffff8e46c920 [ 72.324348][ C0] RBP: ffffc9000ee11000 R08: 00000000ffffffff R09: fffffbfff1dbda1e [ 72.324360][ C0] R10: ffffffff8eded0f3 R11: 0000000000000000 R12: 0000000000000000 [ 72.324369][ C0] R13: ffffc9000ee21000 R14: ffffe8ffffffffff R15: 0000000000000000 [ 72.324383][ C0] ? alloc_vmap_area+0x17f5/0x2bb0 [ 72.324408][ C0] ? alloc_vmap_area+0x17f5/0x2bb0 [ 72.324437][ C0] ? kasan_save_track+0x14/0x30 [ 72.324458][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 72.324478][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 72.324498][ C0] ? __get_vm_area_node+0x101/0x330 [ 72.324525][ C0] __get_vm_area_node+0x1ca/0x330 [ 72.324554][ C0] __vmalloc_node_range_noprof+0x228/0x1630 [ 72.324574][ C0] ? kernel_clone+0x176/0x9d0 [ 72.324590][ C0] ? kernel_clone+0x176/0x9d0 [ 72.324606][ C0] ? __memcg_slab_post_alloc_hook+0x1bb/0x1160 [ 72.324630][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.324662][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 72.324688][ C0] ? kernel_clone+0x176/0x9d0 [ 72.324703][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 72.324728][ C0] ? kernel_clone+0x176/0x9d0 [ 72.324751][ C0] copy_process+0x7fb/0x8030 [ 72.324772][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.324795][ C0] ? __pfx_copy_process+0x10/0x10 [ 72.324814][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.324849][ C0] kernel_clone+0x176/0x9d0 [ 72.324872][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 72.324886][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.324917][ C0] ? look_up_lock_class+0x55/0x120 [ 72.324941][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.324966][ C0] user_mode_thread+0xcc/0x110 [ 72.324986][ C0] ? __pfx_user_mode_thread+0x10/0x10 [ 72.325006][ C0] ? find_held_lock+0x2b/0x80 [ 72.325033][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.325057][ C0] ? __pfx_kernel_sigaction+0x10/0x10 [ 72.325088][ C0] call_usermodehelper_exec_work+0x6b/0x180 [ 72.325116][ C0] process_one_work+0xa23/0x1940 [ 72.325147][ C0] ? __pfx_process_one_work+0x10/0x10 [ 72.325175][ C0] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 72.325206][ C0] worker_thread+0x5ef/0xe50 [ 72.325237][ C0] ? __pfx_worker_thread+0x10/0x10 [ 72.325259][ C0] ? kthread+0x13a/0x450 [ 72.325285][ C0] ? __pfx_worker_thread+0x10/0x10 [ 72.325307][ C0] kthread+0x370/0x450 [ 72.325328][ C0] ? __pfx_kthread+0x10/0x10 [ 72.325352][ C0] ret_from_fork+0x72b/0xd50 [ 72.325369][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 72.325391][ C0] ? __switch_to+0x800/0x10f0 [ 72.325418][ C0] ? __pfx_kthread+0x10/0x10 [ 72.325441][ C0] ret_from_fork_asm+0x1a/0x30 [ 72.325472][ C0] [ 72.351903][ T1163] FAULT_INJECTION: forcing a failure. [ 72.351903][ T1163] name failslab, interval 1, probability 10, space 0, times 9 [ 72.353356][ T37] RSP: 0018:ffffc90000607458 EFLAGS: 00010293 [ 72.355492][ T1163] CPU: 3 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.355509][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.355517][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.355537][ T1163] Call Trace: [ 72.355543][ T1163] [ 72.355548][ T1163] dump_stack_lvl+0x100/0x190 [ 72.355562][ T1163] should_fail_ex.cold+0x5/0xa [ 72.355575][ T1163] should_failslab+0xc2/0x120 [ 72.355591][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.355606][ T1163] ? __alloc_skb+0x140/0x710 [ 72.355623][ T1163] __alloc_skb+0x140/0x710 [ 72.355636][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.355649][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.355670][ T1163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.355683][ T1163] ? __pfx___might_resched+0x10/0x10 [ 72.355703][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.355724][ T1163] process_one_work+0xa23/0x1940 [ 72.355746][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.355765][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.355782][ T1163] worker_thread+0x5ef/0xe50 [ 72.355801][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.355817][ T1163] ? kthread+0x13a/0x450 [ 72.355831][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.355866][ T1163] kthread+0x370/0x450 [ 72.355897][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.355913][ T1163] ret_from_fork+0x72b/0xd50 [ 72.355928][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.355942][ T1163] ? __switch_to+0x800/0x10f0 [ 72.355960][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.355975][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.355996][ T1163] [ 72.356117][ T1163] FAULT_INJECTION: forcing a failure. [ 72.356117][ T1163] name failslab, interval 1, probability 10, space 0, times 8 [ 72.356975][ T37] [ 72.356985][ T37] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000002800 [ 72.358771][ T1163] CPU: 3 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.358797][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.358809][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.358834][ T1163] Call Trace: [ 72.358840][ T1163] [ 72.358847][ T1163] dump_stack_lvl+0x100/0x190 [ 72.358867][ T1163] should_fail_ex.cold+0x5/0xa [ 72.358886][ T1163] should_failslab+0xc2/0x120 [ 72.358910][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.358932][ T1163] ? __alloc_skb+0x140/0x710 [ 72.358957][ T1163] __alloc_skb+0x140/0x710 [ 72.358976][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.358996][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.359019][ T1163] ? kfree_skbmem+0x19f/0x210 [ 72.359038][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.359070][ T1163] process_one_work+0xa23/0x1940 [ 72.359103][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.359133][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.359158][ T1163] worker_thread+0x5ef/0xe50 [ 72.359187][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.359211][ T1163] ? kthread+0x13a/0x450 [ 72.359231][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.359252][ T1163] kthread+0x370/0x450 [ 72.359273][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.359295][ T1163] ret_from_fork+0x72b/0xd50 [ 72.359316][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.359337][ T1163] ? __switch_to+0x800/0x10f0 [ 72.359361][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.359385][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.359417][ T1163] [ 72.411651][ T1163] FAULT_INJECTION: forcing a failure. [ 72.411651][ T1163] name failslab, interval 1, probability 10, space 0, times 7 [ 72.411684][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.411704][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.411716][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 72.411742][ T1163] Call Trace: [ 72.411749][ T1163] [ 72.411756][ T1163] dump_stack_lvl+0x100/0x190 [ 72.411776][ T1163] should_fail_ex.cold+0x5/0xa [ 72.411795][ T1163] should_failslab+0xc2/0x120 [ 72.411817][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.411838][ T1163] ? __alloc_skb+0x140/0x710 [ 72.411862][ T1163] __alloc_skb+0x140/0x710 [ 72.411881][ T1163] ? __alloc_skb+0x5b7/0x710 [ 72.411900][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 72.411923][ T1163] ? kfree_skbmem+0x19f/0x210 [ 72.411942][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 72.411976][ T1163] process_one_work+0xa23/0x1940 [ 72.412010][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.412040][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 72.412064][ T1163] worker_thread+0x5ef/0xe50 [ 72.412093][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.412116][ T1163] ? kthread+0x13a/0x450 [ 72.412137][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.412158][ T1163] kthread+0x370/0x450 [ 72.412178][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.412199][ T1163] ret_from_fork+0x72b/0xd50 [ 72.412221][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.412242][ T1163] ? __switch_to+0x800/0x10f0 [ 72.412277][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.412300][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.412334][ T1163] [ 72.415885][ C3] FAULT_INJECTION: forcing a failure. [ 72.415885][ C3] name failslab, interval 1, probability 10, space 0, times 4 [ 72.417165][ C0] FAULT_INJECTION: forcing a failure. [ 72.417165][ C0] name failslab, interval 1, probability 10, space 0, times 4 [ 72.419255][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 72.419283][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.419294][ C3] Call Trace: [ 72.419303][ C3] [ 72.419312][ C3] dump_stack_lvl+0x100/0x190 [ 72.419340][ C3] should_fail_ex.cold+0x5/0xa [ 72.419365][ C3] should_failslab+0xc2/0x120 [ 72.419392][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.419420][ C3] ? __alloc_skb+0x140/0x710 [ 72.419451][ C3] __alloc_skb+0x140/0x710 [ 72.419473][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.419496][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.419521][ C3] ? do_raw_spin_lock+0x128/0x260 [ 72.419548][ C3] skb_copy+0x1ca/0x3a0 [ 72.419575][ C3] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 72.419612][ C3] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 72.419639][ C3] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 72.419673][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.419707][ C3] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 72.419739][ C3] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 72.419770][ C3] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 72.419805][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.419829][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.419859][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.419899][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.419925][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.419943][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.419959][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.419984][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.420004][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.420023][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.420040][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.420055][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.420076][ C3] __irq_exit_rcu+0x162/0x210 [ 72.420092][ C3] irq_exit_rcu+0x9/0x30 [ 72.420107][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.420125][ C3] [ 72.420130][ C3] [ 72.420135][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.420154][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.420175][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.420192][ C3] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000206 [ 72.420206][ C3] RAX: 0000000000064c9f RBX: ffff88801cbe2540 RCX: ffffffff8bb872d5 [ 72.420218][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.420228][ C3] RBP: ffffed100397c4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 72.420241][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.420251][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 72.420269][ C3] ? ct_kernel_exit+0x125/0x180 [ 72.420295][ C3] default_idle+0x9/0x10 [ 72.420319][ C3] default_idle_call+0x6c/0xb0 [ 72.420343][ C3] do_idle+0x3a7/0x5b0 [ 72.420365][ C3] ? __pfx_do_idle+0x10/0x10 [ 72.420383][ C3] ? rcu_is_watching+0x12/0xc0 [ 72.420406][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.420426][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 72.420453][ C3] cpu_startup_entry+0x4f/0x60 [ 72.420476][ C3] start_secondary+0x21d/0x2d0 [ 72.420498][ C3] ? __pfx_start_secondary+0x10/0x10 [ 72.420525][ C3] common_startup_64+0x13e/0x158 [ 72.420566][ C3] [ 72.420766][ C3] FAULT_INJECTION: forcing a failure. [ 72.420766][ C3] name failslab, interval 1, probability 10, space 0, times 3 [ 72.421192][ C0] CPU: 0 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 72.421215][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.421227][ C0] Workqueue: events_unbound call_usermodehelper_exec_work [ 72.421257][ C0] Call Trace: [ 72.421267][ C0] [ 72.421273][ C0] dump_stack_lvl+0x100/0x190 [ 72.421296][ C0] should_fail_ex.cold+0x5/0xa [ 72.421317][ C0] should_failslab+0xc2/0x120 [ 72.421341][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.421365][ C0] ? __alloc_skb+0x140/0x710 [ 72.421404][ C0] __alloc_skb+0x140/0x710 [ 72.421425][ C0] ? __alloc_skb+0x5b7/0x710 [ 72.421446][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 72.421469][ C0] ? lock_acquire+0x1b9/0x370 [ 72.421495][ C0] __netdev_alloc_skb+0x7a/0x960 [ 72.421521][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 72.421547][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.421577][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 72.421596][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 72.421626][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 72.421659][ C0] __iterate_interfaces+0x2e6/0x650 [ 72.421677][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.421703][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.421728][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.421753][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.421771][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.421790][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 72.421820][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 72.421844][ C0] handle_softirqs+0x1ea/0x9b0 [ 72.421862][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 72.421882][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.421899][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.421924][ C0] __irq_exit_rcu+0x162/0x210 [ 72.421943][ C0] irq_exit_rcu+0x9/0x30 [ 72.421978][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.421999][ C0] [ 72.422005][ C0] [ 72.422012][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.422032][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 72.422053][ C0] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 72.422066][ C0] RSP: 0018:ffffc90000606df8 EFLAGS: 00000293 [ 72.422079][ C0] RAX: ffffffff8f9af1d8 RBX: ffffffff8f9af180 RCX: ffffffff81e7f251 [ 72.422092][ C0] RDX: ffff88801d374a80 RSI: ffffffff81e7f25f RDI: ffff88801d374a80 [ 72.422103][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 72.422114][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000096e8 [ 72.422125][ C0] R13: ffffffff8f9af1d8 R14: ffffc90000606e78 R15: dffffc0000000000 [ 72.422141][ C0] ? console_flush_one_record+0xab1/0xe50 [ 72.422159][ C0] ? console_flush_one_record+0xabf/0xe50 [ 72.422183][ C0] ? console_flush_one_record+0xabf/0xe50 [ 72.422209][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 72.422228][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.422257][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 72.422288][ C0] console_unlock+0x103/0x260 [ 72.422310][ C0] ? __pfx_console_unlock+0x10/0x10 [ 72.422325][ C0] ? lock_acquire+0x141/0x370 [ 72.422360][ C0] vprintk_emit+0x407/0x6b0 [ 72.422382][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 72.422402][ C0] ? __pfx__printk+0x10/0x10 [ 72.422422][ C0] _printk+0xcf/0x110 [ 72.422439][ C0] ? __pfx__printk+0x10/0x10 [ 72.422459][ C0] ? show_opcodes+0xc2/0xe0 [ 72.422485][ C0] __show_regs.cold+0x93/0x554 [ 72.422503][ C0] ? dump_stack_print_info+0x18c/0x220 [ 72.422529][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.422553][ C0] show_regs+0x33/0x50 [ 72.422573][ C0] __warn.cold+0x185/0x318 [ 72.422594][ C0] __report_bug+0x30f/0x440 [ 72.422608][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.422632][ C0] ? __pfx___report_bug+0x10/0x10 [ 72.422652][ C0] ? __show_trace_log_lvl+0x28f/0x2c4 [ 72.422683][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.422702][ C0] report_bug+0xb2/0x220 [ 72.422723][ C0] ? alloc_vmap_area+0x17f6/0x2bb0 [ 72.422745][ C0] handle_bug+0x16a/0x2a0 [ 72.422770][ C0] exc_invalid_op+0x17/0x50 [ 72.422794][ C0] asm_exc_invalid_op+0x1a/0x20 [ 72.422806][ C0] RIP: 0010:alloc_vmap_area+0x17f6/0x2bb0 [ 72.422829][ C0] Code: 48 8d 3d 0d d4 c0 0e 8b 74 24 10 67 48 0f b9 3a c7 44 24 70 00 00 00 00 e9 95 ed ff ff 48 c7 c3 ea ff ff ff e8 fb b1 a2 ff 90 <0f> 0b 90 41 be 01 00 00 00 e9 ae f9 ff ff 41 be 01 00 00 00 48 c7 [ 72.422844][ C0] RSP: 0018:ffffc90000607458 EFLAGS: 00010293 [ 72.422857][ C0] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000002800 [ 72.422868][ C0] RDX: ffff88801d374a80 RSI: ffffffff8266fa65 RDI: ffffffff8e46c920 [ 72.422880][ C0] RBP: ffffc9000ee11000 R08: 00000000ffffffff R09: fffffbfff1dbda1e [ 72.422888][ C0] R10: ffffffff8eded0f3 R11: 0000000000000000 R12: 0000000000000000 [ 72.422896][ C0] R13: ffffc9000ee21000 R14: ffffe8ffffffffff R15: 0000000000000000 [ 72.422915][ C0] ? alloc_vmap_area+0x17f5/0x2bb0 [ 72.422941][ C0] ? alloc_vmap_area+0x17f5/0x2bb0 [ 72.422970][ C0] ? kasan_save_track+0x14/0x30 [ 72.422989][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 72.423010][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 72.423034][ C0] ? __get_vm_area_node+0x101/0x330 [ 72.423061][ C0] __get_vm_area_node+0x1ca/0x330 [ 72.423085][ C0] __vmalloc_node_range_noprof+0x228/0x1630 [ 72.423113][ C0] ? kernel_clone+0x176/0x9d0 [ 72.423142][ C0] ? kernel_clone+0x176/0x9d0 [ 72.423165][ C0] ? __memcg_slab_post_alloc_hook+0x1bb/0x1160 [ 72.423189][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.423221][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 72.423248][ C0] ? kernel_clone+0x176/0x9d0 [ 72.423273][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 72.423294][ C0] ? kernel_clone+0x176/0x9d0 [ 72.423316][ C0] copy_process+0x7fb/0x8030 [ 72.423338][ C0] ? _raw_spin_unlock+0x28/0x50 [ 72.423367][ C0] ? __pfx_copy_process+0x10/0x10 [ 72.423384][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.423419][ C0] kernel_clone+0x176/0x9d0 [ 72.423442][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 72.423462][ C0] ? __lock_acquire+0x49f/0x1a40 [ 72.423487][ C0] ? look_up_lock_class+0x55/0x120 [ 72.423511][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.423540][ C0] user_mode_thread+0xcc/0x110 [ 72.423561][ C0] ? __pfx_user_mode_thread+0x10/0x10 [ 72.423577][ C0] ? find_held_lock+0x2b/0x80 [ 72.423604][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 72.423634][ C0] ? __pfx_kernel_sigaction+0x10/0x10 [ 72.423659][ C0] call_usermodehelper_exec_work+0x6b/0x180 [ 72.423687][ C0] process_one_work+0xa23/0x1940 [ 72.423722][ C0] ? __pfx_process_one_work+0x10/0x10 [ 72.423754][ C0] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 72.423783][ C0] worker_thread+0x5ef/0xe50 [ 72.423813][ C0] ? __pfx_worker_thread+0x10/0x10 [ 72.423839][ C0] ? kthread+0x13a/0x450 [ 72.423856][ C0] ? __pfx_worker_thread+0x10/0x10 [ 72.423879][ C0] kthread+0x370/0x450 [ 72.423901][ C0] ? __pfx_kthread+0x10/0x10 [ 72.423924][ C0] ret_from_fork+0x72b/0xd50 [ 72.423942][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 72.423964][ C0] ? __switch_to+0x800/0x10f0 [ 72.423991][ C0] ? __pfx_kthread+0x10/0x10 [ 72.424015][ C0] ret_from_fork_asm+0x1a/0x30 [ 72.424044][ C0] [ 72.424105][ T37] RDX: ffff88801d374a80 RSI: ffffffff8266fa65 RDI: ffffffff8e46c920 [ 72.425621][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 72.425641][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.425650][ C3] Call Trace: [ 72.425660][ C3] [ 72.425667][ C3] dump_stack_lvl+0x100/0x190 [ 72.425686][ C3] should_fail_ex.cold+0x5/0xa [ 72.425703][ C3] should_failslab+0xc2/0x120 [ 72.425724][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 72.425744][ C3] ? __alloc_skb+0x140/0x710 [ 72.425766][ C3] __alloc_skb+0x140/0x710 [ 72.425784][ C3] ? __alloc_skb+0x5b7/0x710 [ 72.425802][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 72.425821][ C3] ? do_raw_spin_lock+0x1e0/0x260 [ 72.425841][ C3] skb_copy+0x1ca/0x3a0 [ 72.425862][ C3] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 72.425890][ C3] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 72.425909][ C3] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 72.425931][ C3] ? __lock_acquire+0x49f/0x1a40 [ 72.425980][ C3] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 72.426005][ C3] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 72.426028][ C3] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 72.426055][ C3] __iterate_interfaces+0x2e6/0x650 [ 72.426074][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.426102][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 72.426125][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 72.426148][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 72.426166][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 72.426184][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 72.426214][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 72.426236][ C3] handle_softirqs+0x1ea/0x9b0 [ 72.426262][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 72.426283][ C3] ? _raw_spin_unlock+0x28/0x50 [ 72.426302][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 72.426325][ C3] __irq_exit_rcu+0x162/0x210 [ 72.426346][ C3] irq_exit_rcu+0x9/0x30 [ 72.426365][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 72.426386][ C3] [ 72.426392][ C3] [ 72.426400][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 72.426420][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 72.426442][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 2d 13 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 72.426460][ C3] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000206 [ 72.426475][ C3] RAX: 0000000000064c9f RBX: ffff88801cbe2540 RCX: ffffffff8bb872d5 [ 72.426489][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a83a9 RDI: ffffffff8c400980 [ 72.426500][ C3] RBP: ffffed100397c4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 72.426513][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 72.426524][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 72.426543][ C3] ? ct_kernel_exit+0x125/0x180 [ 72.426568][ C3] default_idle+0x9/0x10 [ 72.426590][ C3] default_idle_call+0x6c/0xb0 [ 72.426614][ C3] do_idle+0x3a7/0x5b0 [ 72.426635][ C3] ? __pfx_do_idle+0x10/0x10 [ 72.426653][ C3] ? rcu_is_watching+0x12/0xc0 [ 72.426681][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.426702][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 72.426728][ C3] cpu_startup_entry+0x4f/0x60 [ 72.426750][ C3] start_secondary+0x21d/0x2d0 [ 72.426772][ C3] ? __pfx_start_secondary+0x10/0x10 [ 72.426799][ C3] common_startup_64+0x13e/0x158 [ 72.426838][ C3] [ 72.427158][ T1163] FAULT_INJECTION: forcing a failure. [ 72.427158][ T1163] name failslab, interval 1, probability 10, space 0, times 1 [ 72.427997][ T37] RBP: ffffc9000ee11000 R08: 00000000ffffffff R09: fffffbfff1dbda1e [ 72.429988][ T1163] CPU: 3 UID: 0 PID: 1163 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 72.430003][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.430012][ T1163] Workqueue: events_unbound cfg80211_wiphy_work [ 72.430031][ T1163] Call Trace: [ 72.430036][ T1163] [ 72.430042][ T1163] dump_stack_lvl+0x100/0x190 [ 72.430056][ T1163] should_fail_ex.cold+0x5/0xa [ 72.430068][ T1163] should_failslab+0xc2/0x120 [ 72.430084][ T1163] __kmalloc_noprof+0xfc/0x820 [ 72.430097][ T1163] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.430112][ T1163] ? ieee80211_bss_info_update+0x310/0xab0 [ 72.430129][ T1163] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 72.430145][ T1163] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.430168][ T1163] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.430186][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.430209][ T1163] ? do_raw_spin_lock+0x128/0x260 [ 72.430220][ T1163] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 72.430237][ T1163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.430253][ T1163] ? mark_held_locks+0x40/0x70 [ 72.430269][ T1163] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.430282][ T1163] ? __asan_memcpy+0x3c/0x60 [ 72.430294][ T1163] ieee80211_inform_bss+0x159/0x1170 [ 72.430313][ T1163] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.430332][ T1163] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 72.430349][ T1163] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 72.430365][ T1163] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 72.430381][ T1163] ? unwind_next_frame+0x3be/0x2090 [ 72.430399][ T1163] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 72.430415][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 72.430437][ T1163] ? stack_trace_save+0x8e/0xc0 [ 72.430452][ T1163] ? __pfx_stack_trace_save+0x10/0x10 [ 72.430469][ T1163] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 72.430484][ T1163] cfg80211_inform_bss_data+0x230/0x3b60 [ 72.430500][ T1163] ? __kmalloc_noprof+0x322/0x820 [ 72.430512][ T1163] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 72.430530][ T1163] ? cfg80211_wiphy_work+0x2b7/0x550 [ 72.430545][ T1163] ? process_one_work+0xa23/0x1940 [ 72.430560][ T1163] ? worker_thread+0x5ef/0xe50 [ 72.430574][ T1163] ? kthread+0x370/0x450 [ 72.430588][ T1163] ? ret_from_fork+0x72b/0xd50 [ 72.430600][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 72.430617][ T1163] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 72.430635][ T1163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.430652][ T1163] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 72.430677][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.430693][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.430715][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 72.430731][ T1163] ? find_held_lock+0x2b/0x80 [ 72.430744][ T1163] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 72.430760][ T1163] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 72.430781][ T1163] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 72.430800][ T1163] ieee80211_bss_info_update+0x310/0xab0 [ 72.430818][ T1163] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 72.430838][ T1163] ? rcu_is_watching+0x12/0xc0 [ 72.430852][ T1163] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 72.430867][ T1163] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 72.430885][ T1163] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 72.430907][ T1163] ieee80211_iface_work+0xa9a/0x1070 [ 72.430927][ T1163] cfg80211_wiphy_work+0x2b7/0x550 [ 72.430945][ T1163] process_one_work+0xa23/0x1940 [ 72.430965][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 72.430984][ T1163] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 72.431001][ T1163] worker_thread+0x5ef/0xe50 [ 72.431020][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.431036][ T1163] ? kthread+0x13a/0x450 [ 72.431049][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 72.431063][ T1163] kthread+0x370/0x450 [ 72.431077][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.431092][ T1163] ret_from_fork+0x72b/0xd50 [ 72.431105][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 72.431119][ T1163] ? __switch_to+0x800/0x10f0 [ 72.431136][ T1163] ? __pfx_kthread+0x10/0x10 [ 72.431151][ T1163] ret_from_fork_asm+0x1a/0x30 [ 72.431171][ T1163] [ 74.231633][ T5747] Bluetooth: hci5: command tx timeout [ 74.232678][ T37] R10: ffffffff8eded0f3 R11: 0000000000000000 R12: 0000000000000000 [ 76.311722][ T5747] Bluetooth: hci5: command tx timeout [ 77.387439][ T37] R13: ffffc9000ee21000 R14: ffffe8ffffffffff R15: 0000000000000000 [ 77.389674][ T37] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 77.392267][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.394195][ T37] CR2: 0000561d821ea240 CR3: 000000004b305000 CR4: 0000000000352ef0 [ 77.396485][ T37] Call Trace: [ 77.397467][ T37] [ 77.398346][ T37] ? kasan_save_track+0x14/0x30 [ 77.399753][ T37] ? __kasan_kmalloc+0xaa/0xb0 [ 77.401161][ T37] ? __pfx_alloc_vmap_area+0x10/0x10 [ 77.402803][ T37] ? __get_vm_area_node+0x101/0x330 [ 77.404303][ T37] __get_vm_area_node+0x1ca/0x330 [ 77.405772][ T37] __vmalloc_node_range_noprof+0x228/0x1630 [ 77.407491][ T37] ? kernel_clone+0x176/0x9d0 [ 77.408872][ T37] ? kernel_clone+0x176/0x9d0 [ 77.410267][ T37] ? __memcg_slab_post_alloc_hook+0x1bb/0x1160 [ 77.412184][ T37] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 77.414047][ T37] ? trace_kmem_cache_alloc+0xdd/0x100 [ 77.415628][ T37] ? kernel_clone+0x176/0x9d0 [ 77.416984][ T37] __vmalloc_node_noprof+0xad/0xf0 [ 77.418492][ T37] ? kernel_clone+0x176/0x9d0 [ 77.419854][ T37] copy_process+0x7fb/0x8030 [ 77.421230][ T37] ? _raw_spin_unlock+0x28/0x50 [ 77.422759][ T37] ? __pfx_copy_process+0x10/0x10 [ 77.424222][ T37] ? __lock_acquire+0x49f/0x1a40 [ 77.425715][ T37] kernel_clone+0x176/0x9d0 [ 77.427062][ T37] ? __pfx_kernel_clone+0x10/0x10 [ 77.428529][ T37] ? __lock_acquire+0x49f/0x1a40 [ 77.430010][ T37] ? look_up_lock_class+0x55/0x120 [ 77.431555][ T37] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 77.433683][ T37] user_mode_thread+0xcc/0x110 [ 77.435265][ T37] ? __pfx_user_mode_thread+0x10/0x10 [ 77.436843][ T37] ? find_held_lock+0x2b/0x80 [ 77.438234][ T37] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 77.440161][ T37] ? __pfx_kernel_sigaction+0x10/0x10 [ 77.441968][ T37] call_usermodehelper_exec_work+0x6b/0x180 [ 77.443748][ T37] process_one_work+0xa23/0x1940 [ 77.445201][ T37] ? __pfx_process_one_work+0x10/0x10 [ 77.446766][ T37] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 77.448642][ T37] worker_thread+0x5ef/0xe50 [ 77.450013][ T37] ? __pfx_worker_thread+0x10/0x10 [ 77.451557][ T37] ? kthread+0x13a/0x450 [ 77.452832][ T37] ? __pfx_worker_thread+0x10/0x10 [ 77.454325][ T37] kthread+0x370/0x450 [ 77.455515][ T37] ? __pfx_kthread+0x10/0x10 [ 77.456857][ T37] ret_from_fork+0x72b/0xd50 [ 77.458222][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 77.459700][ T37] ? __switch_to+0x800/0x10f0 [ 77.461091][ T37] ? __pfx_kthread+0x10/0x10 [ 77.462581][ T37] ret_from_fork_asm+0x1a/0x30 [ 77.464057][ T37] [ 77.464983][ T37] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.467058][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 77.469732][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.472666][ T37] Workqueue: events_unbound call_usermodehelper_exec_work [ 77.474691][ T37] Call Trace: [ 77.475679][ T37] [ 77.476569][ T37] dump_stack_lvl+0x100/0x190 [ 77.477959][ T37] vpanic+0x552/0x970 [ 77.479152][ T37] ? __pfx_vpanic+0x10/0x10 [ 77.480534][ T37] panic+0xd1/0xe0 [ 77.481673][ T37] ? __pfx_panic+0x10/0x10 [ 77.483051][ T37] ? check_panic_on_warn+0x1f/0x90 [ 77.484545][ T37] check_panic_on_warn.cold+0x19/0x34 [ 77.486118][ T37] ? alloc_vmap_area+0x17f6/0x2bb0 [ 77.487599][ T37] __warn.cold+0x191/0x318 [ 77.488898][ T37] __report_bug+0x30f/0x440 [ 77.490226][ T37] ? alloc_vmap_area+0x17f6/0x2bb0 [ 77.491757][ T37] ? __pfx___report_bug+0x10/0x10 [ 77.493259][ T37] ? __show_trace_log_lvl+0x28f/0x2c4 [ 77.494842][ T37] ? alloc_vmap_area+0x17f6/0x2bb0 [ 77.496339][ T37] report_bug+0xb2/0x220 [ 77.497559][ T37] ? alloc_vmap_area+0x17f6/0x2bb0 [ 77.499041][ T37] handle_bug+0x16a/0x2a0 [ 77.500322][ T37] exc_invalid_op+0x17/0x50 [ 77.501695][ T37] asm_exc_invalid_op+0x1a/0x20 [ 77.503144][ T37] RIP: 0010:alloc_vmap_area+0x17f6/0x2bb0 [ 77.504779][ T37] Code: 48 8d 3d 0d d4 c0 0e 8b 74 24 10 67 48 0f b9 3a c7 44 24 70 00 00 00 00 e9 95 ed ff ff 48 c7 c3 ea ff ff ff e8 fb b1 a2 ff 90 <0f> 0b 90 41 be 01 00 00 00 e9 ae f9 ff ff 41 be 01 00 00 00 48 c7 [ 77.510185][ T37] RSP: 0018:ffffc90000607458 EFLAGS: 00010293 [ 77.511983][ T37] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000002800 [ 77.514274][ T37] RDX: ffff88801d374a80 RSI: ffffffff8266fa65 RDI: ffffffff8e46c920 [ 77.516556][ T37] RBP: ffffc9000ee11000 R08: 00000000ffffffff R09: fffffbfff1dbda1e [ 77.518810][ T37] R10: ffffffff8eded0f3 R11: 0000000000000000 R12: 0000000000000000 [ 77.521080][ T37] R13: ffffc9000ee21000 R14: ffffe8ffffffffff R15: 0000000000000000 [ 77.523433][ T37] ? alloc_vmap_area+0x17f5/0x2bb0 [ 77.524939][ T37] ? alloc_vmap_area+0x17f5/0x2bb0 [ 77.526433][ T37] ? kasan_save_track+0x14/0x30 [ 77.527852][ T37] ? __kasan_kmalloc+0xaa/0xb0 [ 77.529247][ T37] ? __pfx_alloc_vmap_area+0x10/0x10 [ 77.530795][ T37] ? __get_vm_area_node+0x101/0x330 [ 77.532359][ T37] __get_vm_area_node+0x1ca/0x330 [ 77.533827][ T37] __vmalloc_node_range_noprof+0x228/0x1630 [ 77.535568][ T37] ? kernel_clone+0x176/0x9d0 [ 77.537116][ T37] ? kernel_clone+0x176/0x9d0 [ 77.538518][ T37] ? __memcg_slab_post_alloc_hook+0x1bb/0x1160 [ 77.540313][ T37] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 77.542249][ T37] ? trace_kmem_cache_alloc+0xdd/0x100 [ 77.543860][ T37] ? kernel_clone+0x176/0x9d0 [ 77.545225][ T37] __vmalloc_node_noprof+0xad/0xf0 [ 77.546708][ T37] ? kernel_clone+0x176/0x9d0 [ 77.548063][ T37] copy_process+0x7fb/0x8030 [ 77.549431][ T37] ? _raw_spin_unlock+0x28/0x50 [ 77.550851][ T37] ? __pfx_copy_process+0x10/0x10 [ 77.552337][ T37] ? __lock_acquire+0x49f/0x1a40 [ 77.553777][ T37] kernel_clone+0x176/0x9d0 [ 77.555114][ T37] ? __pfx_kernel_clone+0x10/0x10 [ 77.556562][ T37] ? __lock_acquire+0x49f/0x1a40 [ 77.557997][ T37] ? look_up_lock_class+0x55/0x120 [ 77.559476][ T37] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 77.561348][ T37] user_mode_thread+0xcc/0x110 [ 77.563173][ T37] ? __pfx_user_mode_thread+0x10/0x10 [ 77.564965][ T37] ? find_held_lock+0x2b/0x80 [ 77.566339][ T37] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 77.568251][ T37] ? __pfx_kernel_sigaction+0x10/0x10 [ 77.569797][ T37] call_usermodehelper_exec_work+0x6b/0x180 [ 77.571551][ T37] process_one_work+0xa23/0x1940 [ 77.573017][ T37] ? __pfx_process_one_work+0x10/0x10 [ 77.574569][ T37] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 77.576435][ T37] worker_thread+0x5ef/0xe50 [ 77.577771][ T37] ? __pfx_worker_thread+0x10/0x10 [ 77.579256][ T37] ? kthread+0x13a/0x450 [ 77.580502][ T37] ? __pfx_worker_thread+0x10/0x10 [ 77.582028][ T37] kthread+0x370/0x450 [ 77.583233][ T37] ? __pfx_kthread+0x10/0x10 [ 77.584589][ T37] ret_from_fork+0x72b/0xd50 [ 77.585972][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 77.587466][ T37] ? __switch_to+0x800/0x10f0 [ 77.588848][ T37] ? __pfx_kthread+0x10/0x10 [ 77.590209][ T37] ret_from_fork_asm+0x1a/0x30 [ 77.591680][ T37] [ 77.593204][ T37] Kernel Offset: disabled [ 77.594497][ T37] Rebooting in 86400 seconds..