last executing test programs: 51.563764103s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 51.405929557s ago: executing program 3 (id=5): syz_clone(0x4325000, &(0x7f0000000140)="0a1cf408c394449b791651f44e7accc16897c6a085", 0x15, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000000100010000060202020202020101822d1a00080800000000000000800900e7000b0000000003ffc004000000000000ff01"], 0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 45.803640449s ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x4040080) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x9000, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x89}], "70fbb9bdebfb9b4b"}}}}}}}, 0x0) 45.722521841s ago: executing program 32 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x4040080) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x9000, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x89}], "70fbb9bdebfb9b4b"}}}}}}}, 0x0) 45.638272688s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./dev_mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/emi26\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev_mnt/emi26/loader.fw\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000280)=':00000001FF\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev_mnt/emi26/bitstream.fw\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000300)=':00000001FF\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev_mnt/emi26/firmware.fw\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000380)=':00000001FF\n', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='dev\x00', 0x4) close(r3) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010001000000406a080001000000000001090212000101008032090400000000000000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0) symlinkat(&(0x7f00000004c0)='./sys/bus/usb/drivers/emi26 - firmware loader\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./driver_link\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./driver_link/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1-1:1.0\x00', 0x8) write(r5, &(0x7f0000000600)='2-1:1.0\x00', 0x8) write(r5, &(0x7f0000000640)='3-1:1.0\x00', 0x8) write(r5, &(0x7f0000000680)='4-1:1.0\x00', 0x8) write(r5, &(0x7f00000006c0)='5-1:1.0\x00', 0x8) close(r5) 28.307820984s ago: executing program 4 (id=33): r0 = syz_ublk_setup_io_uring(0x3297, &(0x7f0000000280)={0x0, 0xe2be, 0x1000, 0x3, 0x3a7}, &(0x7f0000000340), 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000400), 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d}, 0x94) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x12, 0x0, &(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f0000000240)='100\x00', 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x20) 28.217657336s ago: executing program 4 (id=34): socketpair(0x27, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='add 2-1', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='2-1\x00', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/usb/devices/2-1/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='\x00\x00\x00', 0x3) 28.148087983s ago: executing program 4 (id=36): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 27.957115194s ago: executing program 4 (id=38): mount(0x0, 0x0, 0x0, 0x8024, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x48001, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x3, 'lblcr\x00', 0x13, 0x0, 0xc}, 0x2c) 27.697148755s ago: executing program 4 (id=40): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1\n', 0x2) 25.896733819s ago: executing program 4 (id=42): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 25.807243658s ago: executing program 33 (id=42): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 21.007594724s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./dev_mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/emi26\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev_mnt/emi26/loader.fw\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000280)=':00000001FF\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev_mnt/emi26/bitstream.fw\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000300)=':00000001FF\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev_mnt/emi26/firmware.fw\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000380)=':00000001FF\n', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='dev\x00', 0x4) close(r3) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010001000000406a080001000000000001090212000101008032090400000000000000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0) symlinkat(&(0x7f00000004c0)='./sys/bus/usb/drivers/emi26 - firmware loader\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./driver_link\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./driver_link/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1-1:1.0\x00', 0x8) write(r5, &(0x7f0000000600)='2-1:1.0\x00', 0x8) write(r5, &(0x7f0000000640)='3-1:1.0\x00', 0x8) write(r5, &(0x7f0000000680)='4-1:1.0\x00', 0x8) write(r5, &(0x7f00000006c0)='5-1:1.0\x00', 0x8) close(r5) 17.75774662s ago: executing program 5 (id=52): r0 = openat(0xffffffffffffff9c, &(0x7f0000009140)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r0, &(0x7f0000009180)='3', 0x1) 11.947668257s ago: executing program 5 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/my_region\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/my_region/start_block\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='^h\x00', 0x3) 9.278392374s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./dev_mnt\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/emi26\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev_mnt/emi26/loader.fw\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000280)=':00000001FF\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev_mnt/emi26/bitstream.fw\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000300)=':00000001FF\n', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev_mnt/emi26/firmware.fw\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000380)=':00000001FF\n', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='dev\x00', 0x4) close(r3) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010001000000406a080001000000000001090212000101008032090400000000000000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0) symlinkat(&(0x7f00000004c0)='./sys/bus/usb/drivers/emi26 - firmware loader\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./driver_link\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./driver_link/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='1-1:1.0\x00', 0x8) write(r5, &(0x7f0000000600)='2-1:1.0\x00', 0x8) write(r5, &(0x7f0000000640)='3-1:1.0\x00', 0x8) write(r5, &(0x7f0000000680)='4-1:1.0\x00', 0x8) write(r5, &(0x7f00000006c0)='5-1:1.0\x00', 0x8) close(r5) 8.858928916s ago: executing program 0 (id=45): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(0x0, 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='1', 0x1) 8.786726887s ago: executing program 0 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x3}]}) 8.576942738s ago: executing program 0 (id=60): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x3, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "9304ba061707000000ffffffc2000004"}}, 0x2e) 7.265259432s ago: executing program 2 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000}) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='always\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='10000\x00', 0x6) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) 7.187177879s ago: executing program 0 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/xhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:1d.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:1d.7\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\x00', 0x2) 6.566114303s ago: executing program 0 (id=66): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) unshare(0x44040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) ioprio_set$pid(0x3, 0x0, 0x4007) 6.477962682s ago: executing program 5 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/my_region\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/my_region/start_block\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='^h\x00', 0x3) 6.452654778s ago: executing program 2 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/100, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/usb2/interface_authorized_default\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/100, 0x64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb3/interface_authorized_default\x00', 0x0, 0x0) read(r2, &(0x7f0000000340)=""/100, 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/usb4/interface_authorized_default\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/100, 0x64) 6.389552544s ago: executing program 5 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x0, 0x0) 6.382568309s ago: executing program 2 (id=69): mkdir(&(0x7f0000000040)='./ms\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./ms\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./md\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./md\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mc\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mc\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mc/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mc/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) mkdir(&(0x7f0000000480)='./mc/dlm/ocfs2/comms/1\x00', 0x1ff) r2 = open(&(0x7f00000004c0)='./mc/dlm/ocfs2/comms/1/local\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) close(r2) r3 = open(&(0x7f0000000540)='./mc/dlm/ocfs2/comms/1/addr\x00', 0x1, 0x0) close(r3) mkdir(&(0x7f0000000580)='./md/mydomain\x00', 0x1ff) 6.351764525s ago: executing program 5 (id=70): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='udp 2049\n', 0x9) 6.250085229s ago: executing program 5 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n\x00', 0x2) write(r0, &(0x7f00000001a0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='5\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/machinecheck/machinecheck0/tolerant\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/bank0\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='1\n\x00', 0x2) close(r3) write(0xffffffffffffffff, &(0x7f0000000580)='1\n\x00', 0x2) 6.220463285s ago: executing program 2 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x4, 0x10, 0x403, 0x2, 0x4}, 0x8, 0x203ffffd, 0xffff0000, 0x0, 0x3, 0x2, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = getpid() unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) rt_tgsigqueueinfo(r2, 0x0, 0xb, &(0x7f00000004c0)={0x0, 0x0, 0x4}) 6.176291272s ago: executing program 1 (id=73): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(0x0, &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='1', 0x1) 103.346061ms ago: executing program 0 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='+ 1 0 1 1 1\n\x00', 0xc) write(r3, &(0x7f0000000700)='+ 1 0 2 1 1\n\x00', 0xc) write(r3, &(0x7f0000000800)='+ 1 0 5 1 1\n\x00', 0xc) write(r3, &(0x7f0000000900)='+ 1 0 100 1 1\n\x00', 0xe) 101.696029ms ago: executing program 2 (id=75): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xa6) 0s ago: executing program 2 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000}) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='always\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='0\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='0\x00', 0x2) kernel console output (not intermixed with test programs): QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.078243][ T1165] Workqueue: events_unbound nsim_dev_trap_report_work [ 96.078259][ T1165] Call Trace: [ 96.078263][ T1165] [ 96.078267][ T1165] dump_stack_lvl+0x100/0x190 [ 96.078280][ T1165] should_fail_ex.cold+0x5/0xa [ 96.078292][ T1165] should_failslab+0xc2/0x120 [ 96.078307][ T1165] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.078322][ T1165] ? __alloc_skb+0x140/0x710 [ 96.078338][ T1165] __alloc_skb+0x140/0x710 [ 96.078350][ T1165] ? __alloc_skb+0x5b7/0x710 [ 96.078364][ T1165] ? __pfx___alloc_skb+0x10/0x10 [ 96.078379][ T1165] ? kfree_skbmem+0x19f/0x210 [ 96.078392][ T1165] nsim_dev_trap_report_work+0x2af/0xd20 [ 96.078412][ T1165] process_one_work+0xa23/0x1940 [ 96.078433][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 96.078452][ T1165] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 96.078469][ T1165] worker_thread+0x5ef/0xe50 [ 96.078489][ T1165] ? kthread+0x13a/0x450 [ 96.078502][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 96.078517][ T1165] kthread+0x370/0x450 [ 96.078530][ T1165] ? __pfx_kthread+0x10/0x10 [ 96.078545][ T1165] ret_from_fork+0x72b/0xd50 [ 96.078559][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 96.078573][ T1165] ? __switch_to+0x800/0x10f0 [ 96.078589][ T1165] ? __pfx_kthread+0x10/0x10 [ 96.078604][ T1165] ret_from_fork_asm+0x1a/0x30 [ 96.078625][ T1165] [ 96.078705][ T5820] FAULT_INJECTION: forcing a failure. [ 96.078705][ T5820] name failslab, interval 1, probability 10, space 0, times 44 [ 96.081079][ T6341] CPU: 2 UID: 0 PID: 6341 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 96.081093][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.081100][ T6341] Call Trace: [ 96.081104][ T6341] [ 96.081109][ T6341] dump_stack_lvl+0x100/0x190 [ 96.081123][ T6341] should_fail_ex.cold+0x5/0xa [ 96.081135][ T6341] should_failslab+0xc2/0x120 [ 96.081150][ T6341] __kmalloc_noprof+0xfc/0x820 [ 96.081163][ T6341] ? rcu_is_watching+0x12/0xc0 [ 96.081177][ T6341] ? tomoyo_realpath_from_path+0xb6/0x690 [ 96.081196][ T6341] tomoyo_realpath_from_path+0xb6/0x690 [ 96.081216][ T6341] tomoyo_path_perm+0x276/0x460 [ 96.081229][ T6341] ? tomoyo_path_perm+0x262/0x460 [ 96.081244][ T6341] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 96.081272][ T6341] ? find_held_lock+0x2b/0x80 [ 96.081285][ T6341] ? __might_fault+0xc5/0x140 [ 96.081297][ T6341] ? __might_fault+0xc5/0x140 [ 96.081310][ T6341] security_inode_getattr+0x116/0x280 [ 96.081324][ T6341] vfs_statx+0x11f/0x3f0 [ 96.081338][ T6341] ? __pfx_vfs_statx+0x10/0x10 [ 96.081352][ T6341] ? do_getname+0x191/0x390 [ 96.081371][ T6341] vfs_fstatat+0x77/0xe0 [ 96.081384][ T6341] __do_sys_newfstatat+0x9d/0x120 [ 96.081398][ T6341] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 96.081424][ T6341] do_syscall_64+0x115/0x840 [ 96.081442][ T6341] ? clear_bhb_loop+0x40/0x90 [ 96.081460][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.081476][ T6341] RIP: 0033:0x7f3a93911b0a [ 96.081491][ T6341] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 96.081506][ T6341] RSP: 002b:00007ffc293533d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 96.081521][ T6341] RAX: ffffffffffffffda RBX: 00007ffc29353db0 RCX: 00007f3a93911b0a [ 96.081531][ T6341] RDX: 00007ffc29353400 RSI: 00007ffc29353db0 RDI: 00000000ffffff9c [ 96.081542][ T6341] RBP: 00007ffc29353dbf R08: 0000000000000075 R09: 0000000000000000 [ 96.081551][ T6341] R10: 0000000000000100 R11: 0000000000000202 R12: 0000558be15ab435 [ 96.081561][ T6341] R13: 00007ffc29353490 R14: 0000558baaee46d7 R15: 0000558be15ab430 [ 96.081583][ T6341] [ 96.081695][ T6341] FAULT_INJECTION: forcing a failure. [ 96.081695][ T6341] name failslab, interval 1, probability 10, space 0, times 43 [ 96.084050][ T5820] CPU: 3 UID: 0 PID: 5820 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 96.084065][ T5820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.084072][ T5820] Workqueue: mld mld_dad_work [ 96.084089][ T5820] Call Trace: [ 96.084093][ T5820] [ 96.084098][ T5820] dump_stack_lvl+0x100/0x190 [ 96.084111][ T5820] should_fail_ex.cold+0x5/0xa [ 96.084123][ T5820] should_failslab+0xc2/0x120 [ 96.084138][ T5820] __kmalloc_cache_noprof+0x91/0x6c0 [ 96.084150][ T5820] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 96.084167][ T5820] dst_cow_metrics_generic+0x4c/0x1e0 [ 96.084189][ T5820] icmp6_dst_alloc+0x418/0x4f0 [ 96.084206][ T5820] mld_sendpack+0x5ae/0xec0 [ 96.084224][ T5820] ? __pfx_mld_sendpack+0x10/0x10 [ 96.084246][ T5820] mld_send_initial_cr+0x219/0x320 [ 96.084263][ T5820] mld_dad_work+0x32/0x1f0 [ 96.084279][ T5820] process_one_work+0xa23/0x1940 [ 96.084300][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 96.084320][ T5820] ? __pfx_mld_dad_work+0x10/0x10 [ 96.084337][ T5820] worker_thread+0x5ef/0xe50 [ 96.084357][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 96.084373][ T5820] ? kthread+0x13a/0x450 [ 96.084386][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 96.084400][ T5820] kthread+0x370/0x450 [ 96.084414][ T5820] ? __pfx_kthread+0x10/0x10 [ 96.084429][ T5820] ret_from_fork+0x72b/0xd50 [ 96.084463][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 96.084477][ T5820] ? __switch_to+0x800/0x10f0 [ 96.084494][ T5820] ? __pfx_kthread+0x10/0x10 [ 96.084509][ T5820] ret_from_fork_asm+0x1a/0x30 [ 96.084531][ T5820] [ 96.084661][ T1165] FAULT_INJECTION: forcing a failure. [ 96.084661][ T1165] name failslab, interval 1, probability 10, space 0, times 42 [ 96.086456][ T6341] CPU: 2 UID: 0 PID: 6341 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 96.086470][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.086477][ T6341] Call Trace: [ 96.086481][ T6341] [ 96.086486][ T6341] dump_stack_lvl+0x100/0x190 [ 96.086499][ T6341] should_fail_ex.cold+0x5/0xa [ 96.086511][ T6341] should_failslab+0xc2/0x120 [ 96.086526][ T6341] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.086539][ T6341] ? stack_trace_save+0x8e/0xc0 [ 96.086555][ T6341] ? alloc_empty_file+0x5b/0x1c0 [ 96.086571][ T6341] alloc_empty_file+0x5b/0x1c0 [ 96.086585][ T6341] path_openat+0xe7/0x4280 [ 96.086596][ T6341] ? __kasan_slab_alloc+0x89/0x90 [ 96.086610][ T6341] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 96.086622][ T6341] ? do_getname+0x35/0x390 [ 96.086635][ T6341] ? do_sys_openat2+0xc7/0x1e0 [ 96.086648][ T6341] ? __x64_sys_openat+0x12d/0x210 [ 96.086662][ T6341] ? do_syscall_64+0x115/0x840 [ 96.086675][ T6341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.086690][ T6341] ? __pfx_path_openat+0x10/0x10 [ 96.086705][ T6341] do_file_open+0x20e/0x430 [ 96.086717][ T6341] ? __pfx_do_file_open+0x10/0x10 [ 96.086737][ T6341] ? alloc_fd+0x471/0x7a0 [ 96.086749][ T6341] ? do_getname+0x191/0x390 [ 96.086764][ T6341] do_sys_openat2+0x10f/0x1e0 [ 96.086778][ T6341] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.086797][ T6341] __x64_sys_openat+0x12d/0x210 [ 96.086812][ T6341] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.086831][ T6341] do_syscall_64+0x115/0x840 [ 96.086844][ T6341] ? clear_bhb_loop+0x40/0x90 [ 96.086857][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.086868][ T6341] RIP: 0033:0x7f3a93915c3a [ 96.086877][ T6341] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 96.086888][ T6341] RSP: 002b:00007ffc29352878 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 96.086898][ T6341] RAX: ffffffffffffffda RBX: 00007ffc293528b0 RCX: 00007f3a93915c3a [ 96.086905][ T6341] RDX: 0000000000090800 RSI: 00007ffc29352cb0 RDI: 00000000ffffff9c [ 96.086911][ T6341] RBP: 0000000000000007 R08: 0000558be15be290 R09: 0000000000000000 [ 96.086918][ T6341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000558be15beba0 [ 96.086924][ T6341] R13: 00007ffc293534b0 R14: 00007ffc293530b0 R15: 00007ffc29352cb0 [ 96.086938][ T6341] [ 96.086981][ T6341] FAULT_INJECTION: forcing a failure. [ 96.086981][ T6341] name failslab, interval 1, probability 10, space 0, times 41 [ 96.089506][ T1165] CPU: 0 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 96.089527][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.089537][ T1165] Workqueue: events_unbound nsim_dev_trap_report_work [ 96.089560][ T1165] Call Trace: [ 96.089566][ T1165] [ 96.089573][ T1165] dump_stack_lvl+0x100/0x190 [ 96.089593][ T1165] should_fail_ex.cold+0x5/0xa [ 96.089611][ T1165] should_failslab+0xc2/0x120 [ 96.089632][ T1165] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.089653][ T1165] ? __alloc_skb+0x140/0x710 [ 96.089678][ T1165] __alloc_skb+0x140/0x710 [ 96.089696][ T1165] ? __alloc_skb+0x5b7/0x710 [ 96.089720][ T1165] ? __pfx___alloc_skb+0x10/0x10 [ 96.089742][ T1165] ? kfree_skbmem+0x19f/0x210 [ 96.089761][ T1165] nsim_dev_trap_report_work+0x2af/0xd20 [ 96.089794][ T1165] process_one_work+0xa23/0x1940 [ 96.089826][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 96.089855][ T1165] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 96.089879][ T1165] worker_thread+0x5ef/0xe50 [ 96.089909][ T1165] ? kthread+0x13a/0x450 [ 96.089928][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 96.089948][ T1165] kthread+0x370/0x450 [ 96.089967][ T1165] ? __pfx_kthread+0x10/0x10 [ 96.089989][ T1165] ret_from_fork+0x72b/0xd50 [ 96.090008][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 96.090029][ T1165] ? __switch_to+0x800/0x10f0 [ 96.090052][ T1165] ? __pfx_kthread+0x10/0x10 [ 96.090074][ T1165] ret_from_fork_asm+0x1a/0x30 [ 96.090106][ T1165] [ 96.155699][ C0] FAULT_INJECTION: forcing a failure. [ 96.155699][ C0] name failslab, interval 1, probability 10, space 0, times 40 [ 96.634517][ C3] FAULT_INJECTION: forcing a failure. [ 96.634517][ C3] name failslab, interval 1, probability 10, space 0, times 37 [ 96.635682][ C0] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 96.635698][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.635707][ C0] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 96.635731][ C0] Call Trace: [ 96.635736][ C0] [ 96.635742][ C0] dump_stack_lvl+0x100/0x190 [ 96.635757][ C0] should_fail_ex.cold+0x5/0xa [ 96.635770][ C0] should_failslab+0xc2/0x120 [ 96.635787][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.635804][ C0] ? __alloc_skb+0x140/0x710 [ 96.635820][ C0] __alloc_skb+0x140/0x710 [ 96.635839][ C0] ? __alloc_skb+0x5b7/0x710 [ 96.635852][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 96.635867][ C0] ? do_raw_spin_lock+0x128/0x260 [ 96.635883][ C0] skb_copy+0x1ca/0x3a0 [ 96.635898][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 96.635920][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 96.635936][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 96.635952][ C0] ? __lock_acquire+0x49f/0x1a40 [ 96.635971][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 96.635989][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 96.636005][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 96.636025][ C0] __iterate_interfaces+0x2e6/0x650 [ 96.636039][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 96.636057][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 96.636072][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 96.636089][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 96.636102][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 96.636115][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 96.636134][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 96.636149][ C0] handle_softirqs+0x1ea/0x9b0 [ 96.636164][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.636177][ C0] ? _raw_spin_unlock+0x28/0x50 [ 96.636188][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.636204][ C0] __irq_exit_rcu+0x162/0x210 [ 96.636217][ C0] irq_exit_rcu+0x9/0x30 [ 96.636228][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.636242][ C0] [ 96.636245][ C0] [ 96.636250][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.636263][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 96.636280][ C0] Code: e9 4e fe ff ff 48 8b 7c 24 08 e8 0b 96 6f 00 e9 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <65> 8b 05 19 2b 5a 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d f0 2a [ 96.636291][ C0] RSP: 0000:ffffc9000045fd28 EFLAGS: 00000246 [ 96.636301][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8205f4e7 [ 96.636308][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004 [ 96.636314][ C0] RBP: ffffc90002e27894 R08: 0000000000000005 R09: 0000000000000004 [ 96.636321][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 96.636328][ C0] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 96.636339][ C0] ? multi_cpu_stop+0x1e7/0x4b0 [ 96.636353][ C0] ? stop_machine_yield+0x9/0x10 [ 96.636363][ C0] multi_cpu_stop+0x1e7/0x4b0 [ 96.636377][ C0] ? __stop_cpus.constprop.0+0xb1/0x140 [ 96.636387][ C0] ? __pfx_multi_cpu_stop+0x10/0x10 [ 96.636398][ C0] cpu_stopper_thread+0x21e/0x460 [ 96.636412][ C0] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 96.636423][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 96.636440][ C0] ? kthread+0x13a/0x450 [ 96.636455][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.636467][ C0] kthread+0x370/0x450 [ 96.636481][ C0] ? __pfx_kthread+0x10/0x10 [ 96.636497][ C0] ret_from_fork+0x72b/0xd50 [ 96.636512][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 96.636526][ C0] ? __switch_to+0x800/0x10f0 [ 96.636544][ C0] ? __pfx_kthread+0x10/0x10 [ 96.636559][ C0] ret_from_fork_asm+0x1a/0x30 [ 96.636581][ C0] [ 96.636655][ C1] FAULT_INJECTION: forcing a failure. [ 96.636655][ C1] name failslab, interval 1, probability 10, space 0, times 35 [ 96.637508][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 96.637524][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.637530][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 96.637551][ C3] Call Trace: [ 96.637556][ C3] [ 96.637561][ C3] dump_stack_lvl+0x100/0x190 [ 96.637575][ C3] should_fail_ex.cold+0x5/0xa [ 96.637587][ C3] should_failslab+0xc2/0x120 [ 96.637603][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.637618][ C3] ? __alloc_skb+0x140/0x710 [ 96.637635][ C3] __alloc_skb+0x140/0x710 [ 96.637648][ C3] ? __alloc_skb+0x5b7/0x710 [ 96.637661][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 96.637676][ C3] ? lock_acquire+0x1b9/0x370 [ 96.637694][ C3] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 96.637713][ C3] wg_packet_send_keepalive+0x7a/0x300 [ 96.637727][ C3] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 96.637746][ C3] call_timer_fn+0x19a/0x610 [ 96.637763][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 96.637780][ C3] ? __run_timers+0x747/0xb00 [ 96.637797][ C3] ? rcu_is_watching+0x12/0xc0 [ 96.637812][ C3] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 96.637830][ C3] __run_timers+0x757/0xb00 [ 96.637849][ C3] ? __pfx___run_timers+0x10/0x10 [ 96.637871][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 96.637885][ C3] run_timer_base+0x114/0x190 [ 96.637901][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 96.637919][ C3] run_timer_softirq+0x1a/0x50 [ 96.637935][ C3] handle_softirqs+0x1ea/0x9b0 [ 96.637950][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 96.637962][ C3] ? _raw_spin_unlock+0x28/0x50 [ 96.637973][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.637989][ C3] __irq_exit_rcu+0x162/0x210 [ 96.638001][ C3] irq_exit_rcu+0x9/0x30 [ 96.638013][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.638026][ C3] [ 96.638030][ C3] [ 96.638034][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.638047][ C3] RIP: 0010:stop_machine_yield+0xb/0x10 [ 96.638059][ C3] Code: e8 ba 68 b2 09 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 e8 77 b9 03 00 f3 90 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 96.638070][ C3] RSP: 0000:ffffc900005afd28 EFLAGS: 00000293 [ 96.638079][ C3] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8205f52b [ 96.638086][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f2e9 RDI: ffffffff8bcd5790 [ 96.638094][ C3] RBP: ffffc90002e27894 R08: 0000000000000005 R09: 0000000000000004 [ 96.638101][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 96.638108][ C3] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 96.638118][ C3] ? multi_cpu_stop+0x22b/0x4b0 [ 96.638129][ C3] ? stop_machine_yield+0x9/0x10 [ 96.638142][ C3] ? stop_machine_yield+0x9/0x10 [ 96.638152][ C3] multi_cpu_stop+0x1c6/0x4b0 [ 96.638166][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 96.638181][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 96.638193][ C3] cpu_stopper_thread+0x21e/0x460 [ 96.638206][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 96.638219][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 96.638236][ C3] ? kthread+0x13a/0x450 [ 96.638249][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.638262][ C3] kthread+0x370/0x450 [ 96.638276][ C3] ? __pfx_kthread+0x10/0x10 [ 96.638291][ C3] ret_from_fork+0x72b/0xd50 [ 96.638305][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 96.638320][ C3] ? __switch_to+0x800/0x10f0 [ 96.638337][ C3] ? __pfx_kthread+0x10/0x10 [ 96.638352][ C3] ret_from_fork_asm+0x1a/0x30 [ 96.638373][ C3] [ 96.638387][ C3] FAULT_INJECTION: forcing a failure. [ 96.638387][ C3] name failslab, interval 1, probability 10, space 0, times 34 [ 96.639423][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 96.639448][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.639460][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 96.639493][ C1] Call Trace: [ 96.639501][ C1] [ 96.639509][ C1] dump_stack_lvl+0x100/0x190 [ 96.639531][ C1] should_fail_ex.cold+0x5/0xa [ 96.639553][ C1] should_failslab+0xc2/0x120 [ 96.639580][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.639605][ C1] ? __alloc_skb+0x140/0x710 [ 96.639635][ C1] __alloc_skb+0x140/0x710 [ 96.639657][ C1] ? __alloc_skb+0x5b7/0x710 [ 96.639681][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 96.639704][ C1] ? do_raw_spin_lock+0x1e0/0x260 [ 96.639727][ C1] skb_copy+0x1ca/0x3a0 [ 96.639754][ C1] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 96.639790][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 96.639815][ C1] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 96.639842][ C1] ? __lock_acquire+0x49f/0x1a40 [ 96.639873][ C1] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 96.639904][ C1] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 96.639933][ C1] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 96.639966][ C1] __iterate_interfaces+0x2e6/0x650 [ 96.639990][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 96.640018][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 96.640046][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 96.640074][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 96.640097][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 96.640117][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 96.640150][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 96.640176][ C1] handle_softirqs+0x1ea/0x9b0 [ 96.640201][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 96.640222][ C1] ? _raw_spin_unlock+0x28/0x50 [ 96.640241][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.640269][ C1] __irq_exit_rcu+0x162/0x210 [ 96.640290][ C1] irq_exit_rcu+0x9/0x30 [ 96.640316][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.640338][ C1] [ 96.640345][ C1] [ 96.640353][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.640375][ C1] RIP: 0010:write_comp_data+0x7/0x90 [ 96.640401][ C1] Code: 7c 24 08 e8 0b 96 6f 00 e9 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 19 2b 5a 12 <49> 89 f8 49 89 f1 49 89 d2 65 48 8b 3d f0 2a 5a 12 a9 00 01 ff 00 [ 96.640420][ C1] RSP: 0000:ffffc90000557d28 EFLAGS: 00000293 [ 96.640437][ C1] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffffffff8205f52b [ 96.640450][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000005 [ 96.640462][ C1] RBP: ffffc90002e27894 R08: 0000000000000005 R09: 0000000000000001 [ 96.640475][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 96.640486][ C1] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 96.640506][ C1] ? multi_cpu_stop+0x22b/0x4b0 [ 96.640529][ C1] ? stop_machine_yield+0x9/0x10 [ 96.640547][ C1] multi_cpu_stop+0x22b/0x4b0 [ 96.640570][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 96.640589][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 96.640609][ C1] cpu_stopper_thread+0x21e/0x460 [ 96.640634][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 96.640655][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 96.640682][ C1] ? kthread+0x13a/0x450 [ 96.640705][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.640727][ C1] kthread+0x370/0x450 [ 96.640751][ C1] ? __pfx_kthread+0x10/0x10 [ 96.640778][ C1] ret_from_fork+0x72b/0xd50 [ 96.640802][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 96.640827][ C1] ? __switch_to+0x800/0x10f0 [ 96.640855][ C1] ? __pfx_kthread+0x10/0x10 [ 96.640882][ C1] ret_from_fork_asm+0x1a/0x30 [ 96.640921][ C1] [ 96.641362][ C2] FAULT_INJECTION: forcing a failure. [ 96.641362][ C2] name failslab, interval 1, probability 10, space 0, times 32 [ 96.643007][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 96.643021][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.643027][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 96.643047][ C3] Call Trace: [ 96.643051][ C3] [ 96.643055][ C3] dump_stack_lvl+0x100/0x190 [ 96.643068][ C3] should_fail_ex.cold+0x5/0xa [ 96.643080][ C3] should_failslab+0xc2/0x120 [ 96.643096][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.643111][ C3] ? __alloc_skb+0x140/0x710 [ 96.643127][ C3] __alloc_skb+0x140/0x710 [ 96.643140][ C3] ? __alloc_skb+0x5b7/0x710 [ 96.643154][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 96.643168][ C3] ? find_held_lock+0x2b/0x80 [ 96.643186][ C3] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 96.643201][ C3] ndisc_alloc_skb+0xd8/0x530 [ 96.643217][ C3] ndisc_send_rs+0x73/0x680 [ 96.643234][ C3] addrconf_rs_timer+0x424/0x880 [ 96.643250][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 96.643267][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 96.643281][ C3] call_timer_fn+0x19a/0x610 [ 96.643297][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 96.643314][ C3] ? __run_timers+0x747/0xb00 [ 96.643331][ C3] ? rcu_is_watching+0x12/0xc0 [ 96.643346][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 96.643359][ C3] __run_timers+0x757/0xb00 [ 96.643378][ C3] ? __pfx___run_timers+0x10/0x10 [ 96.643400][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 96.643413][ C3] run_timer_base+0x114/0x190 [ 96.643429][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 96.643447][ C3] run_timer_softirq+0x1a/0x50 [ 96.643464][ C3] handle_softirqs+0x1ea/0x9b0 [ 96.643478][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 96.643490][ C3] ? _raw_spin_unlock+0x28/0x50 [ 96.643501][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.643516][ C3] __irq_exit_rcu+0x162/0x210 [ 96.643528][ C3] irq_exit_rcu+0x9/0x30 [ 96.643540][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.643553][ C3] [ 96.643556][ C3] [ 96.643561][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.643574][ C3] RIP: 0010:stop_machine_yield+0xb/0x10 [ 96.643585][ C3] Code: e8 ba 68 b2 09 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 e8 77 b9 03 00 f3 90 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 96.643596][ C3] RSP: 0000:ffffc900005afd28 EFLAGS: 00000293 [ 96.643605][ C3] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8205f52b [ 96.643612][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f2e9 RDI: ffffffff8bcd5790 [ 96.643619][ C3] RBP: ffffc90002e27894 R08: 0000000000000005 R09: 0000000000000004 [ 96.643626][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 96.643632][ C3] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 96.643642][ C3] ? multi_cpu_stop+0x22b/0x4b0 [ 96.643653][ C3] ? stop_machine_yield+0x9/0x10 [ 96.643666][ C3] ? stop_machine_yield+0x9/0x10 [ 96.643676][ C3] multi_cpu_stop+0x1c6/0x4b0 [ 96.643689][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 96.643700][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 96.643711][ C3] cpu_stopper_thread+0x21e/0x460 [ 96.643724][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 96.643735][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 96.643751][ C3] ? kthread+0x13a/0x450 [ 96.643765][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.643777][ C3] kthread+0x370/0x450 [ 96.643791][ C3] ? __pfx_kthread+0x10/0x10 [ 96.643809][ C3] ret_from_fork+0x72b/0xd50 [ 96.643823][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 96.643837][ C3] ? __switch_to+0x800/0x10f0 [ 96.643854][ C3] ? __pfx_kthread+0x10/0x10 [ 96.643869][ C3] ret_from_fork_asm+0x1a/0x30 [ 96.643890][ C3] [ 96.644808][ C1] FAULT_INJECTION: forcing a failure. [ 96.644808][ C1] name failslab, interval 1, probability 10, space 0, times 31 [ 96.645094][ C0] FAULT_INJECTION: forcing a failure. [ 96.645094][ C0] name failslab, interval 1, probability 10, space 0, times 30 [ 96.645112][ C0] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 96.645125][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.645132][ C0] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 96.645151][ C0] Call Trace: [ 96.645155][ C0] [ 96.645160][ C0] dump_stack_lvl+0x100/0x190 [ 96.645172][ C0] should_fail_ex.cold+0x5/0xa [ 96.645185][ C0] should_failslab+0xc2/0x120 [ 96.645201][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.645216][ C0] ? __alloc_skb+0x140/0x710 [ 96.645232][ C0] __alloc_skb+0x140/0x710 [ 96.645245][ C0] ? __alloc_skb+0x5b7/0x710 [ 96.645259][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 96.645273][ C0] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 96.645290][ C0] ndisc_alloc_skb+0xd8/0x530 [ 96.645305][ C0] ndisc_send_rs+0x370/0x680 [ 96.645323][ C0] addrconf_rs_timer+0x424/0x880 [ 96.645338][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 96.645363][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 96.645383][ C0] call_timer_fn+0x19a/0x610 [ 96.645411][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 96.645437][ C0] ? __run_timers+0x747/0xb00 [ 96.645454][ C0] ? rcu_is_watching+0x12/0xc0 [ 96.645469][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 96.645482][ C0] __run_timers+0x757/0xb00 [ 96.645501][ C0] ? __pfx___run_timers+0x10/0x10 [ 96.645522][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 96.645536][ C0] run_timer_base+0x114/0x190 [ 96.645552][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 96.645570][ C0] run_timer_softirq+0x1a/0x50 [ 96.645586][ C0] handle_softirqs+0x1ea/0x9b0 [ 96.645601][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.645613][ C0] ? _raw_spin_unlock+0x28/0x50 [ 96.645623][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.645639][ C0] __irq_exit_rcu+0x162/0x210 [ 96.645651][ C0] irq_exit_rcu+0x9/0x30 [ 96.645663][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.645676][ C0] [ 96.645679][ C0] [ 96.645684][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.645696][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 96.645713][ C0] Code: 16 f9 5d 00 48 89 df 5b e9 9d 73 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 23 5a 12 48 8b 34 24 65 48 8b 15 a1 23 5a [ 96.645724][ C0] RSP: 0000:ffffc9000045fd28 EFLAGS: 00000246 [ 96.645734][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8205f4e7 [ 96.645741][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88801c744a80 [ 96.645748][ C0] RBP: ffffc90002e27894 R08: 0000000000000004 R09: 0000000000000001 [ 96.645755][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 96.645762][ C0] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 96.645772][ C0] ? multi_cpu_stop+0x1e7/0x4b0 [ 96.645785][ C0] ? stop_machine_yield+0x9/0x10 [ 96.645796][ C0] multi_cpu_stop+0x1f5/0x4b0 [ 96.645809][ C0] ? __stop_cpus.constprop.0+0xb1/0x140 [ 96.645820][ C0] ? __pfx_multi_cpu_stop+0x10/0x10 [ 96.645837][ C0] cpu_stopper_thread+0x21e/0x460 [ 96.645851][ C0] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 96.645862][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 96.645878][ C0] ? kthread+0x13a/0x450 [ 96.645891][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.645904][ C0] kthread+0x370/0x450 [ 96.645917][ C0] ? __pfx_kthread+0x10/0x10 [ 96.645933][ C0] ret_from_fork+0x72b/0xd50 [ 96.645947][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 96.645961][ C0] ? __switch_to+0x800/0x10f0 [ 96.645978][ C0] ? __pfx_kthread+0x10/0x10 [ 96.645993][ C0] ret_from_fork_asm+0x1a/0x30 [ 96.646014][ C0] [ 96.646055][ C0] FAULT_INJECTION: forcing a failure. [ 96.646055][ C0] name failslab, interval 1, probability 10, space 0, times 29 [ 96.646070][ C0] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 96.646082][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.646088][ C0] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 96.646106][ C0] Call Trace: [ 96.646110][ C0] [ 96.646114][ C0] dump_stack_lvl+0x100/0x190 [ 96.646127][ C0] should_fail_ex.cold+0x5/0xa [ 96.646139][ C0] should_failslab+0xc2/0x120 [ 96.646154][ C0] __kmalloc_noprof+0xfc/0x820 [ 96.646168][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 96.646187][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 96.646208][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 96.646224][ C0] ? desc_update_last_finalized+0x15d/0x1d0 [ 96.646245][ C0] ? __pfx_vprintk_store+0x10/0x10 [ 96.646260][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 96.646276][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 96.646295][ C0] ? __wake_up_klogd+0xe2/0x140 [ 96.646307][ C0] ? irq_work_queue+0xce/0x100 [ 96.646319][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 96.646334][ C0] ? __wake_up_klogd+0xe2/0x140 [ 96.646345][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 96.646360][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 96.646377][ C0] ? _printk+0xcf/0x110 [ 96.646388][ C0] ? __pfx__printk+0x10/0x10 [ 96.646398][ C0] ? find_held_lock+0x2b/0x80 [ 96.646417][ C0] ? __lock_acquire+0x49f/0x1a40 [ 96.646434][ C0] ? do_raw_spin_lock+0x128/0x260 [ 96.646448][ C0] ? __lock_acquire+0x49f/0x1a40 [ 96.646468][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 96.646488][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 96.646506][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 96.646524][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.646539][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 96.646552][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 96.646567][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 96.646584][ C0] ? __lock_acquire+0x49f/0x1a40 [ 96.646602][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 96.646617][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 96.646629][ C0] ? do_raw_spin_lock+0x128/0x260 [ 96.646644][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 96.646657][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 96.646675][ C0] ieee80211_rx_list+0xf19/0x2160 [ 96.646690][ C0] ? lock_acquire+0x1b9/0x370 [ 96.646707][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 96.646721][ C0] ieee80211_rx_napi+0xdc/0x400 [ 96.646733][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 96.646744][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 96.646757][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.646771][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 96.646788][ C0] tasklet_action_common+0x2de/0x3d0 [ 96.646803][ C0] handle_softirqs+0x1ea/0x9b0 [ 96.646818][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.646833][ C0] ? _raw_spin_unlock+0x28/0x50 [ 96.646844][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.646860][ C0] __irq_exit_rcu+0x162/0x210 [ 96.646872][ C0] irq_exit_rcu+0x9/0x30 [ 96.646883][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.646896][ C0] [ 96.646900][ C0] [ 96.646904][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.646916][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 96.646932][ C0] Code: 16 f9 5d 00 48 89 df 5b e9 9d 73 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 c5 23 5a 12 48 8b 34 24 65 48 8b 15 a1 23 5a [ 96.646943][ C0] RSP: 0000:ffffc9000045fd28 EFLAGS: 00000246 [ 96.646951][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8205f4e7 [ 96.646958][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88801c744a80 [ 96.646965][ C0] RBP: ffffc90002e27894 R08: 0000000000000004 R09: 0000000000000001 [ 96.646972][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 96.646978][ C0] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 96.647009][ C0] ? multi_cpu_stop+0x1e7/0x4b0 [ 96.647023][ C0] ? stop_machine_yield+0x9/0x10 [ 96.647034][ C0] multi_cpu_stop+0x1f5/0x4b0 [ 96.647047][ C0] ? __stop_cpus.constprop.0+0xb1/0x140 [ 96.647057][ C0] ? __pfx_multi_cpu_stop+0x10/0x10 [ 96.647068][ C0] cpu_stopper_thread+0x21e/0x460 [ 96.647081][ C0] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 96.647093][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 96.647108][ C0] ? kthread+0x13a/0x450 [ 96.647121][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 96.647134][ C0] kthread+0x370/0x450 [ 96.647148][ C0] ? __pfx_kthread+0x10/0x10 [ 96.647163][ C0] ret_from_fork+0x72b/0xd50 [ 96.647177][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 96.647191][ C0] ? __switch_to+0x800/0x10f0 [ 96.647208][ C0] ? __pfx_kthread+0x10/0x10 [ 96.647223][ C0] ret_from_fork_asm+0x1a/0x30 [ 96.647243][ C0] [ 96.647253][ C2] CPU: 2 UID: 0 PID: 6341 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 96.647274][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.647283][ C2] Call Trace: [ 96.647290][ C2] [ 96.647297][ C2] dump_stack_lvl+0x100/0x190 [ 96.647319][ C2] should_fail_ex.cold+0x5/0xa [ 96.647339][ C2] should_failslab+0xc2/0x120 [ 96.647363][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 96.647384][ C2] ? trace_kmem_cache_alloc+0xdd/0x100 [ 96.647407][ C2] ? __kasan_slab_alloc+0x89/0x90 [ 96.647430][ C2] ? kmalloc_reserve+0x21b/0x350 [ 96.647451][ C2] kmalloc_reserve+0x21b/0x350 [ 96.647472][ C2] __alloc_skb+0x185/0x710 [ 96.647492][ C2] ? __alloc_skb+0x5b7/0x710 [ 96.647513][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 96.647535][ C2] ? lock_acquire+0x1b9/0x370 [ 96.647565][ C2] __netdev_alloc_skb+0x7a/0x960 [ 96.647592][ C2] __ieee80211_beacon_get+0xba1/0x1ee0 [ 96.647618][ C2] ? __lock_acquire+0x49f/0x1a40 [ 96.647646][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 96.647671][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 96.647700][ C2] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 96.647732][ C2] __iterate_interfaces+0x2e6/0x650 [ 96.647754][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 96.647781][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 96.647805][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 96.647832][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 96.647852][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 96.647871][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 96.647901][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 96.647924][ C2] handle_softirqs+0x1ea/0x9b0 [ 96.647947][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 96.647966][ C2] ? _raw_spin_unlock+0x28/0x50 [ 96.647983][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 96.648007][ C2] __irq_exit_rcu+0x162/0x210 [ 96.648026][ C2] irq_exit_rcu+0x9/0x30 [ 96.648045][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.648064][ C2] [ 96.648070][ C2] [ 96.648077][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.648096][ C2] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 96.648118][ C2] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 96.648135][ C2] RSP: 0018:ffffc9000608f540 EFLAGS: 00000293 [ 96.648150][ C2] RAX: ffffffff8f9af798 RBX: ffffffff8f9af740 RCX: ffffffff81e7f251 [ 96.648162][ C2] RDX: ffff888021872540 RSI: ffffffff81e7f25f RDI: ffff888021872540 [ 96.648174][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 96.648185][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004697 [ 96.648195][ C2] R13: ffffffff8f9af798 R14: ffffc9000608f5c0 R15: dffffc0000000000 [ 96.648214][ C2] ? console_flush_one_record+0xab1/0xe50 [ 96.648235][ C2] ? console_flush_one_record+0xabf/0xe50 [ 96.648268][ C2] ? __pfx_console_flush_one_record+0x10/0x10 [ 96.648288][ C2] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 96.648316][ C2] ? is_printk_cpu_sync_owner+0x32/0x40 [ 96.648343][ C2] console_unlock+0x103/0x260 [ 96.648364][ C2] ? __pfx_console_unlock+0x10/0x10 [ 96.648384][ C2] ? lock_acquire+0x141/0x370 [ 96.648412][ C2] ? vprintk_emit+0x66a/0x6b0 [ 96.648435][ C2] vprintk_emit+0x407/0x6b0 [ 96.648456][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 96.648484][ C2] _printk+0xcf/0x110 [ 96.648501][ C2] ? __pfx__printk+0x10/0x10 [ 96.648523][ C2] ? __pfx____ratelimit+0x10/0x10 [ 96.648547][ C2] should_fail_ex+0x4e4/0x640 [ 96.648576][ C2] should_failslab+0xc2/0x120 [ 96.648599][ C2] __kmalloc_noprof+0xfc/0x820 [ 96.648621][ C2] ? tomoyo_encode2+0xfb/0x3c0 [ 96.648650][ C2] tomoyo_encode2+0xfb/0x3c0 [ 96.648678][ C2] tomoyo_encode+0x29/0x50 [ 96.648701][ C2] tomoyo_realpath_from_path+0x18c/0x690 [ 96.648732][ C2] tomoyo_path_perm+0x276/0x460 [ 96.648753][ C2] ? tomoyo_path_perm+0x262/0x460 [ 96.648776][ C2] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 96.648822][ C2] ? find_held_lock+0x2b/0x80 [ 96.648842][ C2] ? __might_fault+0xc5/0x140 [ 96.648860][ C2] ? __might_fault+0xc5/0x140 [ 96.648880][ C2] security_inode_getattr+0x116/0x280 [ 96.648903][ C2] vfs_statx+0x11f/0x3f0 [ 96.648925][ C2] ? __pfx_vfs_statx+0x10/0x10 [ 96.648947][ C2] ? do_getname+0x191/0x390 [ 96.648971][ C2] vfs_fstatat+0x77/0xe0 [ 96.648993][ C2] __do_sys_newfstatat+0x9d/0x120 [ 96.649015][ C2] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 96.649058][ C2] do_syscall_64+0x115/0x840 [ 96.649079][ C2] ? clear_bhb_loop+0x40/0x90 [ 96.649099][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.649118][ C2] RIP: 0033:0x7f3a93911b0a [ 96.649133][ C2] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 96.649149][ C2] RSP: 002b:00007ffc29351f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 96.649165][ C2] RAX: ffffffffffffffda RBX: 0000558be15be270 RCX: 00007f3a93911b0a [ 96.649176][ C2] RDX: 00007ffc29351f90 RSI: 0000558be15be270 RDI: 00000000ffffff9c [ 96.649187][ C2] RBP: 0000558be15be288 R08: 0000558be15be290 R09: 0000000000000000 [ 96.649198][ C2] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc293530b5 [ 96.649209][ C2] R13: 00007ffc29352020 R14: 0000558baaee46d7 R15: 00007ffc293530b0 [ 96.649233][ C2] [ 99.688632][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.688649][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.688657][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.688681][ C1] Call Trace: [ 99.688687][ C1] [ 99.688693][ C1] dump_stack_lvl+0x100/0x190 [ 99.688708][ C1] should_fail_ex.cold+0x5/0xa [ 99.688721][ C1] should_failslab+0xc2/0x120 [ 99.688738][ C1] __kmalloc_noprof+0xfc/0x820 [ 99.688753][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.688772][ C1] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.688788][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.688809][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 99.688833][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.688853][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 99.688869][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 99.688887][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.688906][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 99.688923][ C1] ? lock_acquire+0x1b9/0x370 [ 99.688940][ C1] ? find_held_lock+0x2b/0x80 [ 99.688954][ C1] ? unwind_next_frame+0x3be/0x2090 [ 99.688971][ C1] ? unwind_next_frame+0x3be/0x2090 [ 99.688989][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 99.689004][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 99.689021][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.689042][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.689059][ C1] ? stack_trace_save+0x8e/0xc0 [ 99.689074][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 99.689092][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 99.689112][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 99.689131][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 99.689152][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 99.689167][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 99.689184][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.689202][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 99.689217][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 99.689229][ C1] ? do_raw_spin_lock+0x128/0x260 [ 99.689245][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 99.689259][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 99.689277][ C1] ieee80211_rx_list+0xf19/0x2160 [ 99.689296][ C1] ? lock_acquire+0x1b9/0x370 [ 99.689313][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 99.689328][ C1] ieee80211_rx_napi+0xdc/0x400 [ 99.689339][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 99.689351][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 99.689364][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.689378][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 99.689396][ C1] tasklet_action_common+0x2de/0x3d0 [ 99.689414][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.689428][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.689441][ C1] ? _raw_spin_unlock+0x28/0x50 [ 99.689451][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.689468][ C1] __irq_exit_rcu+0x162/0x210 [ 99.689481][ C1] irq_exit_rcu+0x9/0x30 [ 99.689492][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.689507][ C1] [ 99.689510][ C1] [ 99.689515][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.689529][ C1] RIP: 0010:write_comp_data+0x10/0x90 [ 99.689550][ C1] Code: 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 19 2b 5a 12 49 89 f8 49 89 f1 49 89 d2 <65> 48 8b 3d f0 2a 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 99.689561][ C1] RSP: 0000:ffffc90000557d28 EFLAGS: 00000246 [ 99.689572][ C1] RAX: 0000000080000001 RBX: 0000000000000001 RCX: ffffffff8205f4e7 [ 99.689579][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004 [ 99.689586][ C1] RBP: ffffc90002e27894 R08: 0000000000000004 R09: 0000000000000001 [ 99.689592][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.689599][ C1] R13: fffff520005c4f12 R14: 0000000000000001 R15: 0000000000000003 [ 99.689610][ C1] ? multi_cpu_stop+0x1e7/0x4b0 [ 99.689624][ C1] ? stop_machine_yield+0x9/0x10 [ 99.689634][ C1] multi_cpu_stop+0x1e7/0x4b0 [ 99.689647][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.689658][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.689669][ C1] cpu_stopper_thread+0x21e/0x460 [ 99.689683][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.689694][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.689712][ C1] ? kthread+0x13a/0x450 [ 99.689726][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.689739][ C1] kthread+0x370/0x450 [ 99.689753][ C1] ? __pfx_kthread+0x10/0x10 [ 99.689768][ C1] ret_from_fork+0x72b/0xd50 [ 99.689784][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.689798][ C1] ? __switch_to+0x800/0x10f0 [ 99.689817][ C1] ? __pfx_kthread+0x10/0x10 [ 99.689832][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.689853][ C1] [ 99.833356][ C1] FAULT_INJECTION: forcing a failure. [ 99.833356][ C1] name failslab, interval 1, probability 10, space 0, times 26 [ 99.833766][ C2] FAULT_INJECTION: forcing a failure. [ 99.833766][ C2] name failslab, interval 1, probability 10, space 0, times 24 [ 99.834303][ C3] FAULT_INJECTION: forcing a failure. [ 99.834303][ C3] name failslab, interval 1, probability 10, space 0, times 23 [ 99.834334][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.834357][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.834369][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.834405][ C3] Call Trace: [ 99.834412][ C3] [ 99.834421][ C3] dump_stack_lvl+0x100/0x190 [ 99.834462][ C3] should_fail_ex.cold+0x5/0xa [ 99.834487][ C3] should_failslab+0xc2/0x120 [ 99.834515][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.834542][ C3] ? __alloc_skb+0x140/0x710 [ 99.834572][ C3] __alloc_skb+0x140/0x710 [ 99.834595][ C3] ? __alloc_skb+0x5b7/0x710 [ 99.834619][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 99.834643][ C3] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 99.834672][ C3] ndisc_alloc_skb+0xd8/0x530 [ 99.834699][ C3] ndisc_send_rs+0x370/0x680 [ 99.834728][ C3] addrconf_rs_timer+0x424/0x880 [ 99.834755][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.834786][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.834810][ C3] call_timer_fn+0x19a/0x610 [ 99.834838][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.834868][ C3] ? __run_timers+0x747/0xb00 [ 99.834897][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.834923][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.834944][ C3] __run_timers+0x757/0xb00 [ 99.834988][ C0] FAULT_INJECTION: forcing a failure. [ 99.834988][ C0] name failslab, interval 1, probability 10, space 0, times 23 [ 99.835004][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.835043][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.835070][ C3] run_timer_base+0x114/0x190 [ 99.835098][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.835129][ C3] run_timer_softirq+0x1a/0x50 [ 99.835158][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.835185][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.835206][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.835224][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.835253][ C3] __irq_exit_rcu+0x162/0x210 [ 99.835274][ C3] irq_exit_rcu+0x9/0x30 [ 99.835294][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.835317][ C3] [ 99.835323][ C3] [ 99.835331][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.835353][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.835374][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.835392][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.835409][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.835421][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.835434][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.835446][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.835458][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.835476][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.835495][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.835522][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.835540][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.835558][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.835583][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.835602][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.835631][ C3] ? kthread+0x13a/0x450 [ 99.835654][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.835676][ C3] kthread+0x370/0x450 [ 99.835700][ C3] ? __pfx_kthread+0x10/0x10 [ 99.835727][ C3] ret_from_fork+0x72b/0xd50 [ 99.835751][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.835776][ C3] ? __switch_to+0x800/0x10f0 [ 99.835806][ C3] ? __pfx_kthread+0x10/0x10 [ 99.835832][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.835872][ C3] [ 99.835884][ C0] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 99.835906][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.835916][ C0] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.835947][ C0] Call Trace: [ 99.835954][ C0] [ 99.835961][ C0] dump_stack_lvl+0x100/0x190 [ 99.835981][ C0] should_fail_ex.cold+0x5/0xa [ 99.836001][ C0] should_failslab+0xc2/0x120 [ 99.836024][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.836047][ C0] ? __alloc_skb+0x140/0x710 [ 99.836072][ C0] __alloc_skb+0x140/0x710 [ 99.836091][ C0] ? __alloc_skb+0x5b7/0x710 [ 99.836112][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 99.836134][ C0] ? do_raw_spin_lock+0x128/0x260 [ 99.836157][ C0] skb_copy+0x1ca/0x3a0 [ 99.836181][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 99.836218][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 99.836241][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 99.836266][ C0] ? __lock_acquire+0x49f/0x1a40 [ 99.836293][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 99.836319][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 99.836345][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 99.836375][ C0] __iterate_interfaces+0x2e6/0x650 [ 99.836396][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 99.836421][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 99.836444][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 99.836469][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 99.836489][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 99.836508][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 99.836537][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 99.836560][ C0] handle_softirqs+0x1ea/0x9b0 [ 99.836582][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 99.836601][ C0] ? _raw_spin_unlock+0x28/0x50 [ 99.836618][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.836642][ C0] __irq_exit_rcu+0x162/0x210 [ 99.836660][ C0] irq_exit_rcu+0x9/0x30 [ 99.836678][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.836697][ C0] [ 99.836703][ C0] [ 99.836710][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.836729][ C0] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.836748][ C0] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.836766][ C0] RSP: 0000:ffffc9000045fd30 EFLAGS: 00000293 [ 99.836780][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.836791][ C0] RDX: ffff88801c744a80 RSI: ffffffff8205f68a RDI: ffff88801c744a80 [ 99.836803][ C0] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.836813][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.836824][ C0] R13: fffff520005c4f12 R14: 0000000000000004 R15: 0000000000000003 [ 99.836841][ C0] ? multi_cpu_stop+0x37c/0x4b0 [ 99.836858][ C0] ? multi_cpu_stop+0x38a/0x4b0 [ 99.836894][ C0] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.836911][ C0] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.836928][ C0] cpu_stopper_thread+0x21e/0x460 [ 99.836950][ C0] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.836966][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 99.836991][ C0] ? kthread+0x13a/0x450 [ 99.837012][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.837032][ C0] kthread+0x370/0x450 [ 99.837053][ C0] ? __pfx_kthread+0x10/0x10 [ 99.837076][ C0] ret_from_fork+0x72b/0xd50 [ 99.837098][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 99.837120][ C0] ? __switch_to+0x800/0x10f0 [ 99.837145][ C0] ? __pfx_kthread+0x10/0x10 [ 99.837169][ C0] ret_from_fork_asm+0x1a/0x30 [ 99.837207][ C0] [ 99.837235][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.837249][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.837257][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.837278][ C1] Call Trace: [ 99.837283][ C1] [ 99.837288][ C1] dump_stack_lvl+0x100/0x190 [ 99.837301][ C1] should_fail_ex.cold+0x5/0xa [ 99.837314][ C1] should_failslab+0xc2/0x120 [ 99.837330][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.837345][ C1] ? __alloc_skb+0x140/0x710 [ 99.837366][ C1] __alloc_skb+0x140/0x710 [ 99.837380][ C1] ? __alloc_skb+0x5b7/0x710 [ 99.837393][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 99.837409][ C1] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 99.837423][ C1] ? __rcu_read_unlock+0x223/0x5e0 [ 99.837435][ C1] ndisc_alloc_skb+0xd8/0x530 [ 99.837451][ C1] ndisc_send_rs+0x370/0x680 [ 99.837468][ C1] addrconf_rs_timer+0x424/0x880 [ 99.837483][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.837501][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.837514][ C1] call_timer_fn+0x19a/0x610 [ 99.837531][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.837546][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.837564][ C1] ? __run_timers+0x747/0xb00 [ 99.837580][ C1] ? __run_timers+0x747/0xb00 [ 99.837599][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.837611][ C1] __run_timers+0x757/0xb00 [ 99.837631][ C1] ? __pfx___run_timers+0x10/0x10 [ 99.837652][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.837664][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 99.837665][ C0] FAULT_INJECTION: forcing a failure. [ 99.837665][ C0] name failslab, interval 1, probability 10, space 0, times 21 [ 99.837678][ C1] run_timer_base+0x114/0x190 [ 99.837695][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 99.837712][ C1] ? handle_softirqs+0x1a7/0x9b0 [ 99.837725][ C1] run_timer_softirq+0x1a/0x50 [ 99.837741][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.837755][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.837771][ C1] __irq_exit_rcu+0x162/0x210 [ 99.837783][ C1] irq_exit_rcu+0x9/0x30 [ 99.837795][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.837808][ C1] [ 99.837812][ C1] [ 99.837816][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.837828][ C1] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.837840][ C1] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.837851][ C1] RSP: 0000:ffffc90000557d30 EFLAGS: 00000293 [ 99.837860][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.837867][ C1] RDX: ffff88801cb4a540 RSI: ffffffff8205f68a RDI: ffff88801cb4a540 [ 99.837874][ C1] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.837880][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.837887][ C1] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.837897][ C1] ? multi_cpu_stop+0x37c/0x4b0 [ 99.837908][ C1] ? multi_cpu_stop+0x38a/0x4b0 [ 99.837924][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.837935][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.837946][ C1] cpu_stopper_thread+0x21e/0x460 [ 99.837960][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.837972][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.837988][ C1] ? kthread+0x13a/0x450 [ 99.838002][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.838015][ C1] kthread+0x370/0x450 [ 99.838029][ C1] ? __pfx_kthread+0x10/0x10 [ 99.838045][ C1] ret_from_fork+0x72b/0xd50 [ 99.838059][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.838073][ C1] ? __switch_to+0x800/0x10f0 [ 99.838090][ C1] ? __pfx_kthread+0x10/0x10 [ 99.838105][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.838127][ C1] [ 99.838134][ C0] CPU: 0 UID: 0 PID: 845 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 99.838154][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.838165][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 99.838178][ C3] FAULT_INJECTION: forcing a failure. [ 99.838178][ C3] name failslab, interval 1, probability 10, space 0, times 19 [ 99.838191][ C0] Call Trace: [ 99.838197][ C0] [ 99.838204][ C0] dump_stack_lvl+0x100/0x190 [ 99.838223][ C0] should_fail_ex.cold+0x5/0xa [ 99.838246][ C0] should_failslab+0xc2/0x120 [ 99.838268][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.838290][ C0] ? skb_clone+0x190/0x400 [ 99.838317][ C0] skb_clone+0x190/0x400 [ 99.838339][ C0] br_flood+0x34f/0x7b0 [ 99.838368][ C0] br_handle_frame_finish+0x1014/0x1fa0 [ 99.838397][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 99.838425][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 99.838447][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 99.838469][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 99.838490][ C0] ? nf_hook_slow+0x167/0x220 [ 99.838510][ C0] br_nf_hook_thresh+0x30d/0x420 [ 99.838537][ C1] FAULT_INJECTION: forcing a failure. [ 99.838537][ C1] name failslab, interval 1, probability 10, space 0, times 18 [ 99.838535][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 99.838564][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 99.838591][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 99.838616][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 99.838640][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.838663][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.838689][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 99.838715][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 99.838744][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 99.838771][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 99.838796][ C0] ? lock_acquire+0x1b9/0x370 [ 99.838822][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 99.838848][ C0] ? net_generic+0xea/0x2a0 [ 99.838876][ C0] br_nf_pre_routing+0x90f/0x1560 [ 99.838905][ C0] br_handle_frame+0xce9/0x1540 [ 99.838932][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 99.838959][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 99.839014][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 99.839039][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 99.839068][ C0] ? kmem_cache_free+0x127/0x6b0 [ 99.839086][ C0] ? skb_release_data+0x6ca/0x8e0 [ 99.839109][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 99.839131][ C0] ? kfree_skbmem+0x19f/0x210 [ 99.839148][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 99.839173][ C0] ? ip6_mc_input+0x51a/0xf50 [ 99.839204][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 99.839228][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 99.839255][ C0] ? __lock_acquire+0x49f/0x1a40 [ 99.839285][ C0] ? process_backlog+0x32a/0x1580 [ 99.839302][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 99.839322][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 99.839345][ C0] ? lock_acquire+0x1b9/0x370 [ 99.839371][ C0] ? process_backlog+0x32a/0x1580 [ 99.839392][ C0] ? process_backlog+0x32a/0x1580 [ 99.839410][ C0] __netif_receive_skb+0x1f/0x120 [ 99.839431][ C0] process_backlog+0x37a/0x1580 [ 99.839456][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 99.839478][ C0] net_rx_action+0xa40/0xf20 [ 99.839505][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 99.839527][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 99.839546][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 99.839564][ C0] ? sched_clock+0x38/0x60 [ 99.839583][ C0] ? tmigr_handle_remote+0x132/0x380 [ 99.839614][ C0] ? run_timer_base+0x121/0x190 [ 99.839638][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 99.839666][ C0] handle_softirqs+0x1ea/0x9b0 [ 99.839686][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 99.839705][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 99.839722][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.839743][ C0] ? srcu_invoke_callbacks+0x390/0x5e0 [ 99.839762][ C0] do_softirq+0xac/0xe0 [ 99.839780][ C0] [ 99.839785][ C0] [ 99.839792][ C0] __local_bh_enable_ip+0xf8/0x120 [ 99.839810][ C0] srcu_invoke_callbacks+0x395/0x5e0 [ 99.839831][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 99.839870][ C0] ? rcu_is_watching+0x12/0xc0 [ 99.839894][ C0] process_one_work+0xa23/0x1940 [ 99.839927][ C0] ? __pfx_process_one_work+0x10/0x10 [ 99.839958][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 99.839978][ C0] worker_thread+0x5ef/0xe50 [ 99.840007][ C0] ? __pfx_worker_thread+0x10/0x10 [ 99.840032][ C0] ? kthread+0x13a/0x450 [ 99.840052][ C0] ? __pfx_worker_thread+0x10/0x10 [ 99.840074][ C0] kthread+0x370/0x450 [ 99.840095][ C0] ? __pfx_kthread+0x10/0x10 [ 99.840118][ C0] ret_from_fork+0x72b/0xd50 [ 99.840138][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 99.840159][ C0] ? __switch_to+0x800/0x10f0 [ 99.840189][ C0] ? __pfx_kthread+0x10/0x10 [ 99.840212][ C0] ret_from_fork_asm+0x1a/0x30 [ 99.840246][ C0] [ 99.840256][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.840271][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.840278][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.840298][ C3] Call Trace: [ 99.840302][ C3] [ 99.840306][ C3] dump_stack_lvl+0x100/0x190 [ 99.840319][ C3] should_fail_ex.cold+0x5/0xa [ 99.840333][ C3] should_failslab+0xc2/0x120 [ 99.840348][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.840363][ C3] ? dst_alloc+0x99/0x1a0 [ 99.840377][ C3] ? __pfx_ip6_dst_gc+0x10/0x10 [ 99.840394][ C3] dst_alloc+0x99/0x1a0 [ 99.840409][ C3] icmp6_dst_alloc+0x79/0x4f0 [ 99.840425][ C3] ndisc_send_skb+0x133f/0x1bf0 [ 99.840442][ C3] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.840459][ C3] ? kmalloc_reserve+0xf9/0x350 [ 99.840474][ C3] ? ndisc_alloc_skb+0x319/0x530 [ 99.840489][ C3] ? __asan_memcpy+0x3c/0x60 [ 99.840503][ C3] ndisc_send_rs+0x129/0x680 [ 99.840520][ C3] addrconf_rs_timer+0x424/0x880 [ 99.840535][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.840552][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.840566][ C3] call_timer_fn+0x19a/0x610 [ 99.840582][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.840600][ C3] ? __run_timers+0x747/0xb00 [ 99.840616][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.840631][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.840644][ C3] __run_timers+0x757/0xb00 [ 99.840664][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.840685][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.840698][ C3] run_timer_base+0x114/0x190 [ 99.840715][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.840733][ C3] run_timer_softirq+0x1a/0x50 [ 99.840749][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.840763][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.840775][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.840786][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.840802][ C3] __irq_exit_rcu+0x162/0x210 [ 99.840814][ C3] irq_exit_rcu+0x9/0x30 [ 99.840826][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.840839][ C3] [ 99.840842][ C3] [ 99.840847][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.840844][ C0] FAULT_INJECTION: forcing a failure. [ 99.840844][ C0] name failslab, interval 1, probability 10, space 0, times 17 [ 99.840860][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.840872][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.840882][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.840891][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.840898][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.840905][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.840912][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.840918][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.840928][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.840939][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.840954][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.840965][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.840976][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.840990][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.841001][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.841018][ C3] ? kthread+0x13a/0x450 [ 99.841031][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.841044][ C3] kthread+0x370/0x450 [ 99.841058][ C3] ? __pfx_kthread+0x10/0x10 [ 99.841073][ C3] ret_from_fork+0x72b/0xd50 [ 99.841087][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.841101][ C3] ? __switch_to+0x800/0x10f0 [ 99.841118][ C3] ? __pfx_kthread+0x10/0x10 [ 99.841133][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.841157][ C3] [ 99.841165][ C0] CPU: 0 UID: 0 PID: 845 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 99.841190][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.841202][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 99.841214][ C3] FAULT_INJECTION: forcing a failure. [ 99.841214][ C3] name failslab, interval 1, probability 10, space 0, times 16 [ 99.841220][ C0] Call Trace: [ 99.841226][ C0] [ 99.841232][ C0] dump_stack_lvl+0x100/0x190 [ 99.841251][ C0] should_fail_ex.cold+0x5/0xa [ 99.841270][ C0] should_failslab+0xc2/0x120 [ 99.841293][ C0] __kmalloc_noprof+0xfc/0x820 [ 99.841315][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.841343][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.841368][ C0] ? lock_acquire+0x1b9/0x370 [ 99.841397][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 99.841436][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 99.841460][ C0] ? kfree_skbmem+0x19a/0x210 [ 99.841481][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 99.841503][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 99.841529][ C0] ? kasan_save_stack+0x3f/0x50 [ 99.841549][ C0] ? kasan_save_stack+0x30/0x50 [ 99.841567][ C0] ? kasan_save_track+0x14/0x30 [ 99.841585][ C0] ? kasan_save_free_info+0x3b/0x70 [ 99.841599][ C0] ? __kasan_slab_free+0x5f/0x80 [ 99.841619][ C0] ? kmem_cache_free+0x127/0x6b0 [ 99.841635][ C0] ? kfree_skbmem+0x19a/0x210 [ 99.841651][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 99.841673][ C0] ? __netif_receive_skb_core.constprop.0+0x571/0x3530 [ 99.841694][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 99.841712][ C0] ? __netif_receive_skb+0x1f/0x120 [ 99.841730][ C0] ? process_backlog+0x37a/0x1580 [ 99.841747][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 99.841766][ C0] ? net_rx_action+0xa40/0xf20 [ 99.841783][ C0] ? handle_softirqs+0x1ea/0x9b0 [ 99.841802][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 99.841823][ C0] ? process_one_work+0xa23/0x1940 [ 99.841846][ C0] ? worker_thread+0x5ef/0xe50 [ 99.841867][ C0] ? kthread+0x370/0x450 [ 99.841887][ C0] ? ret_from_fork+0x72b/0xd50 [ 99.841904][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 99.841950][ C0] ? __lock_acquire+0x49f/0x1a40 [ 99.841975][ C0] ? kfree_skbmem+0x19a/0x210 [ 99.841991][ C0] ? kmem_cache_free+0x127/0x6b0 [ 99.842007][ C0] ? skb_release_data+0x6ca/0x8e0 [ 99.842056][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 99.842089][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 99.842117][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 99.842151][ C0] ? ip6_mc_input+0x51a/0xf50 [ 99.842173][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 99.842200][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 99.842225][ C0] ? __lock_acquire+0x49f/0x1a40 [ 99.842252][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 99.842275][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 99.842294][ C0] ? do_raw_spin_lock+0x128/0x260 [ 99.842320][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 99.842339][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 99.842366][ C0] ieee80211_rx_list+0xf19/0x2160 [ 99.842391][ C0] ? lock_acquire+0x1b9/0x370 [ 99.842415][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 99.842439][ C0] ieee80211_rx_napi+0xdc/0x400 [ 99.842457][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 99.842473][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 99.842493][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.842515][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 99.842542][ C0] tasklet_action_common+0x2de/0x3d0 [ 99.842567][ C0] handle_softirqs+0x1ea/0x9b0 [ 99.842587][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 99.842605][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 99.842622][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.842646][ C0] ? srcu_invoke_callbacks+0x390/0x5e0 [ 99.842665][ C0] do_softirq+0xac/0xe0 [ 99.842682][ C0] [ 99.842688][ C0] [ 99.842694][ C0] __local_bh_enable_ip+0xf8/0x120 [ 99.842714][ C0] srcu_invoke_callbacks+0x395/0x5e0 [ 99.842734][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 99.842756][ C0] ? rcu_is_watching+0x12/0xc0 [ 99.842778][ C0] process_one_work+0xa23/0x1940 [ 99.842811][ C0] ? __pfx_process_one_work+0x10/0x10 [ 99.842840][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 99.842861][ C0] worker_thread+0x5ef/0xe50 [ 99.842891][ C0] ? __pfx_worker_thread+0x10/0x10 [ 99.842915][ C0] ? kthread+0x13a/0x450 [ 99.842936][ C0] ? __pfx_worker_thread+0x10/0x10 [ 99.842957][ C0] kthread+0x370/0x450 [ 99.843003][ C0] ? __pfx_kthread+0x10/0x10 [ 99.843026][ C0] ret_from_fork+0x72b/0xd50 [ 99.843048][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 99.843069][ C0] ? __switch_to+0x800/0x10f0 [ 99.843094][ C0] ? __pfx_kthread+0x10/0x10 [ 99.843117][ C0] ret_from_fork_asm+0x1a/0x30 [ 99.843151][ C0] [ 99.843162][ C2] CPU: 2 UID: 0 PID: 22 Comm: migration/2 Not tainted syzkaller #0 PREEMPT(full) [ 99.843177][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.843185][ C2] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.843206][ C2] Call Trace: [ 99.843210][ C2] [ 99.843215][ C2] dump_stack_lvl+0x100/0x190 [ 99.843228][ C2] should_fail_ex.cold+0x5/0xa [ 99.843241][ C2] should_failslab+0xc2/0x120 [ 99.843256][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.843271][ C2] ? skb_clone+0x190/0x400 [ 99.843288][ C2] skb_clone+0x190/0x400 [ 99.843304][ C2] hsr_create_tagged_frame+0x983/0xf00 [ 99.843316][ C2] ? __local_bh_enable_ip+0x9e/0x120 [ 99.843329][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 99.843342][ C2] ? hsr_drop_frame+0x1f3/0xb80 [ 99.843355][ C2] hsr_forward_skb+0x1396/0x28d0 [ 99.843367][ C2] ? __pfx_hsr_drop_frame+0x10/0x10 [ 99.843380][ C2] ? __pfx_hsr_forward_skb+0x10/0x10 [ 99.843395][ C2] ? __asan_memset+0x23/0x50 [ 99.843407][ C2] ? __skb_pad+0x252/0x600 [ 99.843425][ C2] send_hsr_supervision_frame+0x696/0xbc0 [ 99.843445][ C2] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 99.843462][ C2] hsr_announce+0x169/0x3e0 [ 99.843479][ C2] ? __pfx_hsr_announce+0x10/0x10 [ 99.843498][ C2] ? __pfx_hsr_announce+0x10/0x10 [ 99.843515][ C2] call_timer_fn+0x19a/0x610 [ 99.843531][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 99.843549][ C2] ? __run_timers+0x747/0xb00 [ 99.843565][ C2] ? rcu_is_watching+0x12/0xc0 [ 99.843580][ C2] ? __pfx_hsr_announce+0x10/0x10 [ 99.843596][ C2] __run_timers+0x757/0xb00 [ 99.843615][ C2] ? __pfx___run_timers+0x10/0x10 [ 99.843637][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 99.843650][ C2] run_timer_base+0x114/0x190 [ 99.843667][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 99.843685][ C2] run_timer_softirq+0x1a/0x50 [ 99.843701][ C2] handle_softirqs+0x1ea/0x9b0 [ 99.843713][ T845] FAULT_INJECTION: forcing a failure. [ 99.843713][ T845] name failslab, interval 1, probability 10, space 0, times 14 [ 99.843715][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 99.843733][ C2] ? _raw_spin_unlock+0x28/0x50 [ 99.843743][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.843759][ C2] __irq_exit_rcu+0x162/0x210 [ 99.843771][ C2] irq_exit_rcu+0x9/0x30 [ 99.843783][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.843796][ C2] [ 99.843800][ C2] [ 99.843804][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.843817][ C2] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.843829][ C2] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.843840][ C2] RSP: 0018:ffffc900004ffd30 EFLAGS: 00000293 [ 99.843850][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.843857][ C2] RDX: ffff88801cb3a540 RSI: ffffffff8205f68a RDI: ffff88801cb3a540 [ 99.843864][ C2] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.843871][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.843878][ C2] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.843889][ C2] ? multi_cpu_stop+0x37c/0x4b0 [ 99.843900][ C2] ? multi_cpu_stop+0x38a/0x4b0 [ 99.843915][ C2] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.843926][ C2] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.843937][ C2] cpu_stopper_thread+0x21e/0x460 [ 99.843951][ C2] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.843962][ C2] smpboot_thread_fn+0x3d3/0xaa0 [ 99.843978][ C2] ? kthread+0x13a/0x450 [ 99.843992][ C2] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.844005][ C2] kthread+0x370/0x450 [ 99.844019][ C2] ? __pfx_kthread+0x10/0x10 [ 99.844034][ C2] ret_from_fork+0x72b/0xd50 [ 99.844048][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 99.844063][ C2] ? __switch_to+0x800/0x10f0 [ 99.844080][ C2] ? __pfx_kthread+0x10/0x10 [ 99.844095][ C2] ret_from_fork_asm+0x1a/0x30 [ 99.844116][ C2] [ 99.844123][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.844138][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.844144][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.844167][ C3] Call Trace: [ 99.844171][ C3] [ 99.844176][ C3] dump_stack_lvl+0x100/0x190 [ 99.844188][ C3] should_fail_ex.cold+0x5/0xa [ 99.844198][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.844212][ C3] should_failslab+0xc2/0x120 [ 99.844227][ C3] __kmalloc_cache_noprof+0x91/0x6c0 [ 99.844240][ C3] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 99.844256][ C3] dst_cow_metrics_generic+0x4c/0x1e0 [ 99.844271][ C3] icmp6_dst_alloc+0x418/0x4f0 [ 99.844288][ C3] ndisc_send_skb+0x133f/0x1bf0 [ 99.844306][ C3] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.844322][ C3] ? kmalloc_reserve+0xf9/0x350 [ 99.844338][ C3] ? ndisc_alloc_skb+0x319/0x530 [ 99.844352][ C3] ? __asan_memcpy+0x3c/0x60 [ 99.844366][ C3] ndisc_send_rs+0x129/0x680 [ 99.844384][ C3] addrconf_rs_timer+0x424/0x880 [ 99.844391][ C2] FAULT_INJECTION: forcing a failure. [ 99.844391][ C2] name failslab, interval 1, probability 10, space 0, times 13 [ 99.844399][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.844416][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.844430][ C3] call_timer_fn+0x19a/0x610 [ 99.844459][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.844476][ C3] ? __run_timers+0x747/0xb00 [ 99.844493][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.844508][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.844521][ C3] __run_timers+0x757/0xb00 [ 99.844540][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.844562][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.844575][ C3] run_timer_base+0x114/0x190 [ 99.844592][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.844610][ C3] run_timer_softirq+0x1a/0x50 [ 99.844626][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.844641][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.844653][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.844663][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.844679][ C3] __irq_exit_rcu+0x162/0x210 [ 99.844691][ C3] irq_exit_rcu+0x9/0x30 [ 99.844703][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.844716][ C3] [ 99.844719][ C3] [ 99.844723][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.844736][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.844748][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.844758][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.844767][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.844774][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.844781][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.844788][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.844795][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.844805][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.844816][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.844832][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.844843][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.844854][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.844867][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.844879][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.844894][ C3] ? kthread+0x13a/0x450 [ 99.844908][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.844921][ C3] kthread+0x370/0x450 [ 99.844934][ C3] ? __pfx_kthread+0x10/0x10 [ 99.844949][ C3] ret_from_fork+0x72b/0xd50 [ 99.844963][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.844977][ C3] ? __switch_to+0x800/0x10f0 [ 99.844994][ C3] ? __pfx_kthread+0x10/0x10 [ 99.845016][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.845052][ C3] [ 99.845064][ C2] CPU: 2 UID: 0 PID: 22 Comm: migration/2 Not tainted syzkaller #0 PREEMPT(full) [ 99.845079][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.845086][ C2] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.845106][ C2] Call Trace: [ 99.845110][ C2] [ 99.845115][ C2] dump_stack_lvl+0x100/0x190 [ 99.845128][ C2] should_fail_ex.cold+0x5/0xa [ 99.845140][ C2] should_failslab+0xc2/0x120 [ 99.845156][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.845169][ C2] ? lock_acquire+0x1b9/0x370 [ 99.845186][ C2] ? skb_clone+0x190/0x400 [ 99.845204][ C2] skb_clone+0x190/0x400 [ 99.845219][ C2] dev_queue_xmit_nit+0x255/0xa60 [ 99.845239][ C2] dev_hard_start_xmit+0x2f5/0x760 [ 99.845255][ C2] sch_direct_xmit+0x1b2/0xc70 [ 99.845273][ C2] ? lock_acquire+0x1b9/0x370 [ 99.845290][ C2] ? __pfx_sch_direct_xmit+0x10/0x10 [ 99.845306][ C2] ? do_raw_spin_lock+0x240/0x260 [ 99.845322][ C2] __dev_queue_xmit+0x27ac/0x4970 [ 99.845340][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.845346][ C3] FAULT_INJECTION: forcing a failure. [ 99.845346][ C3] name failslab, interval 1, probability 10, space 0, times 12 [ 99.845357][ C2] ? rcu_is_watching+0x12/0xc0 [ 99.845370][ C2] ? trace_kmem_cache_alloc+0xdd/0x100 [ 99.845386][ C2] ? __kasan_slab_alloc+0x89/0x90 [ 99.845402][ C2] ? kmem_cache_alloc_node_noprof+0x2e6/0x6b0 [ 99.845417][ C2] ? __kasan_slab_alloc+0x89/0x90 [ 99.845431][ C2] ? kmalloc_reserve+0x148/0x350 [ 99.845444][ C2] ? __asan_memcpy+0x3c/0x60 [ 99.845456][ C2] ? eth_header+0x120/0x1f0 [ 99.845467][ C2] ? __pfx_eth_header+0x10/0x10 [ 99.845479][ C2] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 99.845491][ C2] lapb_data_transmit+0x96/0xc0 [ 99.845505][ C2] lapb_transmit_buffer+0xce/0x3a0 [ 99.845518][ C2] lapb_send_control+0x1ce/0x330 [ 99.845531][ C2] lapb_t1timer_expiry+0x5ed/0x910 [ 99.845544][ C2] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 99.845555][ C2] call_timer_fn+0x19a/0x610 [ 99.845572][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 99.845589][ C2] ? __run_timers+0x747/0xb00 [ 99.845605][ C2] ? rcu_is_watching+0x12/0xc0 [ 99.845621][ C2] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 99.845632][ C2] __run_timers+0x757/0xb00 [ 99.845652][ C2] ? __pfx___run_timers+0x10/0x10 [ 99.845674][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 99.845687][ C2] run_timer_base+0x114/0x190 [ 99.845704][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 99.845728][ C2] run_timer_softirq+0x1a/0x50 [ 99.845744][ C2] handle_softirqs+0x1ea/0x9b0 [ 99.845759][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 99.845771][ C2] ? _raw_spin_unlock+0x28/0x50 [ 99.845782][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.845798][ C2] __irq_exit_rcu+0x162/0x210 [ 99.845810][ C2] irq_exit_rcu+0x9/0x30 [ 99.845822][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.845835][ C2] [ 99.845839][ C2] [ 99.845843][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.845855][ C2] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.845868][ C2] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.845879][ C2] RSP: 0018:ffffc900004ffd30 EFLAGS: 00000293 [ 99.845888][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.845896][ C2] RDX: ffff88801cb3a540 RSI: ffffffff8205f68a RDI: ffff88801cb3a540 [ 99.845903][ C2] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.845910][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.845916][ C2] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.845927][ C2] ? multi_cpu_stop+0x37c/0x4b0 [ 99.845938][ C2] ? multi_cpu_stop+0x38a/0x4b0 [ 99.845954][ C2] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.845964][ C2] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.845976][ C2] cpu_stopper_thread+0x21e/0x460 [ 99.845990][ C2] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.846001][ C2] smpboot_thread_fn+0x3d3/0xaa0 [ 99.846017][ C2] ? kthread+0x13a/0x450 [ 99.846031][ C2] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.846044][ C2] kthread+0x370/0x450 [ 99.846058][ C2] ? __pfx_kthread+0x10/0x10 [ 99.846073][ C2] ret_from_fork+0x72b/0xd50 [ 99.846087][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 99.846102][ C2] ? __switch_to+0x800/0x10f0 [ 99.846119][ C2] ? __pfx_kthread+0x10/0x10 [ 99.846135][ C2] ret_from_fork_asm+0x1a/0x30 [ 99.846156][ C2] [ 99.846162][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.846175][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.846182][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.846201][ C3] Call Trace: [ 99.846204][ C3] [ 99.846208][ C3] dump_stack_lvl+0x100/0x190 [ 99.846221][ C3] should_fail_ex.cold+0x5/0xa [ 99.846231][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.846245][ C3] should_failslab+0xc2/0x120 [ 99.846261][ C3] __kmalloc_cache_noprof+0x91/0x6c0 [ 99.846273][ C3] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 99.846289][ C3] dst_cow_metrics_generic+0x4c/0x1e0 [ 99.846303][ C3] icmp6_dst_alloc+0x418/0x4f0 [ 99.846320][ C3] ndisc_send_skb+0x133f/0x1bf0 [ 99.846337][ C3] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.846353][ C3] ? kmalloc_reserve+0xf9/0x350 [ 99.846369][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 99.846382][ C3] ? __asan_memcpy+0x3c/0x60 [ 99.846396][ C3] ndisc_send_rs+0x129/0x680 [ 99.846413][ C3] addrconf_rs_timer+0x424/0x880 [ 99.846414][ C2] FAULT_INJECTION: forcing a failure. [ 99.846414][ C2] name failslab, interval 1, probability 10, space 0, times 11 [ 99.846429][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.846446][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.846459][ C3] call_timer_fn+0x19a/0x610 [ 99.846476][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.846493][ C3] ? __run_timers+0x747/0xb00 [ 99.846510][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.846524][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.846537][ C3] __run_timers+0x757/0xb00 [ 99.846557][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.846578][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.846591][ C3] run_timer_base+0x114/0x190 [ 99.846608][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.846626][ C3] run_timer_softirq+0x1a/0x50 [ 99.846642][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.846656][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.846668][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.846679][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.846694][ C3] __irq_exit_rcu+0x162/0x210 [ 99.846706][ C3] irq_exit_rcu+0x9/0x30 [ 99.846718][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.846730][ C3] [ 99.846734][ C3] [ 99.846738][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.846750][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.846762][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.846773][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.846782][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.846789][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.846796][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.846802][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.846809][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.846819][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.846830][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.846845][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.846856][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.846867][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.846881][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.846892][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.846908][ C3] ? kthread+0x13a/0x450 [ 99.846921][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.846934][ C3] kthread+0x370/0x450 [ 99.846948][ C3] ? __pfx_kthread+0x10/0x10 [ 99.846986][ C3] ret_from_fork+0x72b/0xd50 [ 99.847002][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.847016][ C3] ? __switch_to+0x800/0x10f0 [ 99.847033][ C3] ? __pfx_kthread+0x10/0x10 [ 99.847048][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.847069][ C3] [ 99.847077][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.847091][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.847098][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.847117][ C1] Call Trace: [ 99.847121][ C1] [ 99.847126][ C1] dump_stack_lvl+0x100/0x190 [ 99.847139][ C1] should_fail_ex.cold+0x5/0xa [ 99.847151][ C1] should_failslab+0xc2/0x120 [ 99.847166][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.847181][ C1] ? __alloc_skb+0x140/0x710 [ 99.847198][ C1] __alloc_skb+0x140/0x710 [ 99.847211][ C1] ? __alloc_skb+0x5b7/0x710 [ 99.847225][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 99.847240][ C1] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 99.847253][ C1] ? __rcu_read_unlock+0x223/0x5e0 [ 99.847264][ C3] FAULT_INJECTION: forcing a failure. [ 99.847264][ C3] name failslab, interval 1, probability 10, space 0, times 10 [ 99.847266][ C1] ndisc_alloc_skb+0xd8/0x530 [ 99.847282][ C1] ndisc_send_rs+0x370/0x680 [ 99.847299][ C1] addrconf_rs_timer+0x424/0x880 [ 99.847314][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.847332][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.847345][ C1] call_timer_fn+0x19a/0x610 [ 99.847365][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.847383][ C1] ? __run_timers+0x747/0xb00 [ 99.847399][ C1] ? __run_timers+0x747/0xb00 [ 99.847417][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.847430][ C1] __run_timers+0x757/0xb00 [ 99.847450][ C1] ? __pfx___run_timers+0x10/0x10 [ 99.847471][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.847483][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 99.847497][ C1] run_timer_base+0x114/0x190 [ 99.847513][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 99.847530][ C1] ? handle_softirqs+0x1a7/0x9b0 [ 99.847542][ C1] run_timer_softirq+0x1a/0x50 [ 99.847558][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.847573][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.847588][ C1] __irq_exit_rcu+0x162/0x210 [ 99.847600][ C1] irq_exit_rcu+0x9/0x30 [ 99.847612][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.847625][ C1] [ 99.847628][ C1] [ 99.847633][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.847645][ C1] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.847657][ C1] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.847668][ C1] RSP: 0000:ffffc90000557d30 EFLAGS: 00000293 [ 99.847677][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.847684][ C1] RDX: ffff88801cb4a540 RSI: ffffffff8205f68a RDI: ffff88801cb4a540 [ 99.847691][ C1] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.847698][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.847705][ C1] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.847715][ C1] ? multi_cpu_stop+0x37c/0x4b0 [ 99.847726][ C1] ? multi_cpu_stop+0x38a/0x4b0 [ 99.847741][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.847751][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.847763][ C1] cpu_stopper_thread+0x21e/0x460 [ 99.847776][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.847788][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.847803][ C1] ? kthread+0x13a/0x450 [ 99.847817][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.847830][ C1] kthread+0x370/0x450 [ 99.847843][ C1] ? __pfx_kthread+0x10/0x10 [ 99.847861][ C1] ret_from_fork+0x72b/0xd50 [ 99.847875][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.847890][ C1] ? __switch_to+0x800/0x10f0 [ 99.847907][ C1] ? __pfx_kthread+0x10/0x10 [ 99.847922][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.847943][ C1] [ 99.847949][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.847961][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.847968][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.847986][ C3] Call Trace: [ 99.847990][ C3] [ 99.847994][ C3] dump_stack_lvl+0x100/0x190 [ 99.848006][ C3] should_fail_ex.cold+0x5/0xa [ 99.848019][ C3] should_failslab+0xc2/0x120 [ 99.848034][ C3] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.848048][ C3] ? dst_alloc+0x99/0x1a0 [ 99.848062][ C3] ? __pfx_ip6_dst_gc+0x10/0x10 [ 99.848079][ C3] dst_alloc+0x99/0x1a0 [ 99.848093][ C3] icmp6_dst_alloc+0x79/0x4f0 [ 99.848109][ C3] ndisc_send_skb+0x133f/0x1bf0 [ 99.848126][ C3] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.848142][ C3] ? kmalloc_reserve+0xf9/0x350 [ 99.848161][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 99.848175][ C3] ? __asan_memcpy+0x3c/0x60 [ 99.848189][ C3] ndisc_send_rs+0x129/0x680 [ 99.848206][ C3] addrconf_rs_timer+0x424/0x880 [ 99.848221][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.848240][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.848254][ C3] call_timer_fn+0x19a/0x610 [ 99.848270][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.848287][ C3] ? __run_timers+0x747/0xb00 [ 99.848303][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.848318][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.848331][ C3] __run_timers+0x757/0xb00 [ 99.848350][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.848372][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.848385][ C3] run_timer_base+0x114/0x190 [ 99.848401][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.848420][ C3] run_timer_softirq+0x1a/0x50 [ 99.848435][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.848449][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.848462][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.848473][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.848489][ C3] __irq_exit_rcu+0x162/0x210 [ 99.848501][ C3] irq_exit_rcu+0x9/0x30 [ 99.848512][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.848525][ C3] [ 99.848529][ C3] [ 99.848533][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.848545][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.848557][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.848568][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.848576][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.848583][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.848590][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.848596][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.848603][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.848613][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.848624][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.848629][ C1] FAULT_INJECTION: forcing a failure. [ 99.848629][ C1] name failslab, interval 1, probability 10, space 0, times 8 [ 99.848639][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.848650][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.848661][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.848675][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.848686][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.848702][ C3] ? kthread+0x13a/0x450 [ 99.848715][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.848728][ C3] kthread+0x370/0x450 [ 99.848742][ C3] ? __pfx_kthread+0x10/0x10 [ 99.848757][ C3] ret_from_fork+0x72b/0xd50 [ 99.848771][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.848785][ C3] ? __switch_to+0x800/0x10f0 [ 99.848802][ C3] ? __pfx_kthread+0x10/0x10 [ 99.848817][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.848838][ C3] [ 99.848843][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.848856][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.848862][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.848871][ C3] FAULT_INJECTION: forcing a failure. [ 99.848871][ C3] name failslab, interval 1, probability 10, space 0, times 7 [ 99.848881][ C1] Call Trace: [ 99.848885][ C1] [ 99.848889][ C1] dump_stack_lvl+0x100/0x190 [ 99.848901][ C1] should_fail_ex.cold+0x5/0xa [ 99.848914][ C1] should_failslab+0xc2/0x120 [ 99.848929][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.848944][ C1] ? __alloc_skb+0x140/0x710 [ 99.848960][ C1] __alloc_skb+0x140/0x710 [ 99.848973][ C1] ? __alloc_skb+0x5b7/0x710 [ 99.848987][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 99.849001][ C1] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 99.849015][ C1] ? __rcu_read_unlock+0x223/0x5e0 [ 99.849027][ C1] ndisc_alloc_skb+0xd8/0x530 [ 99.849042][ C1] ndisc_send_rs+0x370/0x680 [ 99.849059][ C1] addrconf_rs_timer+0x424/0x880 [ 99.849075][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.849092][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.849106][ C1] call_timer_fn+0x19a/0x610 [ 99.849122][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.849139][ C1] ? __run_timers+0x747/0xb00 [ 99.849155][ C1] ? __run_timers+0x747/0xb00 [ 99.849174][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.849187][ C1] __run_timers+0x757/0xb00 [ 99.849206][ C1] ? __pfx___run_timers+0x10/0x10 [ 99.849227][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.849239][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 99.849253][ C1] run_timer_base+0x114/0x190 [ 99.849269][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 99.849286][ C1] ? handle_softirqs+0x1a7/0x9b0 [ 99.849299][ C1] run_timer_softirq+0x1a/0x50 [ 99.849315][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.849329][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.849344][ C1] __irq_exit_rcu+0x162/0x210 [ 99.849356][ C1] irq_exit_rcu+0x9/0x30 [ 99.849371][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.849384][ C1] [ 99.849388][ C1] [ 99.849392][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.849404][ C1] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.849416][ C1] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.849426][ C1] RSP: 0000:ffffc90000557d30 EFLAGS: 00000293 [ 99.849435][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.849442][ C1] RDX: ffff88801cb4a540 RSI: ffffffff8205f68a RDI: ffff88801cb4a540 [ 99.849449][ C1] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.849456][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.849462][ C1] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.849473][ C1] ? multi_cpu_stop+0x37c/0x4b0 [ 99.849484][ C1] ? multi_cpu_stop+0x38a/0x4b0 [ 99.849499][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.849510][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.849521][ C1] cpu_stopper_thread+0x21e/0x460 [ 99.849535][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.849547][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.849562][ C1] ? kthread+0x13a/0x450 [ 99.849576][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.849588][ C1] kthread+0x370/0x450 [ 99.849602][ C1] ? __pfx_kthread+0x10/0x10 [ 99.849618][ C1] ret_from_fork+0x72b/0xd50 [ 99.849632][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.849646][ C1] ? __switch_to+0x800/0x10f0 [ 99.849663][ C1] ? __pfx_kthread+0x10/0x10 [ 99.849678][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.849699][ C1] [ 99.849705][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.849717][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.849723][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.849728][ C1] FAULT_INJECTION: forcing a failure. [ 99.849728][ C1] name failslab, interval 1, probability 10, space 0, times 6 [ 99.849741][ C3] Call Trace: [ 99.849745][ C3] [ 99.849749][ C3] dump_stack_lvl+0x100/0x190 [ 99.849761][ C3] should_fail_ex.cold+0x5/0xa [ 99.849774][ C3] should_failslab+0xc2/0x120 [ 99.849789][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.849804][ C3] ? __alloc_skb+0x140/0x710 [ 99.849821][ C3] __alloc_skb+0x140/0x710 [ 99.849834][ C3] ? __alloc_skb+0x5b7/0x710 [ 99.849848][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 99.849862][ C3] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 99.849876][ C3] ? __rcu_read_unlock+0x223/0x5e0 [ 99.849889][ C3] ndisc_alloc_skb+0xd8/0x530 [ 99.849904][ C3] ndisc_send_rs+0x370/0x680 [ 99.849922][ C3] addrconf_rs_timer+0x424/0x880 [ 99.849937][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.849955][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.849963][ T5757] Bluetooth: hci0: command tx timeout [ 99.849968][ C3] call_timer_fn+0x19a/0x610 [ 99.849985][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.850002][ C3] ? __run_timers+0x747/0xb00 [ 99.850019][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.850034][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.850047][ C3] __run_timers+0x757/0xb00 [ 99.850067][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.850089][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.850103][ C3] run_timer_base+0x114/0x190 [ 99.850120][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.850138][ C3] run_timer_softirq+0x1a/0x50 [ 99.850157][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.850171][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.850184][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.850195][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.850211][ C3] __irq_exit_rcu+0x162/0x210 [ 99.850223][ C3] irq_exit_rcu+0x9/0x30 [ 99.850235][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.850247][ C3] [ 99.850251][ C3] [ 99.850255][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.850267][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.850279][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.850290][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.850298][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.850305][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.850312][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.850318][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.850325][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.850335][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.850346][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.850362][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.850373][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.850384][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.850398][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.850409][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.850425][ C3] ? kthread+0x13a/0x450 [ 99.850439][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.850452][ C3] kthread+0x370/0x450 [ 99.850466][ C3] ? __pfx_kthread+0x10/0x10 [ 99.850481][ C3] ret_from_fork+0x72b/0xd50 [ 99.850495][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.850510][ C3] ? __switch_to+0x800/0x10f0 [ 99.850527][ C3] ? __pfx_kthread+0x10/0x10 [ 99.850542][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.850565][ C3] [ 99.850570][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.850583][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.850589][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.850608][ C1] Call Trace: [ 99.850611][ C1] [ 99.850615][ C1] dump_stack_lvl+0x100/0x190 [ 99.850627][ C1] should_fail_ex.cold+0x5/0xa [ 99.850639][ C1] should_failslab+0xc2/0x120 [ 99.850654][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.850668][ C1] ? dst_alloc+0x99/0x1a0 [ 99.850682][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 99.850699][ C1] dst_alloc+0x99/0x1a0 [ 99.850713][ C1] icmp6_dst_alloc+0x79/0x4f0 [ 99.850729][ C1] ndisc_send_skb+0x133f/0x1bf0 [ 99.850746][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.850762][ C1] ? kmalloc_reserve+0xf9/0x350 [ 99.850777][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 99.850790][ C1] ? __asan_memcpy+0x3c/0x60 [ 99.850803][ C3] FAULT_INJECTION: forcing a failure. [ 99.850803][ C3] name failslab, interval 1, probability 10, space 0, times 3 [ 99.850804][ C1] ndisc_send_rs+0x129/0x680 [ 99.850821][ C1] addrconf_rs_timer+0x424/0x880 [ 99.850836][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.850853][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.850866][ C1] call_timer_fn+0x19a/0x610 [ 99.850882][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.850899][ C1] ? __run_timers+0x747/0xb00 [ 99.850914][ C1] ? __run_timers+0x747/0xb00 [ 99.850932][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.850945][ C1] __run_timers+0x757/0xb00 [ 99.850985][ C1] ? __pfx___run_timers+0x10/0x10 [ 99.851010][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.851022][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 99.851035][ C1] run_timer_base+0x114/0x190 [ 99.851052][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 99.851069][ C1] ? handle_softirqs+0x1a7/0x9b0 [ 99.851081][ C1] run_timer_softirq+0x1a/0x50 [ 99.851097][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.851111][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.851126][ C1] __irq_exit_rcu+0x162/0x210 [ 99.851138][ C1] irq_exit_rcu+0x9/0x30 [ 99.851149][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.851162][ C1] [ 99.851165][ C1] [ 99.851170][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.851182][ C1] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.851194][ C1] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.851204][ C1] RSP: 0000:ffffc90000557d30 EFLAGS: 00000293 [ 99.851213][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.851219][ C1] RDX: ffff88801cb4a540 RSI: ffffffff8205f68a RDI: ffff88801cb4a540 [ 99.851226][ C1] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.851233][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.851239][ C1] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.851249][ C1] ? multi_cpu_stop+0x37c/0x4b0 [ 99.851260][ C1] ? multi_cpu_stop+0x38a/0x4b0 [ 99.851275][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.851286][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.851297][ C1] cpu_stopper_thread+0x21e/0x460 [ 99.851310][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.851321][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.851336][ C1] ? kthread+0x13a/0x450 [ 99.851350][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.851366][ C1] kthread+0x370/0x450 [ 99.851380][ C1] ? __pfx_kthread+0x10/0x10 [ 99.851395][ C1] ret_from_fork+0x72b/0xd50 [ 99.851409][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.851423][ C1] ? __switch_to+0x800/0x10f0 [ 99.851440][ C1] ? __pfx_kthread+0x10/0x10 [ 99.851455][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.851475][ C1] [ 99.851481][ C3] CPU: 3 UID: 0 PID: 32 Comm: migration/3 Not tainted syzkaller #0 PREEMPT(full) [ 99.851495][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.851501][ C3] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.851520][ C3] Call Trace: [ 99.851524][ C3] [ 99.851528][ C3] dump_stack_lvl+0x100/0x190 [ 99.851541][ C3] should_fail_ex.cold+0x5/0xa [ 99.851554][ C3] should_failslab+0xc2/0x120 [ 99.851569][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.851584][ C3] ? __alloc_skb+0x140/0x710 [ 99.851601][ C3] __alloc_skb+0x140/0x710 [ 99.851614][ C3] ? __alloc_skb+0x5b7/0x710 [ 99.851619][ C1] FAULT_INJECTION: forcing a failure. [ 99.851619][ C1] name failslab, interval 1, probability 10, space 0, times 1 [ 99.851627][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 99.851642][ C3] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 99.851656][ C3] ? __rcu_read_unlock+0x223/0x5e0 [ 99.851669][ C3] ndisc_alloc_skb+0xd8/0x530 [ 99.851684][ C3] ndisc_send_rs+0x370/0x680 [ 99.851701][ C3] addrconf_rs_timer+0x424/0x880 [ 99.851717][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.851735][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.851748][ C3] call_timer_fn+0x19a/0x610 [ 99.851764][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 99.851782][ C3] ? __run_timers+0x747/0xb00 [ 99.851799][ C3] ? rcu_is_watching+0x12/0xc0 [ 99.851814][ C3] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.851827][ C3] __run_timers+0x757/0xb00 [ 99.851847][ C3] ? __pfx___run_timers+0x10/0x10 [ 99.851869][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 99.851883][ C3] run_timer_base+0x114/0x190 [ 99.851899][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 99.851918][ C3] run_timer_softirq+0x1a/0x50 [ 99.851934][ C3] handle_softirqs+0x1ea/0x9b0 [ 99.851949][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 99.851961][ C3] ? _raw_spin_unlock+0x28/0x50 [ 99.851972][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.851988][ C3] __irq_exit_rcu+0x162/0x210 [ 99.852000][ C3] irq_exit_rcu+0x9/0x30 [ 99.852011][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.852024][ C3] [ 99.852028][ C3] [ 99.852032][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.852044][ C3] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.852056][ C3] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.852066][ C3] RSP: 0000:ffffc900005afd30 EFLAGS: 00000293 [ 99.852074][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.852081][ C3] RDX: ffff88801cf10000 RSI: ffffffff8205f68a RDI: ffff88801cf10000 [ 99.852088][ C3] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.852095][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.852102][ C3] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.852112][ C3] ? multi_cpu_stop+0x37c/0x4b0 [ 99.852124][ C3] ? multi_cpu_stop+0x38a/0x4b0 [ 99.852139][ C3] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.852153][ C3] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.852164][ C3] cpu_stopper_thread+0x21e/0x460 [ 99.852179][ C3] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.852190][ C3] smpboot_thread_fn+0x3d3/0xaa0 [ 99.852206][ C3] ? kthread+0x13a/0x450 [ 99.852219][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.852232][ C3] kthread+0x370/0x450 [ 99.852246][ C3] ? __pfx_kthread+0x10/0x10 [ 99.852261][ C3] ret_from_fork+0x72b/0xd50 [ 99.852275][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 99.852290][ C3] ? __switch_to+0x800/0x10f0 [ 99.852306][ C3] ? __pfx_kthread+0x10/0x10 [ 99.852322][ C3] ret_from_fork_asm+0x1a/0x30 [ 99.852344][ C3] [ 99.852349][ C1] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.852365][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.852372][ C1] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.852390][ C1] Call Trace: [ 99.852393][ C1] [ 99.852397][ C1] dump_stack_lvl+0x100/0x190 [ 99.852409][ C1] should_fail_ex.cold+0x5/0xa [ 99.852421][ C1] should_failslab+0xc2/0x120 [ 99.852436][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.852450][ C1] ? dst_alloc+0x99/0x1a0 [ 99.852464][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 99.852481][ C1] dst_alloc+0x99/0x1a0 [ 99.852495][ C1] icmp6_dst_alloc+0x79/0x4f0 [ 99.852511][ C1] ndisc_send_skb+0x133f/0x1bf0 [ 99.852528][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.852544][ C1] ? kmalloc_reserve+0xf9/0x350 [ 99.852559][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 99.852572][ C1] ? __asan_memcpy+0x3c/0x60 [ 99.852586][ C1] ndisc_send_rs+0x129/0x680 [ 99.852603][ C1] addrconf_rs_timer+0x424/0x880 [ 99.852618][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.852634][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.852648][ C1] call_timer_fn+0x19a/0x610 [ 99.852664][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 99.852681][ C1] ? __run_timers+0x747/0xb00 [ 99.852696][ C1] ? __run_timers+0x747/0xb00 [ 99.852714][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 99.852727][ C1] __run_timers+0x757/0xb00 [ 99.852748][ C1] ? __pfx___run_timers+0x10/0x10 [ 99.852768][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.852780][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 99.852793][ C1] run_timer_base+0x114/0x190 [ 99.852810][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 99.852826][ C1] ? handle_softirqs+0x1a7/0x9b0 [ 99.852839][ C1] run_timer_softirq+0x1a/0x50 [ 99.852855][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.852869][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.852884][ C1] __irq_exit_rcu+0x162/0x210 [ 99.852896][ C1] irq_exit_rcu+0x9/0x30 [ 99.852908][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.852920][ C1] [ 99.852924][ C1] [ 99.852928][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.852940][ C1] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.852952][ C1] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.852962][ C1] RSP: 0000:ffffc90000557d30 EFLAGS: 00000293 [ 99.852971][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.852978][ C1] RDX: ffff88801cb4a540 RSI: ffffffff8205f68a RDI: ffff88801cb4a540 [ 99.852985][ C1] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.852991][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.852998][ C1] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.853008][ C1] ? multi_cpu_stop+0x37c/0x4b0 [ 99.853019][ C1] ? multi_cpu_stop+0x38a/0x4b0 [ 99.853033][ C1] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.853044][ C1] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.853055][ C1] cpu_stopper_thread+0x21e/0x460 [ 99.853068][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.853080][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.853095][ C1] ? kthread+0x13a/0x450 [ 99.853109][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.853121][ C1] kthread+0x370/0x450 [ 99.853135][ C1] ? __pfx_kthread+0x10/0x10 [ 99.853150][ C1] ret_from_fork+0x72b/0xd50 [ 99.853164][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.853178][ C1] ? __switch_to+0x800/0x10f0 [ 99.853195][ C1] ? __pfx_kthread+0x10/0x10 [ 99.853210][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.853230][ C1] [ 99.853238][ C2] CPU: 2 UID: 0 PID: 22 Comm: migration/2 Not tainted syzkaller #0 PREEMPT(full) [ 99.853252][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.853259][ C2] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 99.853279][ C2] Call Trace: [ 99.853283][ C2] [ 99.853287][ C2] dump_stack_lvl+0x100/0x190 [ 99.853300][ C2] should_fail_ex.cold+0x5/0xa [ 99.853312][ C2] should_failslab+0xc2/0x120 [ 99.853327][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.853342][ C2] ? __alloc_skb+0x140/0x710 [ 99.853359][ C2] __alloc_skb+0x140/0x710 [ 99.853372][ C2] ? __alloc_skb+0x5b7/0x710 [ 99.853386][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 99.853400][ C2] ? __lock_acquire+0x49f/0x1a40 [ 99.853419][ C2] __netdev_alloc_skb+0x7a/0x960 [ 99.853436][ C2] hsr_init_skb+0x122/0x670 [ 99.853455][ C2] send_hsr_supervision_frame+0x138/0xbc0 [ 99.853474][ C2] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 99.853491][ C2] hsr_announce+0x169/0x3e0 [ 99.853507][ C2] ? __pfx_hsr_announce+0x10/0x10 [ 99.853527][ C2] ? __pfx_hsr_announce+0x10/0x10 [ 99.853543][ C2] call_timer_fn+0x19a/0x610 [ 99.853559][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 99.853576][ C2] ? __run_timers+0x747/0xb00 [ 99.853593][ C2] ? rcu_is_watching+0x12/0xc0 [ 99.853608][ C2] ? __pfx_hsr_announce+0x10/0x10 [ 99.853623][ C2] __run_timers+0x757/0xb00 [ 99.853643][ C2] ? __pfx___run_timers+0x10/0x10 [ 99.853664][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 99.853677][ C2] run_timer_base+0x114/0x190 [ 99.853694][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 99.853712][ C2] run_timer_softirq+0x1a/0x50 [ 99.853733][ C2] handle_softirqs+0x1ea/0x9b0 [ 99.853747][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 99.853760][ C2] ? _raw_spin_unlock+0x28/0x50 [ 99.853770][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.853786][ C2] __irq_exit_rcu+0x162/0x210 [ 99.853798][ C2] irq_exit_rcu+0x9/0x30 [ 99.853810][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.853823][ C2] [ 99.853826][ C2] [ 99.853831][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.853843][ C2] RIP: 0010:multi_cpu_stop+0x344/0x4b0 [ 99.853855][ C2] Code: e8 e1 b0 03 00 48 85 db 75 3c e8 37 b6 03 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 b0 03 00 48 85 db 0f 85 c5 00 00 00 17 b6 03 00 8b 44 24 14 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 [ 99.853866][ C2] RSP: 0018:ffffc900004ffd30 EFLAGS: 00000293 [ 99.853875][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8205f67c [ 99.853882][ C2] RDX: ffff88801cb3a540 RSI: ffffffff8205f68a RDI: ffff88801cb3a540 [ 99.853889][ C2] RBP: ffffc90002e27894 R08: 0000000000000007 R09: 0000000000000000 [ 99.853896][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002e27870 [ 99.853903][ C2] R13: fffff520005c4f12 R14: 0000000000000000 R15: 0000000000000003 [ 99.853913][ C2] ? multi_cpu_stop+0x37c/0x4b0 [ 99.853924][ C2] ? multi_cpu_stop+0x38a/0x4b0 [ 99.853939][ C2] ? __stop_cpus.constprop.0+0xb1/0x140 [ 99.853950][ C2] ? __pfx_multi_cpu_stop+0x10/0x10 [ 99.853962][ C2] cpu_stopper_thread+0x21e/0x460 [ 99.853975][ C2] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 99.853987][ C2] smpboot_thread_fn+0x3d3/0xaa0 [ 99.854002][ C2] ? kthread+0x13a/0x450 [ 99.854016][ C2] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.854028][ C2] kthread+0x370/0x450 [ 99.854042][ C2] ? __pfx_kthread+0x10/0x10 [ 99.854058][ C2] ret_from_fork+0x72b/0xd50 [ 99.854072][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 99.854086][ C2] ? __switch_to+0x800/0x10f0 [ 99.854102][ C2] ? __pfx_kthread+0x10/0x10 [ 99.854118][ C2] ret_from_fork_asm+0x1a/0x30 [ 99.854139][ C2] [ 99.854144][ C2] hsr0: HSR: Could not send supervision frame [ 99.868424][ T845] CPU: 0 UID: 0 PID: 845 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 99.868447][ T845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.868459][ T845] Workqueue: mld mld_ifc_work [ 99.868484][ T845] Call Trace: [ 99.868491][ T845] [ 99.868497][ T845] dump_stack_lvl+0x100/0x190 [ 99.868519][ T845] should_fail_ex.cold+0x5/0xa [ 99.868538][ T845] should_failslab+0xc2/0x120 [ 99.868561][ T845] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.868584][ T845] ? __alloc_skb+0x140/0x710 [ 99.868608][ T845] __alloc_skb+0x140/0x710 [ 99.868626][ T845] ? __alloc_skb+0x5b7/0x710 [ 99.868645][ T845] ? __pfx___alloc_skb+0x10/0x10 [ 99.868665][ T845] ? debug_object_activate+0x343/0x4b0 [ 99.868695][ T845] mld_newpack.isra.0+0x18e/0xa20 [ 99.868716][ T845] ? lock_acquire+0x1b9/0x370 [ 99.868743][ T845] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 99.868766][ T845] ? rcu_is_watching+0x12/0xc0 [ 99.868785][ T845] ? trace_contention_end+0x126/0x160 [ 99.868806][ T845] ? add_grhead+0x299/0x340 [ 99.868825][ T845] add_grhead+0x299/0x340 [ 99.868848][ T845] add_grec+0x1389/0x1930 [ 99.868876][ T845] ? __pfx_add_grec+0x10/0x10 [ 99.868904][ T845] mld_ifc_work+0x3c5/0xc10 [ 99.868925][ T845] ? rcu_is_watching+0x12/0xc0 [ 99.868947][ T845] process_one_work+0xa23/0x1940 [ 99.868980][ T845] ? __pfx_process_one_work+0x10/0x10 [ 99.869009][ T845] ? __pfx_mld_ifc_work+0x10/0x10 [ 99.869033][ T845] worker_thread+0x5ef/0xe50 [ 99.869061][ T845] ? __pfx_worker_thread+0x10/0x10 [ 99.869084][ T845] ? kthread+0x13a/0x450 [ 99.869103][ T845] ? __pfx_worker_thread+0x10/0x10 [ 99.869123][ T845] kthread+0x370/0x450 [ 99.869143][ T845] ? __pfx_kthread+0x10/0x10 [ 99.869165][ T845] ret_from_fork+0x72b/0xd50 [ 99.869190][ T845] ? __pfx_ret_from_fork+0x10/0x10 [ 99.869211][ T845] ? __switch_to+0x800/0x10f0 [ 99.869237][ T845] ? __pfx_kthread+0x10/0x10 [ 99.869259][ T845] ret_from_fork_asm+0x1a/0x30 [ 99.869291][ T845] [ 99.878828][ T6341] CPU: 3 UID: 0 PID: 6341 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 99.878847][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.878854][ T6341] Call Trace: [ 99.878858][ T6341] [ 99.878864][ T6341] dump_stack_lvl+0x100/0x190 [ 99.878882][ T6341] should_fail_ex.cold+0x5/0xa [ 99.878895][ T6341] should_failslab+0xc2/0x120 [ 99.878911][ T6341] __kmalloc_noprof+0xfc/0x820 [ 99.878926][ T6341] ? tomoyo_encode2+0xfb/0x3c0 [ 99.878944][ T6341] tomoyo_encode2+0xfb/0x3c0 [ 99.878962][ T6341] tomoyo_encode+0x29/0x50 [ 99.879005][ T6341] tomoyo_realpath_from_path+0x18c/0x690 [ 99.879024][ T6341] tomoyo_path_perm+0x276/0x460 [ 99.879037][ T6341] ? tomoyo_path_perm+0x262/0x460 [ 99.879052][ T6341] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 99.879081][ T6341] ? find_held_lock+0x2b/0x80 [ 99.879095][ T6341] ? __might_fault+0xc5/0x140 [ 99.879107][ T6341] ? __might_fault+0xc5/0x140 [ 99.879119][ T6341] security_inode_getattr+0x116/0x280 [ 99.879134][ T6341] vfs_statx+0x11f/0x3f0 [ 99.879148][ T6341] ? __pfx_vfs_statx+0x10/0x10 [ 99.879167][ T6341] ? do_getname+0x191/0x390 [ 99.879182][ T6341] vfs_fstatat+0x77/0xe0 [ 99.879196][ T6341] __do_sys_newfstatat+0x9d/0x120 [ 99.879210][ T6341] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 99.879236][ T6341] do_syscall_64+0x115/0x840 [ 99.879250][ T6341] ? clear_bhb_loop+0x40/0x90 [ 99.879264][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.879276][ T6341] RIP: 0033:0x7f3a93911b0a [ 99.879286][ T6341] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 99.879298][ T6341] RSP: 002b:00007ffc29351f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 99.879309][ T6341] RAX: ffffffffffffffda RBX: 0000558be15be270 RCX: 00007f3a93911b0a [ 99.879316][ T6341] RDX: 00007ffc29351f90 RSI: 0000558be15be270 RDI: 00000000ffffff9c [ 99.879323][ T6341] RBP: 0000558be15be288 R08: 0000558be15be290 R09: 0000000000000000 [ 99.879329][ T6341] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc293530b5 [ 99.879336][ T6341] R13: 00007ffc29352020 R14: 0000558baaee46d7 R15: 00007ffc293530b0 [ 99.879350][ T6341] [ 101.914640][ T5757] Bluetooth: hci0: command tx timeout [ 101.927477][ T6645] smpboot: CPU 1 is now offline [ 102.445345][ C2] ------------[ cut here ]------------ [ 102.448946][ C2] cpu_t != t [ 102.448961][ C2] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x289/0x2e0, CPU#2: syz.5.71/6645 [ 102.454992][ C2] Modules linked in: [ 102.457133][ C2] CPU: 2 UID: 0 PID: 6645 Comm: syz.5.71 Not tainted syzkaller #0 PREEMPT(full) [ 102.461006][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.465264][ C2] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 102.467531][ C2] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 1b 47 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 68 4c 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 00 ce 9f 8e e8 c0 2c 86 [ 102.475653][ C2] RSP: 0000:ffffc90000538c30 EFLAGS: 00010246 [ 102.478269][ C2] RAX: 0000000000000000 RBX: ffff88802b423440 RCX: ffffffff81f4c30d [ 102.481583][ C2] RDX: ffff8880471c8000 RSI: ffffffff81b15ff8 RDI: ffffffff8e46c930 [ 102.484973][ C2] RBP: ffff88802b323440 R08: 0000000000000001 R09: 0000000000000000 [ 102.488135][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 102.491255][ C2] R13: 1ffff920000a718e R14: ffffffff81b15d70 R15: 0000000000000001 [ 102.494385][ C2] FS: 0000000000000000(0000) GS:ffff888096de3000(0063) knlGS:00000000f5466b40 [ 102.498007][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 102.500684][ C2] CR2: 00000000f51b3550 CR3: 0000000026e95000 CR4: 0000000000352ef0 [ 102.503894][ C2] Call Trace: [ 102.505395][ C2] [ 102.506621][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.508756][ C2] call_timer_fn+0x19a/0x610 [ 102.510698][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 102.512877][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.515071][ C2] ? mark_held_locks+0x40/0x70 [ 102.517105][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.519227][ C2] __run_timers+0x757/0xb00 [ 102.521154][ C2] ? __pfx___run_timers+0x10/0x10 [ 102.523296][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 102.525470][ C2] run_timer_base+0x114/0x190 [ 102.527467][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 102.529649][ C2] run_timer_softirq+0x10/0x50 [ 102.531666][ C2] handle_softirqs+0x1ea/0x9b0 [ 102.533678][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 102.535976][ C2] ? _raw_spin_unlock+0x28/0x50 [ 102.537992][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 102.540371][ C2] __irq_exit_rcu+0x162/0x210 [ 102.542344][ C2] irq_exit_rcu+0x9/0x30 [ 102.544175][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.546611][ C2] [ 102.547896][ C2] [ 102.549163][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.551708][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 102.554378][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 07 2a f6 48 89 df e8 fe 56 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 66 19 f6 65 8b 05 4e 77 a8 08 85 c0 74 16 5b [ 102.562358][ C2] RSP: 0000:ffffc90002e27928 EFLAGS: 00000246 [ 102.564983][ C2] RAX: 0000000000000002 RBX: ffffe8ffac110c40 RCX: 0000000000000040 [ 102.568261][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 102.571540][ C2] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 102.574872][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022479800 [ 102.577552][ C2] R13: dffffc0000000000 R14: 0000000000000108 R15: 0000000000000001 [ 102.580075][ C2] free_cpu_cached_iovas+0x10e/0x190 [ 102.581764][ C2] ? __pfx_iova_cpuhp_dead+0x10/0x10 [ 102.583473][ C2] iova_cpuhp_dead+0x30/0x40 [ 102.584996][ C2] cpuhp_invoke_callback+0x513/0x9a0 [ 102.586709][ C2] ? __pfx_iova_cpuhp_dead+0x10/0x10 [ 102.588383][ C2] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 102.590285][ C2] _cpu_down+0x523/0x1020 [ 102.591689][ C2] cpu_device_down+0x82/0xc0 [ 102.593151][ C2] device_offline+0x2f4/0x400 [ 102.594687][ C2] ? __pfx_device_offline+0x10/0x10 [ 102.596340][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.598241][ C2] ? __pfx_online_store+0x10/0x10 [ 102.599822][ C2] online_store+0xd1/0x180 [ 102.601244][ C2] ? __pfx_online_store+0x10/0x10 [ 102.602814][ C2] ? __pfx_find_held_lock+0x10/0x10 [ 102.604502][ C2] ? sysfs_file_kobj+0xe4/0x290 [ 102.606082][ C2] ? sysfs_file_kobj+0xe4/0x290 [ 102.607625][ C2] dev_attr_store+0x58/0x80 [ 102.609060][ C2] ? __pfx_dev_attr_store+0x10/0x10 [ 102.610692][ C2] sysfs_kf_write+0xf2/0x150 [ 102.612213][ C2] kernfs_fop_write_iter+0x3e0/0x5f0 [ 102.613901][ C2] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.615722][ C2] vfs_write+0x6ac/0x1050 [ 102.617112][ C2] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 102.618977][ C2] ? __pfx_vfs_write+0x10/0x10 [ 102.620504][ C2] ? find_held_lock+0x2b/0x80 [ 102.622040][ C2] ksys_write+0x12a/0x250 [ 102.623416][ C2] ? __pfx_ksys_write+0x10/0x10 [ 102.625007][ C2] __do_fast_syscall_32+0xe7/0x970 [ 102.626630][ C2] do_fast_syscall_32+0x32/0x70 [ 102.628181][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.630148][ C2] RIP: 0023:0xf7fa8fec [ 102.631488][ C2] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 102.633592][ C2] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 102.636233][ C2] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 102.638702][ C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.641196][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.643666][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.646191][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.648690][ C2] [ 102.649679][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.651968][ C2] CPU: 2 UID: 0 PID: 6645 Comm: syz.5.71 Not tainted syzkaller #0 PREEMPT(full) [ 102.654776][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.657973][ C2] Call Trace: [ 102.659046][ C2] [ 102.659959][ C2] dump_stack_lvl+0x100/0x190 [ 102.661457][ C2] vpanic+0x552/0x970 [ 102.662711][ C2] ? __pfx_vpanic+0x10/0x10 [ 102.664152][ C2] panic+0xd1/0xe0 [ 102.665361][ C2] ? __pfx_panic+0x10/0x10 [ 102.666768][ C2] ? check_panic_on_warn+0x1f/0x90 [ 102.668438][ C2] check_panic_on_warn.cold+0x19/0x34 [ 102.670110][ C2] ? mce_timer_fn+0x289/0x2e0 [ 102.671619][ C2] __warn.cold+0x191/0x318 [ 102.673023][ C2] __report_bug+0x30f/0x440 [ 102.674453][ C2] ? mce_timer_fn+0x289/0x2e0 [ 102.675956][ C2] ? __pfx___report_bug+0x10/0x10 [ 102.677548][ C2] ? look_up_lock_class+0x55/0x120 [ 102.679159][ C2] ? register_lock_class+0x40/0x560 [ 102.680814][ C2] ? mce_timer_fn+0x289/0x2e0 [ 102.682348][ C2] report_bug+0xb2/0x220 [ 102.683704][ C2] ? mce_timer_fn+0x289/0x2e0 [ 102.685181][ C2] handle_bug+0x16a/0x2a0 [ 102.686566][ C2] exc_invalid_op+0x17/0x50 [ 102.688010][ C2] asm_exc_invalid_op+0x1a/0x20 [ 102.689546][ C2] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 102.691244][ C2] Code: 58 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 1b 47 58 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 68 4c 58 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 00 ce 9f 8e e8 c0 2c 86 [ 102.697258][ C2] RSP: 0000:ffffc90000538c30 EFLAGS: 00010246 [ 102.699179][ C2] RAX: 0000000000000000 RBX: ffff88802b423440 RCX: ffffffff81f4c30d [ 102.701627][ C2] RDX: ffff8880471c8000 RSI: ffffffff81b15ff8 RDI: ffffffff8e46c930 [ 102.704086][ C2] RBP: ffff88802b323440 R08: 0000000000000001 R09: 0000000000000000 [ 102.706543][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 102.709016][ C2] R13: 1ffff920000a718e R14: ffffffff81b15d70 R15: 0000000000000001 [ 102.711497][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.713097][ C2] ? call_timer_fn+0x55d/0x610 [ 102.714609][ C2] ? mce_timer_fn+0x288/0x2e0 [ 102.716119][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.717717][ C2] call_timer_fn+0x19a/0x610 [ 102.719198][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 102.720813][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.722400][ C2] ? mark_held_locks+0x40/0x70 [ 102.723933][ C2] ? __pfx_mce_timer_fn+0x10/0x10 [ 102.725603][ C2] __run_timers+0x757/0xb00 [ 102.727188][ C2] ? __pfx___run_timers+0x10/0x10 [ 102.728786][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 102.730423][ C2] run_timer_base+0x114/0x190 [ 102.732133][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 102.734310][ C2] run_timer_softirq+0x10/0x50 [ 102.736029][ C2] handle_softirqs+0x1ea/0x9b0 [ 102.737552][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 102.739217][ C2] ? _raw_spin_unlock+0x28/0x50 [ 102.740748][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 102.742527][ C2] __irq_exit_rcu+0x162/0x210 [ 102.744020][ C2] irq_exit_rcu+0x9/0x30 [ 102.745366][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.747131][ C2] [ 102.748070][ C2] [ 102.749014][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.750898][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 102.752986][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 07 2a f6 48 89 df e8 fe 56 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 66 19 f6 65 8b 05 4e 77 a8 08 85 c0 74 16 5b [ 102.759482][ C2] RSP: 0000:ffffc90002e27928 EFLAGS: 00000246 [ 102.761508][ C2] RAX: 0000000000000002 RBX: ffffe8ffac110c40 RCX: 0000000000000040 [ 102.763970][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 102.766433][ C2] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 102.768885][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022479800 [ 102.771683][ C2] R13: dffffc0000000000 R14: 0000000000000108 R15: 0000000000000001 [ 102.774226][ C2] free_cpu_cached_iovas+0x10e/0x190 [ 102.775846][ C2] ? __pfx_iova_cpuhp_dead+0x10/0x10 [ 102.777700][ C2] iova_cpuhp_dead+0x30/0x40 [ 102.779315][ C2] cpuhp_invoke_callback+0x513/0x9a0 [ 102.780941][ C2] ? __pfx_iova_cpuhp_dead+0x10/0x10 [ 102.782583][ C2] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 102.784881][ C2] _cpu_down+0x523/0x1020 [ 102.786659][ C2] cpu_device_down+0x82/0xc0 [ 102.788430][ C2] device_offline+0x2f4/0x400 [ 102.790244][ C2] ? __pfx_device_offline+0x10/0x10 [ 102.792147][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.794002][ C2] ? __pfx_online_store+0x10/0x10 [ 102.795595][ C2] online_store+0xd1/0x180 [ 102.797016][ C2] ? __pfx_online_store+0x10/0x10 [ 102.798606][ C2] ? __pfx_find_held_lock+0x10/0x10 [ 102.800254][ C2] ? sysfs_file_kobj+0xe4/0x290 [ 102.801803][ C2] ? sysfs_file_kobj+0xe4/0x290 [ 102.803352][ C2] dev_attr_store+0x58/0x80 [ 102.804790][ C2] ? __pfx_dev_attr_store+0x10/0x10 [ 102.806427][ C2] sysfs_kf_write+0xf2/0x150 [ 102.807895][ C2] kernfs_fop_write_iter+0x3e0/0x5f0 [ 102.809550][ C2] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.811220][ C2] vfs_write+0x6ac/0x1050 [ 102.812555][ C2] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 102.814380][ C2] ? __pfx_vfs_write+0x10/0x10 [ 102.815902][ C2] ? find_held_lock+0x2b/0x80 [ 102.817404][ C2] ksys_write+0x12a/0x250 [ 102.818777][ C2] ? __pfx_ksys_write+0x10/0x10 [ 102.820326][ C2] __do_fast_syscall_32+0xe7/0x970 [ 102.822040][ C2] do_fast_syscall_32+0x32/0x70 [ 102.823591][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.825552][ C2] RIP: 0023:0xf7fa8fec [ 102.826832][ C2] Code: Unable to access opcode bytes at 0xf7fa8fc2. [ 102.828895][ C2] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 102.831483][ C2] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 102.833840][ C2] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.836226][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.838555][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.840898][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.843241][ C2] [ 102.844826][ C2] Kernel Offset: disabled [ 102.846147][ C2] Rebooting in 86400 seconds..