last executing test programs: 12.550293855s ago: executing program 1 (id=7): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r1, 0x0) 12.537679135s ago: executing program 0 (id=1): openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 12.460389178s ago: executing program 2 (id=3): syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x21e9, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x3c4, 0x10, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0xfe, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0xffffa3bc, 0xf58, 0x6]}) 12.460165695s ago: executing program 1 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000051c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x5dc}], 0x1}, 0x4) 12.41046025s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) fsync(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x528, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x2, 0x6, 0xc, 0x1}], 0x1, 0x28, 0x0, 0x2}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) 12.314735049s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./myconfig/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) 11.235833128s ago: executing program 1 (id=13): getpid() mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev_state.function == kallsyms_lookup_name\x00', 0x2c) 8.238344007s ago: executing program 2 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async, rerun: 500) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (rerun: 500) 7.049832144s ago: executing program 0 (id=16): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000ac0)="5acc7d7a", 0x4) 7.024611316s ago: executing program 32 (id=16): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000ac0)="5acc7d7a", 0x4) 6.980105648s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x0, 0x1000, 0x1}) 6.839097578s ago: executing program 1 (id=18): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 6.739978419s ago: executing program 2 (id=19): r0 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x80, 0x6, 0x301}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.739779094s ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 6.630308634s ago: executing program 2 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d01, 0x0, 0x200}]}) 3.037963694s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0103:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='bdc\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='PNP0103:00\x00', 0xb) close(r1) 2.999271706s ago: executing program 3 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/n_gsm/parameters/debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='255\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) ioctl(r1, 0x40204706, &(0x7f0000000200)="0100"/32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000243)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000245)=0xf9) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.764297111s ago: executing program 4 (id=24): mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mkdir(&(0x7f0000000100)='./mnt_nfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd_dir/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000900)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='nfsd 127.0.0.1 2000000000 localhost\n', 0x24) close(r2) r3 = openat(r1, &(0x7f0000000b00)='nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='localhost / 2000000000 0 0 0 1\n', 0x1f) close(r3) r4 = openat(r1, &(0x7f0000000d00)='nfsd.fh/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='localhost 1 \\x00000001 2000000000 /\n', 0x24) close(r4) 2.658889992s ago: executing program 4 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a0001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='hello_world', 0xb) 2.115651321s ago: executing program 3 (id=29): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x280, 0x280, 0x0, 0x3, 0x0, 0x1, 0x3f}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000e000a000100030108004000400000000000"], 0x13) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c800190015000100050211004000000000000409033f01d007e02ea002"], 0x1e) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c80017001300010004030f00400000000409033f01d007e02ea002"], 0x1c) write(r0, &(0x7f0000000300)="00112233445566778899", 0xa) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c8000600020040000d00"], 0xb) 1.129305093s ago: executing program 3 (id=30): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000000000)="111cb91b0933c4bd", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) 1.129167282s ago: executing program 1 (id=18): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 879.213907ms ago: executing program 1 (id=31): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001010203010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='ccgx-ucsi 0x08\n\x00', 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 320.036885ms ago: executing program 3 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='ra', 0x2) 281.142955ms ago: executing program 4 (id=33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x68, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 230.091487ms ago: executing program 3 (id=34): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}}) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tahvo 2', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='tahvo 2', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='tahvo 2', 0x7) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}}) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/devices/tahvo-usb/vbus\x00', 0x0, 0x0) read(r4, &(0x7f0000000900), 0x64) 223.572203ms ago: executing program 4 (id=35): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x12, {"f4"}}], 0x12}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@code={0xa, 0x1e, {"b81d000000bf010000000f01c1"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x36}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=36): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200040c1) r1 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): +0x94/0x6b0 [ 51.159484][ T48] ? __alloc_skb+0x140/0x710 [ 51.159499][ T48] __alloc_skb+0x140/0x710 [ 51.159511][ T48] ? __alloc_skb+0x5b7/0x710 [ 51.159524][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 51.159536][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.159553][ T48] ? __pfx___might_resched+0x10/0x10 [ 51.159570][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 51.159589][ T48] process_one_work+0xa23/0x1940 [ 51.159607][ T48] ? __pfx_process_one_work+0x10/0x10 [ 51.159623][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 51.159638][ T48] worker_thread+0x5ef/0xe50 [ 51.159653][ T48] ? __pfx_worker_thread+0x10/0x10 [ 51.159666][ T48] ? kthread+0x13a/0x450 [ 51.159676][ T48] ? __pfx_worker_thread+0x10/0x10 [ 51.159687][ T48] kthread+0x370/0x450 [ 51.159697][ T48] ? __pfx_kthread+0x10/0x10 [ 51.159709][ T48] ret_from_fork+0x72b/0xd50 [ 51.159726][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 51.159742][ T48] ? __switch_to+0x800/0x10f0 [ 51.159754][ T48] ? __pfx_kthread+0x10/0x10 [ 51.159766][ T48] ret_from_fork_asm+0x1a/0x30 [ 51.159788][ T48] [ 51.238673][ T5743] FAULT_INJECTION: forcing a failure. [ 51.238673][ T5743] name failslab, interval 1, probability 1, space 0, times 52 [ 51.240449][ T61] CPU: 2 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 51.240473][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.240485][ T61] Workqueue: events_unbound nsim_dev_trap_report_work [ 51.240514][ T61] Call Trace: [ 51.240520][ T61] [ 51.240527][ T61] dump_stack_lvl+0x100/0x190 [ 51.240552][ T61] should_fail_ex.cold+0x5/0xa [ 51.240576][ T61] should_failslab+0xc2/0x120 [ 51.240600][ T61] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.240623][ T61] ? __alloc_skb+0x140/0x710 [ 51.240648][ T61] __alloc_skb+0x140/0x710 [ 51.240666][ T61] ? __alloc_skb+0x5b7/0x710 [ 51.240685][ T61] ? __pfx___alloc_skb+0x10/0x10 [ 51.240704][ T61] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.240757][ T61] ? __pfx___might_resched+0x10/0x10 [ 51.240783][ T61] nsim_dev_trap_report_work+0x2af/0xd20 [ 51.240817][ T61] process_one_work+0xa23/0x1940 [ 51.240849][ T61] ? __pfx_process_one_work+0x10/0x10 [ 51.240877][ T61] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 51.240903][ T61] worker_thread+0x5ef/0xe50 [ 51.240932][ T61] ? kthread+0x13a/0x450 [ 51.240956][ T61] ? __pfx_worker_thread+0x10/0x10 [ 51.240974][ T61] kthread+0x370/0x450 [ 51.240990][ T61] ? __pfx_kthread+0x10/0x10 [ 51.241009][ T61] ret_from_fork+0x72b/0xd50 [ 51.241036][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 51.241062][ T61] ? __switch_to+0x800/0x10f0 [ 51.241080][ T61] ? __pfx_kthread+0x10/0x10 [ 51.241099][ T61] ret_from_fork_asm+0x1a/0x30 [ 51.241137][ T61] [ 51.418843][ T61] FAULT_INJECTION: forcing a failure. [ 51.418843][ T61] name failslab, interval 1, probability 1, space 0, times 51 [ 51.421999][ T5743] CPU: 3 UID: 0 PID: 5743 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 51.422023][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.422030][ T5743] Workqueue: events nsim_fib_event_work [ 51.422054][ T5743] Call Trace: [ 51.422058][ T5743] [ 51.422063][ T5743] dump_stack_lvl+0x100/0x190 [ 51.422080][ T5743] should_fail_ex.cold+0x5/0xa [ 51.422096][ T5743] should_failslab+0xc2/0x120 [ 51.422111][ T5743] __kmalloc_cache_noprof+0x91/0x6c0 [ 51.422130][ T5743] ? nsim_fib_event_work+0xfdd/0x6310 [ 51.422150][ T5743] nsim_fib_event_work+0xfdd/0x6310 [ 51.422171][ T5743] ? debug_object_deactivate+0x2e4/0x3b0 [ 51.422188][ T5743] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 51.422209][ T5743] ? rcu_is_watching+0x12/0xc0 [ 51.422229][ T5743] process_one_work+0xa23/0x1940 [ 51.422247][ T5743] ? __pfx_process_one_work+0x10/0x10 [ 51.422263][ T5743] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 51.422282][ T5743] worker_thread+0x5ef/0xe50 [ 51.422297][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 51.422310][ T5743] ? kthread+0x13a/0x450 [ 51.422320][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 51.422331][ T5743] kthread+0x370/0x450 [ 51.422341][ T5743] ? __pfx_kthread+0x10/0x10 [ 51.422353][ T5743] ret_from_fork+0x72b/0xd50 [ 51.422369][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 51.422386][ T5743] ? __switch_to+0x800/0x10f0 [ 51.422398][ T5743] ? __pfx_kthread+0x10/0x10 [ 51.422409][ T5743] ret_from_fork_asm+0x1a/0x30 [ 51.422432][ T5743] [ 51.468851][ T48] FAULT_INJECTION: forcing a failure. [ 51.468851][ T48] name failslab, interval 1, probability 1, space 0, times 49 [ 51.469161][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 51.469176][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.469184][ T61] Workqueue: events_unbound cfg80211_wiphy_work [ 51.469207][ T61] Call Trace: [ 51.469211][ T61] [ 51.469215][ T61] dump_stack_lvl+0x100/0x190 [ 51.469233][ T61] should_fail_ex.cold+0x5/0xa [ 51.469248][ T61] should_failslab+0xc2/0x120 [ 51.469264][ T61] __kmalloc_noprof+0xfc/0x820 [ 51.469278][ T61] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 51.469299][ T61] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 51.469319][ T61] ? kasan_save_stack+0x3f/0x50 [ 51.469331][ T61] ? kasan_save_stack+0x30/0x50 [ 51.469344][ T61] ? __kasan_kmalloc+0xaa/0xb0 [ 51.469356][ T61] ? __kmalloc_noprof+0x322/0x820 [ 51.469369][ T61] ? lock_acquire+0x1b9/0x370 [ 51.469384][ T61] ? find_held_lock+0x2b/0x80 [ 51.469401][ T61] ? __kfree_rcu_sheaf+0x195/0x730 [ 51.469419][ T61] ? __kfree_rcu_sheaf+0x195/0x730 [ 51.469433][ T61] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 51.469455][ T61] ? kvfree_call_rcu+0x1be/0x4f0 [ 51.469474][ T61] ? __asan_memcpy+0x3c/0x60 [ 51.469487][ T61] ieee80211_inform_bss+0x159/0x1170 [ 51.469506][ T61] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 51.469525][ T61] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 51.469542][ T61] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 51.469558][ T61] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 51.469574][ T61] ? unwind_next_frame+0x3be/0x2090 [ 51.469589][ T61] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 51.469604][ T61] ? ret_from_fork_asm+0x1a/0x30 [ 51.469629][ T61] ? stack_trace_save+0x8e/0xc0 [ 51.469641][ T61] ? __pfx_stack_trace_save+0x10/0x10 [ 51.469655][ T61] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 51.469670][ T61] cfg80211_inform_bss_data+0x230/0x3b60 [ 51.469685][ T61] ? __kmalloc_noprof+0x322/0x820 [ 51.469697][ T61] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 51.469715][ T61] ? cfg80211_wiphy_work+0x2b7/0x550 [ 51.469729][ T61] ? process_one_work+0xa23/0x1940 [ 51.469741][ T61] ? worker_thread+0x5ef/0xe50 [ 51.469752][ T61] ? kthread+0x370/0x450 [ 51.469762][ T61] ? ret_from_fork+0x72b/0xd50 [ 51.469777][ T61] ? ret_from_fork_asm+0x1a/0x30 [ 51.469797][ T61] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 51.469814][ T61] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.469829][ T61] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 51.469849][ T61] ? __lock_acquire+0x49f/0x1a40 [ 51.469863][ T61] ? __lock_acquire+0x49f/0x1a40 [ 51.469881][ T61] ? __lock_acquire+0x49f/0x1a40 [ 51.469895][ T61] ? find_held_lock+0x2b/0x80 [ 51.469912][ T61] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 51.469928][ T61] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 51.469948][ T61] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 51.469968][ T61] ieee80211_bss_info_update+0x310/0xab0 [ 51.469986][ T61] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 51.470006][ T61] ? rcu_is_watching+0x12/0xc0 [ 51.470023][ T61] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 51.470037][ T61] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 51.470055][ T61] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 51.470078][ T61] ieee80211_iface_work+0xa9a/0x1070 [ 51.470098][ T61] cfg80211_wiphy_work+0x2b7/0x550 [ 51.470115][ T61] process_one_work+0xa23/0x1940 [ 51.470132][ T61] ? __pfx_process_one_work+0x10/0x10 [ 51.470148][ T61] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 51.470165][ T61] worker_thread+0x5ef/0xe50 [ 51.470182][ T61] ? kthread+0x13a/0x450 [ 51.470191][ T61] ? __pfx_worker_thread+0x10/0x10 [ 51.470203][ T61] kthread+0x370/0x450 [ 51.470213][ T61] ? __pfx_kthread+0x10/0x10 [ 51.470224][ T61] ret_from_fork+0x72b/0xd50 [ 51.470240][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 51.470257][ T61] ? __switch_to+0x800/0x10f0 [ 51.470268][ T61] ? __pfx_kthread+0x10/0x10 [ 51.470280][ T61] ret_from_fork_asm+0x1a/0x30 [ 51.470302][ T61] [ 51.480618][ T5745] Bluetooth: hci0: command tx timeout [ 51.481419][ T48] CPU: 2 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 51.481435][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.481446][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 51.481467][ T48] Call Trace: [ 51.481471][ T48] [ 51.481476][ T48] dump_stack_lvl+0x100/0x190 [ 51.481492][ T48] should_fail_ex.cold+0x5/0xa [ 51.481508][ T48] should_failslab+0xc2/0x120 [ 51.481524][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.481539][ T48] ? __alloc_skb+0x140/0x710 [ 51.481554][ T48] __alloc_skb+0x140/0x710 [ 51.481566][ T48] ? __alloc_skb+0x5b7/0x710 [ 51.481578][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 51.481592][ T48] ? kfree_skbmem+0x19f/0x210 [ 51.481611][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 51.481642][ T48] process_one_work+0xa23/0x1940 [ 51.481663][ T48] ? __pfx_process_one_work+0x10/0x10 [ 51.481678][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 51.481694][ T48] worker_thread+0x5ef/0xe50 [ 51.481709][ T48] ? __pfx_worker_thread+0x10/0x10 [ 51.481722][ T48] ? kthread+0x13a/0x450 [ 51.481733][ T48] ? __pfx_worker_thread+0x10/0x10 [ 51.481744][ T48] kthread+0x370/0x450 [ 51.481754][ T48] ? __pfx_kthread+0x10/0x10 [ 51.481766][ T48] ret_from_fork+0x72b/0xd50 [ 51.481784][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 51.481801][ T48] ? __switch_to+0x800/0x10f0 [ 51.481813][ T48] ? __pfx_kthread+0x10/0x10 [ 51.481824][ T48] ret_from_fork_asm+0x1a/0x30 [ 51.481847][ T48] [ 51.560977][ T5738] Bluetooth: hci2: command tx timeout [ 51.580848][ T142] FAULT_INJECTION: forcing a failure. [ 51.580848][ T142] name failslab, interval 1, probability 1, space 0, times 45 [ 51.584037][ T12] FAULT_INJECTION: forcing a failure. [ 51.584037][ T12] name failslab, interval 1, probability 1, space 0, times 45 [ 51.584064][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 51.584089][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.584100][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 51.584129][ T12] Call Trace: [ 51.584134][ T12] [ 51.584140][ T12] dump_stack_lvl+0x100/0x190 [ 51.584160][ T12] should_fail_ex.cold+0x5/0xa [ 51.584176][ T12] should_failslab+0xc2/0x120 [ 51.584192][ T12] __kmalloc_noprof+0xfc/0x820 [ 51.584205][ T12] ? __local_bh_enable_ip+0x9e/0x120 [ 51.584221][ T12] ? ___neigh_create+0x1532/0x2940 [ 51.584241][ T12] ___neigh_create+0x1532/0x2940 [ 51.584260][ T12] ? __lock_acquire+0x49f/0x1a40 [ 51.584276][ T12] ? __local_bh_enable_ip+0x9e/0x120 [ 51.584290][ T12] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 51.584307][ T12] ? __pfx____neigh_create+0x10/0x10 [ 51.584326][ T12] ip6_finish_output2+0xffa/0x1ce0 [ 51.584345][ T12] __ip6_finish_output+0x357/0xdf0 [ 51.584362][ T12] ip6_output+0x2aa/0xa60 [ 51.584376][ T12] ? __pfx_ip6_output+0x10/0x10 [ 51.584391][ T12] ? __pfx_ip6_finish_output+0x10/0x10 [ 51.584405][ T12] ? ndisc_send_skb+0xbba/0x1bf0 [ 51.584419][ T12] ? ndisc_send_skb+0xbba/0x1bf0 [ 51.584435][ T12] ? __pfx_ip6_output+0x10/0x10 [ 51.584448][ T12] ndisc_send_skb+0xa85/0x1bf0 [ 51.584464][ T12] ? __pfx_ndisc_send_skb+0x10/0x10 [ 51.584478][ T12] ? ndisc_alloc_skb+0x319/0x530 [ 51.584493][ T12] ? __pfx_dst_output+0x10/0x10 [ 51.584507][ T12] ? __asan_memcpy+0x3c/0x60 [ 51.584522][ T12] ? mark_held_locks+0x40/0x70 [ 51.584538][ T12] ndisc_send_ns+0xc6/0x140 [ 51.584552][ T12] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 51.584568][ T12] ? __pfx_ndisc_send_ns+0x10/0x10 [ 51.584588][ T12] addrconf_dad_work+0xca1/0x1360 [ 51.584603][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 51.584619][ T12] ? rcu_is_watching+0x12/0xc0 [ 51.584638][ T12] process_one_work+0xa23/0x1940 [ 51.584656][ T12] ? __pfx_process_one_work+0x10/0x10 [ 51.584672][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 51.584687][ T12] worker_thread+0x5ef/0xe50 [ 51.584704][ T12] ? kthread+0x13a/0x450 [ 51.584733][ T12] ? __pfx_worker_thread+0x10/0x10 [ 51.584747][ T12] kthread+0x370/0x450 [ 51.584757][ T12] ? __pfx_kthread+0x10/0x10 [ 51.584769][ T12] ret_from_fork+0x72b/0xd50 [ 51.584786][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 51.584803][ T12] ? __switch_to+0x800/0x10f0 [ 51.584820][ T12] ? __pfx_kthread+0x10/0x10 [ 51.584837][ T12] ret_from_fork_asm+0x1a/0x30 [ 51.584877][ T12] [ 51.586954][ T12] FAULT_INJECTION: forcing a failure. [ 51.586954][ T12] name failslab, interval 1, probability 1, space 0, times 44 [ 51.587557][ T142] CPU: 0 UID: 0 PID: 142 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 51.587572][ T142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.587580][ T142] Workqueue: events_unbound nsim_dev_trap_report_work [ 51.587598][ T142] Call Trace: [ 51.587603][ T142] [ 51.587607][ T142] dump_stack_lvl+0x100/0x190 [ 51.587623][ T142] should_fail_ex.cold+0x5/0xa [ 51.587638][ T142] should_failslab+0xc2/0x120 [ 51.587653][ T142] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.587668][ T142] ? __alloc_skb+0x140/0x710 [ 51.587683][ T142] __alloc_skb+0x140/0x710 [ 51.587695][ T142] ? __alloc_skb+0x5b7/0x710 [ 51.587707][ T142] ? __pfx___alloc_skb+0x10/0x10 [ 51.587721][ T142] ? kfree_skbmem+0x19f/0x210 [ 51.587739][ T142] nsim_dev_trap_report_work+0x2af/0xd20 [ 51.587759][ T142] process_one_work+0xa23/0x1940 [ 51.587777][ T142] ? __pfx_process_one_work+0x10/0x10 [ 51.587793][ T142] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 51.587809][ T142] worker_thread+0x5ef/0xe50 [ 51.587825][ T142] ? kthread+0x13a/0x450 [ 51.587835][ T142] ? __pfx_worker_thread+0x10/0x10 [ 51.587846][ T142] kthread+0x370/0x450 [ 51.587857][ T142] ? __pfx_kthread+0x10/0x10 [ 51.587868][ T142] ret_from_fork+0x72b/0xd50 [ 51.587885][ T142] ? __pfx_ret_from_fork+0x10/0x10 [ 51.587902][ T142] ? __switch_to+0x800/0x10f0 [ 51.587913][ T142] ? __pfx_kthread+0x10/0x10 [ 51.587924][ T142] ret_from_fork_asm+0x1a/0x30 [ 51.587947][ T142] [ 51.619379][ T5736] FAULT_INJECTION: forcing a failure. [ 51.619379][ T5736] name failslab, interval 1, probability 1, space 0, times 42 [ 51.621710][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 51.621729][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.621737][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 51.621755][ T12] Call Trace: [ 51.621759][ T12] [ 51.621764][ T12] dump_stack_lvl+0x100/0x190 [ 51.621780][ T12] should_fail_ex.cold+0x5/0xa [ 51.621796][ T12] should_failslab+0xc2/0x120 [ 51.621814][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.621829][ T12] ? __alloc_skb+0x140/0x710 [ 51.621845][ T12] __alloc_skb+0x140/0x710 [ 51.621857][ T12] ? __alloc_skb+0x5b7/0x710 [ 51.621870][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 51.621882][ T12] ? __timer_delete+0xec/0x1b0 [ 51.621894][ T12] ? __pfx___timer_delete+0x10/0x10 [ 51.621911][ T12] __ipv6_ifa_notify+0x1f1/0xf90 [ 51.621930][ T12] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 51.621947][ T12] ? __cancel_work+0x2b5/0x340 [ 51.621962][ T12] ? __cancel_work+0x245/0x340 [ 51.621975][ T12] ? __pfx___cancel_work+0x10/0x10 [ 51.621989][ T12] ? __lock_acquire+0x49f/0x1a40 [ 51.622007][ T12] ? addrconf_dad_completed+0x195/0xff0 [ 51.622020][ T12] addrconf_dad_completed+0x195/0xff0 [ 51.622036][ T12] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 51.622054][ T12] ? addrconf_dad_work+0x83c/0x1360 [ 51.622067][ T12] addrconf_dad_work+0x83c/0x1360 [ 51.622085][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 51.622102][ T12] ? rcu_is_watching+0x12/0xc0 [ 51.622122][ T12] process_one_work+0xa23/0x1940 [ 51.622140][ T12] ? __pfx_process_one_work+0x10/0x10 [ 51.622156][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 51.622171][ T12] worker_thread+0x5ef/0xe50 [ 51.622190][ T12] ? kthread+0x13a/0x450 [ 51.622200][ T12] ? __pfx_worker_thread+0x10/0x10 [ 51.622211][ T12] kthread+0x370/0x450 [ 51.622222][ T12] ? __pfx_kthread+0x10/0x10 [ 51.622233][ T12] ret_from_fork+0x72b/0xd50 [ 51.622251][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 51.622269][ T12] ? __switch_to+0x800/0x10f0 [ 51.622281][ T12] ? __pfx_kthread+0x10/0x10 [ 51.622293][ T12] ret_from_fork_asm+0x1a/0x30 [ 51.622316][ T12] [ 51.633041][ T5747] FAULT_INJECTION: forcing a failure. [ 51.633041][ T5747] name failslab, interval 1, probability 1, space 0, times 40 [ 51.634379][ T5736] CPU: 2 UID: 0 PID: 5736 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 51.634405][ T5736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.634413][ T5736] Call Trace: [ 51.634420][ T5736] [ 51.634426][ T5736] dump_stack_lvl+0x100/0x190 [ 51.634455][ T5736] should_fail_ex.cold+0x5/0xa [ 51.634478][ T5736] should_failslab+0xc2/0x120 [ 51.634499][ T5736] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 51.634518][ T5736] ? sock_alloc_inode+0x26/0x2c0 [ 51.634544][ T5736] ? __pfx_sock_alloc_inode+0x10/0x10 [ 51.634568][ T5736] sock_alloc_inode+0x26/0x2c0 [ 51.634587][ T5736] ? __pfx_sock_alloc_inode+0x10/0x10 [ 51.634608][ T5736] alloc_inode+0x68/0x250 [ 51.634631][ T5736] sock_alloc+0x44/0x280 [ 51.634651][ T5736] ? security_socket_create+0x7f/0x250 [ 51.634675][ T5736] __sock_create+0xc2/0x860 [ 51.634703][ T5736] __sys_socket+0x14d/0x260 [ 51.634715][ T5736] ? __pfx___sys_socket+0x10/0x10 [ 51.634737][ T5736] __x64_sys_socket+0x72/0xb0 [ 51.634752][ T5736] ? lockdep_hardirqs_on+0x78/0x100 [ 51.634771][ T5736] do_syscall_64+0x115/0x870 [ 51.634788][ T5736] ? clear_bhb_loop+0x40/0x90 [ 51.634805][ T5736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.634822][ T5736] RIP: 0033:0x7f15b779f807 [ 51.634837][ T5736] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.634852][ T5736] RSP: 002b:00007ffca8c7a988 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 51.634870][ T5736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f15b779f807 [ 51.634880][ T5736] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 51.634889][ T5736] RBP: 00007ffca8c7b0bc R08: 0000000000000000 R09: 0000000000000000 [ 51.634897][ T5736] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f15b79eefc0 [ 51.634907][ T5736] R13: 00000000000927c0 R14: 000000000000c4a0 R15: 00007f15b79f1180 [ 51.634929][ T5736] [ 51.635058][ T5736] socket: no more sockets [ 51.636512][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 51.636540][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.636548][ T5747] Call Trace: [ 51.636552][ T5747] [ 51.636557][ T5747] dump_stack_lvl+0x100/0x190 [ 51.636573][ T5747] should_fail_ex.cold+0x5/0xa [ 51.636588][ T5747] should_failslab+0xc2/0x120 [ 51.636603][ T5747] __kmalloc_noprof+0xfc/0x820 [ 51.636616][ T5747] ? rcu_is_watching+0x12/0xc0 [ 51.636634][ T5747] ? tomoyo_realpath_from_path+0xb6/0x690 [ 51.636649][ T5747] tomoyo_realpath_from_path+0xb6/0x690 [ 51.636665][ T5747] tomoyo_path2_perm+0x29f/0x700 [ 51.636687][ T5747] ? tomoyo_path2_perm+0x291/0x700 [ 51.636711][ T5747] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 51.636754][ T5747] ? current_check_refer_path+0x2cd/0xde0 [ 51.636785][ T5747] ? __lock_acquire+0x49f/0x1a40 [ 51.636822][ T5747] tomoyo_path_rename+0xfc/0x1a0 [ 51.636837][ T5747] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 51.636858][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 51.636886][ T5747] security_path_rename+0x18e/0x3c0 [ 51.636906][ T5747] filename_renameat2+0x731/0xa60 [ 51.636931][ T5747] ? __pfx_filename_renameat2+0x10/0x10 [ 51.636948][ T5747] ? __might_fault+0xc5/0x140 [ 51.636967][ T5747] ? do_getname+0x191/0x390 [ 51.636986][ T5747] __x64_sys_rename+0x81/0xb0 [ 51.637007][ T5747] do_syscall_64+0x115/0x870 [ 51.637025][ T5747] ? clear_bhb_loop+0x40/0x90 [ 51.637050][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.637064][ T5747] RIP: 0033:0x7fc4e147acc7 [ 51.637077][ T5747] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 51.637091][ T5747] RSP: 002b:00007ffe59498a38 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 51.637107][ T5747] RAX: ffffffffffffffda RBX: 000055d4d2ae75c0 RCX: 00007fc4e147acc7 [ 51.637117][ T5747] RDX: 000055d4d2898010 RSI: 00007ffe59498a50 RDI: 00007ffe59498e50 [ 51.637127][ T5747] RBP: 000055d4d2b703a0 R08: 00000000000001e0 R09: 0000000000000000 [ 51.637137][ T5747] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe59498a50 [ 51.637146][ T5747] R13: 00007ffe59498e50 R14: 0000000000000000 R15: 000055d4b568d9dd [ 51.637168][ T5747] [ 51.678622][ T5743] FAULT_INJECTION: forcing a failure. [ 51.678622][ T5743] name failslab, interval 1, probability 1, space 0, times 37 [ 51.682288][ T5742] FAULT_INJECTION: forcing a failure. [ 51.682288][ T5742] name failslab, interval 1, probability 1, space 0, times 37 [ 51.683843][ T5743] CPU: 3 UID: 0 PID: 5743 Comm: kworker/3:2 Not tainted syzkaller #0 PREEMPT(full) [ 51.683868][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.683880][ T5743] Workqueue: events nsim_fib_event_work [ 51.683909][ T5743] Call Trace: [ 51.683915][ T5743] [ 51.683921][ T5743] dump_stack_lvl+0x100/0x190 [ 51.683944][ T5743] should_fail_ex.cold+0x5/0xa [ 51.683964][ T5743] should_failslab+0xc2/0x120 [ 51.683985][ T5743] __kmalloc_cache_noprof+0x91/0x6c0 [ 51.684011][ T5743] ? nsim_fib_event_work+0xfdd/0x6310 [ 51.684035][ T5743] nsim_fib_event_work+0xfdd/0x6310 [ 51.684064][ T5743] ? debug_object_deactivate+0x2e4/0x3b0 [ 51.684087][ T5743] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 51.684114][ T5743] ? rcu_is_watching+0x12/0xc0 [ 51.684140][ T5743] process_one_work+0xa23/0x1940 [ 51.684163][ T5743] ? __pfx_process_one_work+0x10/0x10 [ 51.684186][ T5743] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 51.684211][ T5743] worker_thread+0x5ef/0xe50 [ 51.684233][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 51.684250][ T5743] ? kthread+0x13a/0x450 [ 51.684264][ T5743] ? __pfx_worker_thread+0x10/0x10 [ 51.684278][ T5743] kthread+0x370/0x450 [ 51.684292][ T5743] ? __pfx_kthread+0x10/0x10 [ 51.684308][ T5743] ret_from_fork+0x72b/0xd50 [ 51.684330][ T5743] ? __pfx_ret_from_fork+0x10/0x10 [ 51.684352][ T5743] ? __switch_to+0x800/0x10f0 [ 51.684368][ T5743] ? __pfx_kthread+0x10/0x10 [ 51.684384][ T5743] ret_from_fork_asm+0x1a/0x30 [ 51.684416][ T5743] [ 51.698835][ T142] FAULT_INJECTION: forcing a failure. [ 51.698835][ T142] name failslab, interval 1, probability 1, space 0, times 35 [ 51.700775][ T5742] CPU: 2 UID: 0 PID: 5742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 51.700798][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.700808][ T5742] Call Trace: [ 51.700812][ T5742] [ 51.700818][ T5742] dump_stack_lvl+0x100/0x190 [ 51.700846][ T5742] should_fail_ex.cold+0x5/0xa [ 51.700869][ T5742] should_failslab+0xc2/0x120 [ 51.700891][ T5742] __kmalloc_cache_noprof+0x91/0x6c0 [ 51.700915][ T5742] ? find_held_lock+0x2b/0x80 [ 51.700940][ T5742] ? addr_event.isra.0+0xcc/0x560 [ 51.700971][ T5742] addr_event.isra.0+0xcc/0x560 [ 51.700996][ T5742] inet6addr_event+0x116/0x180 [ 51.701016][ T5742] ? __pfx_inet6addr_event+0x10/0x10 [ 51.701047][ T5742] notifier_call_chain+0x99/0x3f0 [ 51.701070][ T5742] atomic_notifier_call_chain+0x71/0x1c0 [ 51.701088][ T5742] addrconf_ifdown.isra.0+0xe85/0x1b70 [ 51.701104][ T5742] ? trace_contention_end+0x126/0x160 [ 51.701132][ T5742] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 51.701160][ T5742] addrconf_notify+0x4a3/0x1ba0 [ 51.701182][ T5742] ? __pfx_tls_dev_event+0x10/0x10 [ 51.701203][ T5742] ? __pfx_addrconf_notify+0x10/0x10 [ 51.701224][ T5742] ? ip6mr_device_event+0x1c4/0x230 [ 51.701249][ T5742] notifier_call_chain+0x99/0x3f0 [ 51.701269][ T5742] call_netdevice_notifiers_info+0xbe/0x110 [ 51.701292][ T5742] netif_close_many+0x319/0x630 [ 51.701318][ T5742] ? __pfx_netif_close_many+0x10/0x10 [ 51.701343][ T5742] ? netif_close_many_and_unlock+0x1af/0x270 [ 51.701371][ T5742] unregister_netdevice_many_notify+0x840/0x2140 [ 51.701399][ T5742] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 51.701419][ T5742] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 51.701441][ T5742] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 51.701466][ T5742] ? linkwatch_fire_event+0x211/0x270 [ 51.701487][ T5742] ? netif_carrier_off+0xa8/0xc0 [ 51.701517][ T5742] unregister_netdevice_queue+0x30b/0x3c0 [ 51.701540][ T5742] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 51.701559][ T5742] ? linkwatch_schedule_work+0x16f/0x1a0 [ 51.701583][ T5742] ? linkwatch_fire_event+0x74/0x270 [ 51.701611][ T5742] __tun_detach+0x1371/0x16e0 [ 51.701641][ T5742] ? __pfx_tun_chr_close+0x10/0x10 [ 51.701664][ T5742] tun_chr_close+0xc2/0x220 [ 51.701686][ T5742] ? __pfx_tun_chr_close+0x10/0x10 [ 51.701709][ T5742] __fput+0x3ff/0xb50 [ 51.701734][ T5742] task_work_run+0x150/0x240 [ 51.701753][ T5742] ? __pfx_task_work_run+0x10/0x10 [ 51.701773][ T5742] do_exit+0x951/0x2ae0 [ 51.701807][ T5742] ? do_raw_spin_lock+0x128/0x260 [ 51.701830][ T5742] ? __pfx_do_exit+0x10/0x10 [ 51.701851][ T5742] ? do_group_exit+0x1bd/0x2a0 [ 51.701864][ T5742] ? rcu_is_watching+0x12/0xc0 [ 51.701891][ T5742] do_group_exit+0xd5/0x2a0 [ 51.701909][ T5742] __x64_sys_exit_group+0x3e/0x50 [ 51.701925][ T5742] x64_sys_call+0x102c/0x1530 [ 51.701947][ T5742] do_syscall_64+0x115/0x870 [ 51.701963][ T5742] ? clear_bhb_loop+0x40/0x90 [ 51.701982][ T5742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.702000][ T5742] RIP: 0033:0x7f7bd459df99 [ 51.702014][ T5742] Code: Unable to access opcode bytes at 0x7f7bd459df6f. [ 51.702022][ T5742] RSP: 002b:00007ffecfd4fa88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.702039][ T5742] RAX: ffffffffffffffda RBX: 00007f7bd4634339 RCX: 00007f7bd459df99 [ 51.702047][ T5742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 51.702054][ T5742] RBP: 000000000000000c R08: 0000000000000000 R09: 00007f7bd4634314 [ 51.702064][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecfd50ce0 [ 51.702073][ T5742] R13: 00007f7bd4634314 R14: 000000000000c4df R15: 00007ffecfd50d20 [ 51.702095][ T5742] [ 51.781030][ T48] FAULT_INJECTION: forcing a failure. [ 51.781030][ T48] name failslab, interval 1, probability 1, space 0, times 34 [ 51.782243][ T142] CPU: 3 UID: 0 PID: 142 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 51.782268][ T142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.782280][ T142] Workqueue: events_unbound nsim_dev_trap_report_work [ 51.782309][ T142] Call Trace: [ 51.782315][ T142] [ 51.782323][ T142] dump_stack_lvl+0x100/0x190 [ 51.782348][ T142] should_fail_ex.cold+0x5/0xa [ 51.782370][ T142] should_failslab+0xc2/0x120 [ 51.782393][ T142] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.782416][ T142] ? __alloc_skb+0x140/0x710 [ 51.782440][ T142] __alloc_skb+0x140/0x710 [ 51.782457][ T142] ? __alloc_skb+0x5b7/0x710 [ 51.782476][ T142] ? __pfx___alloc_skb+0x10/0x10 [ 51.782495][ T142] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.782521][ T142] ? __pfx___might_resched+0x10/0x10 [ 51.782550][ T142] nsim_dev_trap_report_work+0x2af/0xd20 [ 51.782585][ T142] process_one_work+0xa23/0x1940 [ 51.782629][ T142] ? __pfx_process_one_work+0x10/0x10 [ 51.782655][ T142] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 51.782678][ T142] worker_thread+0x5ef/0xe50 [ 51.782706][ T142] ? kthread+0x13a/0x450 [ 51.782722][ T142] ? __pfx_worker_thread+0x10/0x10 [ 51.782739][ T142] kthread+0x370/0x450 [ 51.782754][ T142] ? __pfx_kthread+0x10/0x10 [ 51.782771][ T142] ret_from_fork+0x72b/0xd50 [ 51.782796][ T142] ? __pfx_ret_from_fork+0x10/0x10 [ 51.782820][ T142] ? __switch_to+0x800/0x10f0 [ 51.782838][ T142] ? __pfx_kthread+0x10/0x10 [ 51.782855][ T142] ret_from_fork_asm+0x1a/0x30 [ 51.782896][ T142] [ 51.830165][ T1165] FAULT_INJECTION: forcing a failure. [ 51.830165][ T1165] name failslab, interval 1, probability 1, space 0, times 33 [ 51.831426][ T48] CPU: 2 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 51.831454][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.831467][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 51.831496][ T48] Call Trace: [ 51.831502][ T48] [ 51.831509][ T48] dump_stack_lvl+0x100/0x190 [ 51.831536][ T48] should_fail_ex.cold+0x5/0xa [ 51.831559][ T48] should_failslab+0xc2/0x120 [ 51.831584][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.831607][ T48] ? __alloc_skb+0x140/0x710 [ 51.831632][ T48] __alloc_skb+0x140/0x710 [ 51.831651][ T48] ? __alloc_skb+0x5b7/0x710 [ 51.831670][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 51.831687][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 51.831713][ T48] ? do_raw_spin_unlock+0x145/0x1e0 [ 51.831741][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 51.831772][ T48] process_one_work+0xa23/0x1940 [ 51.831796][ T48] ? __pfx_process_one_work+0x10/0x10 [ 51.831817][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 51.831837][ T48] worker_thread+0x5ef/0xe50 [ 51.831857][ T48] ? __pfx_worker_thread+0x10/0x10 [ 51.831874][ T48] ? kthread+0x13a/0x450 [ 51.831887][ T48] ? __pfx_worker_thread+0x10/0x10 [ 51.831901][ T48] kthread+0x370/0x450 [ 51.831913][ T48] ? __pfx_kthread+0x10/0x10 [ 51.831928][ T48] ret_from_fork+0x72b/0xd50 [ 51.831950][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 51.831971][ T48] ? __switch_to+0x800/0x10f0 [ 51.831987][ T48] ? __pfx_kthread+0x10/0x10 [ 51.832002][ T48] ret_from_fork_asm+0x1a/0x30 [ 51.832032][ T48] [ 51.923181][ C0] FAULT_INJECTION: forcing a failure. [ 51.923181][ C0] name failslab, interval 1, probability 1, space 0, times 32 [ 51.967216][ T5909] FAULT_INJECTION: forcing a failure. [ 51.967216][ T5909] name failslab, interval 1, probability 1, space 0, times 32 [ 51.967277][ C0] CPU: 0 UID: 0 PID: 5908 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 51.967292][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.967299][ C0] Call Trace: [ 51.967304][ C0] [ 51.967309][ C0] dump_stack_lvl+0x100/0x190 [ 51.967329][ C0] should_fail_ex.cold+0x5/0xa [ 51.967345][ C0] should_failslab+0xc2/0x120 [ 51.967361][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.967376][ C0] ? __alloc_skb+0x140/0x710 [ 51.967391][ C0] __alloc_skb+0x140/0x710 [ 51.967403][ C0] ? __alloc_skb+0x5b7/0x710 [ 51.967415][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 51.967428][ C0] ? do_raw_spin_lock+0x128/0x260 [ 51.967446][ C0] skb_copy+0x1ca/0x3a0 [ 51.967460][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 51.967479][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 51.967493][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 51.967509][ C0] ? __lock_acquire+0x49f/0x1a40 [ 51.967524][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 51.967540][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 51.967555][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 51.967573][ C0] __iterate_interfaces+0x2e6/0x650 [ 51.967587][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 51.967602][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 51.967617][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 51.967632][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 51.967650][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 51.967668][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 51.967689][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 51.967708][ C0] handle_softirqs+0x1ea/0x9b0 [ 51.967726][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 51.967740][ C0] ? _raw_spin_unlock+0x28/0x50 [ 51.967758][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 51.967770][ C0] __irq_exit_rcu+0x162/0x210 [ 51.967785][ C0] irq_exit_rcu+0x9/0x30 [ 51.967798][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 51.967810][ C0] [ 51.967814][ C0] [ 51.967818][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.967831][ C0] RIP: 0010:dt2801_reset+0x2e3/0x790 [ 51.967850][ C0] Code: ff e8 31 c7 e6 f8 83 eb 01 0f 82 7f 03 00 00 e8 b3 cc e6 f8 41 80 7d 00 00 0f 85 ac 03 00 00 0f b7 85 c0 01 00 00 8d 50 01 ec <41> 89 c4 41 0f b6 06 84 c0 74 06 0f 8e ac 03 00 00 44 0f b6 3d e4 [ 51.967860][ C0] RSP: 0018:ffffc900046ff8b0 EFLAGS: 00000246 [ 51.967871][ C0] RAX: 0000000000000300 RBX: 0000000000000eab RCX: ffffc90007351000 [ 51.967878][ C0] RDX: 00000000000003c5 RSI: ffffffff8923938d RDI: ffff88802afaa540 [ 51.967885][ C0] RBP: ffff888033a2b800 R08: 0000000000000005 R09: 0000000000000000 [ 51.967891][ C0] R10: 0000000000000eac R11: 0000000000000000 R12: 0000000000000300 [ 51.967898][ C0] R13: ffffed1006745738 R14: fffffbfff1d47534 R15: 0000000000000000 [ 51.967908][ C0] ? dt2801_reset+0x2cd/0x790 [ 51.967927][ C0] ? __pfx_dt2801_reset+0x10/0x10 [ 51.967943][ C0] ? dt2801_readdata.constprop.0+0x98/0x210 [ 51.967960][ C0] ? dt2801_readdata.constprop.0+0xf4/0x210 [ 51.967978][ C0] dt2801_attach+0x2ab/0xf10 [ 51.967996][ C0] ? __pfx_dt2801_attach+0x10/0x10 [ 51.968014][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 51.968036][ C0] comedi_device_attach+0x40e/0x6b0 [ 51.968051][ C0] do_devconfig_ioctl+0x1b3/0x6d0 [ 51.968065][ C0] ? comedi_unlocked_ioctl+0x180/0x3310 [ 51.968080][ C0] ? avc_has_extended_perms+0x9c2/0x1080 [ 51.968095][ C0] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 51.968115][ C0] ? find_held_lock+0x2b/0x80 [ 51.968135][ C0] comedi_unlocked_ioctl+0x860/0x3310 [ 51.968151][ C0] ? tomoyo_path_number_perm+0x188/0x580 [ 51.968169][ C0] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 51.968188][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.968203][ C0] ? do_vfs_ioctl+0x226/0x13e0 [ 51.968219][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 51.968235][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.968257][ C0] ? __fget_files+0x215/0x3d0 [ 51.968268][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 51.968284][ C0] ? selinux_file_ioctl+0x13b/0x290 [ 51.968300][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 51.968317][ C0] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 51.968334][ C0] __x64_sys_ioctl+0x18e/0x210 [ 51.968350][ C0] do_syscall_64+0x115/0x870 [ 51.968363][ C0] ? clear_bhb_loop+0x40/0x90 [ 51.968376][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.968387][ C0] RIP: 0033:0x7fb0eb79df99 [ 51.968397][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.968407][ C0] RSP: 002b:00007fb0e99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.968431][ C0] RAX: ffffffffffffffda RBX: 00007fb0eba25fa0 RCX: 00007fb0eb79df99 [ 51.968438][ C0] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 51.968444][ C0] RBP: 00007fb0eb834ec4 R08: 0000000000000000 R09: 0000000000000000 [ 51.968451][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.968457][ C0] R13: 00007fb0eba26038 R14: 00007fb0eba25fa0 R15: 00007ffe89b4d4a8 [ 51.968470][ C0] [ 51.968822][ T142] FAULT_INJECTION: forcing a failure. [ 51.968822][ T142] name failslab, interval 1, probability 1, space 0, times 31 [ 51.970158][ T1165] CPU: 3 UID: 0 PID: 1165 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 51.970183][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.970194][ T1165] Workqueue: events_unbound cfg80211_wiphy_work [ 51.970221][ T1165] Call Trace: [ 51.970227][ T1165] [ 51.970233][ T1165] dump_stack_lvl+0x100/0x190 [ 51.970258][ T1165] should_fail_ex.cold+0x5/0xa [ 51.970280][ T1165] should_failslab+0xc2/0x120 [ 51.970303][ T1165] __kmalloc_noprof+0xfc/0x820 [ 51.970323][ T1165] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 51.970355][ T1165] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 51.970388][ T1165] ? __lock_acquire+0x49f/0x1a40 [ 51.970410][ T1165] ? native_smp_send_reschedule+0x28/0x60 [ 51.970432][ T1165] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 51.970469][ T1165] ? rcu_is_watching+0x12/0xc0 [ 51.970500][ T1165] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 51.970527][ T1165] ? do_raw_spin_lock+0x128/0x260 [ 51.970552][ T1165] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 51.970589][ T1165] ieee80211_iface_work+0xa9a/0x1070 [ 51.970618][ T1165] cfg80211_wiphy_work+0x2b7/0x550 [ 51.970643][ T1165] process_one_work+0xa23/0x1940 [ 51.970670][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 51.970695][ T1165] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 51.970721][ T1165] worker_thread+0x5ef/0xe50 [ 51.970749][ T1165] ? kthread+0x13a/0x450 [ 51.970786][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 51.970804][ T1165] kthread+0x370/0x450 [ 51.970819][ T1165] ? __pfx_kthread+0x10/0x10 [ 51.970837][ T1165] ret_from_fork+0x72b/0xd50 [ 51.970863][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 51.970888][ T1165] ? __switch_to+0x800/0x10f0 [ 51.970914][ T1165] ? __pfx_kthread+0x10/0x10 [ 51.970932][ T1165] ret_from_fork_asm+0x1a/0x30 [ 51.970971][ T1165] [ 51.970981][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 51.971004][ T5909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.971013][ T5909] Call Trace: [ 51.971020][ T5909] [ 51.971027][ T5909] dump_stack_lvl+0x100/0x190 [ 51.971052][ T5909] should_fail_ex.cold+0x5/0xa [ 51.971079][ T5909] should_failslab+0xc2/0x120 [ 51.971104][ T5909] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 51.971126][ T5909] ? alloc_vmap_area+0x640/0x2bb0 [ 51.971152][ T5909] alloc_vmap_area+0x640/0x2bb0 [ 51.971180][ T5909] ? kasan_save_track+0x14/0x30 [ 51.971201][ T5909] ? __kasan_kmalloc+0xaa/0xb0 [ 51.971222][ T5909] ? __pfx_alloc_vmap_area+0x10/0x10 [ 51.971245][ T5909] ? __get_vm_area_node+0x101/0x330 [ 51.971271][ T5909] __get_vm_area_node+0x1ca/0x330 [ 51.971295][ T5909] ? kcov_ioctl+0x4d/0x750 [ 51.971315][ T5909] __vmalloc_node_range_noprof+0x228/0x1630 [ 51.971341][ T5909] ? kcov_ioctl+0x4d/0x750 [ 51.971365][ T5909] ? kcov_ioctl+0x4d/0x750 [ 51.971384][ T5909] ? do_vfs_ioctl+0x226/0x13e0 [ 51.971408][ T5909] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 51.971434][ T5909] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.971480][ T5909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.971510][ T5909] ? hook_file_ioctl_common+0x140/0x440 [ 51.971533][ T5909] ? kcov_ioctl+0x4d/0x750 [ 51.971552][ T5909] vmalloc_user_noprof+0x9e/0xe0 [ 51.971576][ T5909] ? kcov_ioctl+0x4d/0x750 [ 51.971595][ T5909] kcov_ioctl+0x4d/0x750 [ 51.971614][ T5909] ? __pfx_kcov_ioctl+0x10/0x10 [ 51.971635][ T5909] __x64_sys_ioctl+0x18e/0x210 [ 51.971661][ T5909] do_syscall_64+0x115/0x870 [ 51.971681][ T5909] ? clear_bhb_loop+0x40/0x90 [ 51.971699][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.971716][ T5909] RIP: 0033:0x7f7653d9dc2b [ 51.971729][ T5909] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 51.971746][ T5909] RSP: 002b:00007fffd6dca800 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.971762][ T5909] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7653d9dc2b [ 51.971773][ T5909] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 51.971783][ T5909] RBP: 00007f7654026308 R08: 0000000000000000 R09: 0000000000000000 [ 51.971794][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.971804][ T5909] R13: 0000000000000003 R14: 00007fffd6dcaab8 R15: 0000000000000000 [ 51.971823][ T5909] [ 51.972054][ T5909] syz-executor: vmalloc error: size 4194304, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 51.972414][ T142] CPU: 0 UID: 0 PID: 142 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 51.972430][ T142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.972438][ T142] Workqueue: events_unbound cfg80211_wiphy_work [ 51.972455][ T142] Call Trace: [ 51.972459][ T142] [ 51.972463][ T142] dump_stack_lvl+0x100/0x190 [ 51.972478][ T142] should_fail_ex.cold+0x5/0xa [ 51.972492][ T142] should_failslab+0xc2/0x120 [ 51.972507][ T142] __kmalloc_noprof+0xfc/0x820 [ 51.972526][ T142] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 51.972553][ T142] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 51.972575][ T142] ? unwind_next_frame+0x3be/0x2090 [ 51.972598][ T142] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 51.972615][ T142] ? ret_from_fork_asm+0x1a/0x30 [ 51.972641][ T142] ? stack_trace_save+0x8e/0xc0 [ 51.972653][ T142] ? __pfx_stack_trace_save+0x10/0x10 [ 51.972668][ T142] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 51.972682][ T142] cfg80211_inform_bss_data+0x230/0x3b60 [ 51.972698][ T142] ? __kmalloc_noprof+0x322/0x820 [ 51.972710][ T142] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 51.972747][ T142] ? cfg80211_wiphy_work+0x2b7/0x550 [ 51.972762][ T142] ? process_one_work+0xa23/0x1940 [ 51.972774][ T142] ? worker_thread+0x5ef/0xe50 [ 51.972785][ T142] ? kthread+0x370/0x450 [ 51.972795][ T142] ? ret_from_fork+0x72b/0xd50 [ 51.972810][ T142] ? ret_from_fork_asm+0x1a/0x30 [ 51.972830][ T142] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 51.972848][ T142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.972863][ T142] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 51.972891][ T142] ? __lock_acquire+0x49f/0x1a40 [ 51.972913][ T142] ? __lock_acquire+0x49f/0x1a40 [ 51.972942][ T142] ? __lock_acquire+0x49f/0x1a40 [ 51.972961][ T142] ? find_held_lock+0x2b/0x80 [ 51.972986][ T142] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 51.973009][ T142] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 51.973044][ T142] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 51.973069][ T142] ieee80211_bss_info_update+0x310/0xab0 [ 51.973088][ T142] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 51.973110][ T142] ? rcu_is_watching+0x12/0xc0 [ 51.973134][ T142] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 51.973156][ T142] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 51.973183][ T142] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 51.973216][ T142] ieee80211_iface_work+0xa9a/0x1070 [ 51.973236][ T142] cfg80211_wiphy_work+0x2b7/0x550 [ 51.973253][ T142] process_one_work+0xa23/0x1940 [ 51.973271][ T142] ? __pfx_process_one_work+0x10/0x10 [ 51.973288][ T142] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 51.973305][ T142] worker_thread+0x5ef/0xe50 [ 51.973322][ T142] ? kthread+0x13a/0x450 [ 51.973332][ T142] ? __pfx_worker_thread+0x10/0x10 [ 51.973347][ T142] kthread+0x370/0x450 [ 51.973361][ T142] ? __pfx_kthread+0x10/0x10 [ 51.973379][ T142] ret_from_fork+0x72b/0xd50 [ 51.973402][ T142] ? __pfx_ret_from_fork+0x10/0x10 [ 51.973425][ T142] ? __switch_to+0x800/0x10f0 [ 51.973442][ T142] ? __pfx_kthread+0x10/0x10 [ 51.973460][ T142] ret_from_fork_asm+0x1a/0x30 [ 51.973494][ T142] [ 51.975073][ T5148] FAULT_INJECTION: forcing a failure. [ 51.975073][ T5148] name failslab, interval 1, probability 1, space 0, times 28 [ 51.976412][ T5909] ,cpuset= [ 51.978639][ T5148] CPU: 3 UID: 0 PID: 5148 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 51.978663][ T5148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.978673][ T5148] Call Trace: [ 51.978680][ T5148] [ 51.978687][ T5148] dump_stack_lvl+0x100/0x190 [ 51.978712][ T5148] should_fail_ex.cold+0x5/0xa [ 51.978735][ T5148] should_failslab+0xc2/0x120 [ 51.978775][ T5148] kmem_cache_alloc_noprof+0x91/0x6a0 [ 51.978798][ T5148] ? do_getname+0x35/0x390 [ 51.978825][ T5148] do_getname+0x35/0x390 [ 51.978866][ T5148] vfs_fstatat+0xd0/0xe0 [ 51.978889][ T5148] __do_sys_newfstatat+0x9d/0x120 [ 51.978917][ T5148] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 51.978960][ T5148] do_syscall_64+0x115/0x870 [ 51.978977][ T5148] ? clear_bhb_loop+0x40/0x90 [ 51.978998][ T5148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.979016][ T5148] RIP: 0033:0x7fc4e1511b0a [ 51.979030][ T5148] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 51.979046][ T5148] RSP: 002b:00007ffe59499378 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 51.979062][ T5148] RAX: ffffffffffffffda RBX: 000055d4b569b420 RCX: 00007fc4e1511b0a [ 51.979072][ T5148] RDX: 00007ffe59499380 RSI: 000055d4b5689ef3 RDI: 00000000ffffff9c [ 51.979083][ T5148] RBP: 000055d4d2ad8668 R08: 00063478c1c69200 R09: 0000000000000001 [ 51.979094][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.979103][ T5148] R13: 00007ffe59499380 R14: 0000000000000000 R15: 00063478c1c69200 [ 51.979125][ T5148] [ 52.026253][ T1165] FAULT_INJECTION: forcing a failure. [ 52.026253][ T1165] name failslab, interval 1, probability 1, space 0, times 26 [ 52.027077][ T5909] / [ 52.030304][ T1165] CPU: 1 UID: 0 PID: 1165 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 52.030322][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.030330][ T1165] Workqueue: events_unbound cfg80211_wiphy_work [ 52.030351][ T1165] Call Trace: [ 52.030356][ T1165] [ 52.030360][ T1165] dump_stack_lvl+0x100/0x190 [ 52.030378][ T1165] should_fail_ex.cold+0x5/0xa [ 52.030393][ T1165] should_failslab+0xc2/0x120 [ 52.030409][ T1165] __kmalloc_noprof+0xfc/0x820 [ 52.030423][ T1165] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.030444][ T1165] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.030462][ T1165] ? __mod_timer+0x40e/0xca0 [ 52.030478][ T1165] ? __kasan_slab_free+0x5f/0x80 [ 52.030492][ T1165] ? kmem_cache_free+0x127/0x6b0 [ 52.030506][ T1165] ? __lock_acquire+0x49f/0x1a40 [ 52.030522][ T1165] ? __lock_acquire+0x49f/0x1a40 [ 52.030535][ T1165] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 52.030559][ T1165] ? rcu_is_watching+0x12/0xc0 [ 52.030579][ T1165] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 52.030597][ T1165] ? do_raw_spin_lock+0x128/0x260 [ 52.030614][ T1165] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 52.030637][ T1165] ieee80211_iface_work+0xa9a/0x1070 [ 52.030657][ T1165] cfg80211_wiphy_work+0x2b7/0x550 [ 52.030674][ T1165] process_one_work+0xa23/0x1940 [ 52.030693][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 52.030709][ T1165] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 52.030727][ T1165] worker_thread+0x5ef/0xe50 [ 52.030744][ T1165] ? kthread+0x13a/0x450 [ 52.030755][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 52.030766][ T1165] kthread+0x370/0x450 [ 52.030776][ T1165] ? __pfx_kthread+0x10/0x10 [ 52.030788][ T1165] ret_from_fork+0x72b/0xd50 [ 52.030805][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 52.030822][ T1165] ? __switch_to+0x800/0x10f0 [ 52.030834][ T1165] ? __pfx_kthread+0x10/0x10 [ 52.030846][ T1165] ret_from_fork_asm+0x1a/0x30 [ 52.030869][ T1165] [ 52.230258][ C0] FAULT_INJECTION: forcing a failure. [ 52.230258][ C0] name failslab, interval 1, probability 1, space 0, times 24 [ 54.286550][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 54.286567][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.286577][ C0] Call Trace: [ 54.286591][ C0] [ 54.286599][ C0] dump_stack_lvl+0x100/0x190 [ 54.286623][ C0] should_fail_ex.cold+0x5/0xa [ 54.286639][ C0] should_failslab+0xc2/0x120 [ 54.286656][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.286670][ C0] ? __alloc_skb+0x140/0x710 [ 54.286685][ C0] __alloc_skb+0x140/0x710 [ 54.286698][ C0] ? __alloc_skb+0x5b7/0x710 [ 54.286709][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 54.286723][ C0] ? do_raw_spin_lock+0x128/0x260 [ 54.286741][ C0] skb_copy+0x1ca/0x3a0 [ 54.286755][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 54.286775][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 54.286789][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 54.286804][ C0] ? __lock_acquire+0x49f/0x1a40 [ 54.286819][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 54.286835][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 54.286851][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 54.286868][ C0] __iterate_interfaces+0x2e6/0x650 [ 54.286881][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 54.286897][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 54.286911][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 54.286927][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 54.286946][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 54.286962][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 54.286985][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 54.287003][ C0] handle_softirqs+0x1ea/0x9b0 [ 54.287019][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 54.287034][ C0] ? _raw_spin_unlock+0x28/0x50 [ 54.287050][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 54.287062][ C0] __irq_exit_rcu+0x162/0x210 [ 54.287076][ C0] irq_exit_rcu+0x9/0x30 [ 54.287092][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 54.287105][ C0] [ 54.287108][ C0] [ 54.287112][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.287125][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 54.287138][ C0] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 54.287149][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000206 [ 54.287159][ C0] RAX: 00000000000b06b1 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 54.287166][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 54.287173][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d [ 54.287180][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 54.287186][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 54.287196][ C0] ? ct_kernel_exit+0x125/0x180 [ 54.287211][ C0] default_idle+0x9/0x10 [ 54.287224][ C0] default_idle_call+0x6c/0xb0 [ 54.287237][ C0] do_idle+0x3a7/0x5b0 [ 54.287261][ C0] ? __pfx_do_idle+0x10/0x10 [ 54.287279][ C0] ? rest_init+0x23d/0x260 [ 54.287295][ C0] cpu_startup_entry+0x4f/0x60 [ 54.287311][ C0] rest_init+0x251/0x260 [ 54.287325][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 54.287342][ C0] start_kernel+0x48e/0x490 [ 54.287357][ C0] x86_64_start_reservations+0x24/0x30 [ 54.287372][ C0] x86_64_start_kernel+0x12b/0x130 [ 54.287387][ C0] common_startup_64+0x13e/0x158 [ 54.287410][ C0] [ 54.290491][ C3] FAULT_INJECTION: forcing a failure. [ 54.290491][ C3] name failslab, interval 1, probability 1, space 0, times 23 [ 54.292122][ C0] FAULT_INJECTION: forcing a failure. [ 54.292122][ C0] name failslab, interval 1, probability 1, space 0, times 23 [ 54.294736][ C3] CPU: 3 UID: 0 PID: 5831 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 54.294752][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.294771][ C3] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 54.294797][ C3] Call Trace: [ 54.294802][ C3] [ 54.294807][ C3] dump_stack_lvl+0x100/0x190 [ 54.294823][ C3] should_fail_ex.cold+0x5/0xa [ 54.294838][ C3] should_failslab+0xc2/0x120 [ 54.294854][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.294869][ C3] ? __alloc_skb+0x140/0x710 [ 54.294884][ C3] __alloc_skb+0x140/0x710 [ 54.294896][ C3] ? __alloc_skb+0x5b7/0x710 [ 54.294912][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 54.294925][ C3] ? __lock_acquire+0x49f/0x1a40 [ 54.294941][ C3] __netdev_alloc_skb+0x7a/0x960 [ 54.294956][ C3] hsr_init_skb+0x122/0x670 [ 54.294975][ C3] send_hsr_supervision_frame+0x138/0xbc0 [ 54.294993][ C3] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 54.295009][ C3] hsr_announce+0x169/0x3e0 [ 54.295024][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 54.295042][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 54.295057][ C3] call_timer_fn+0x19a/0x610 [ 54.295071][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 54.295086][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 54.295101][ C3] ? mark_held_locks+0x40/0x70 [ 54.295115][ C3] ? __pfx_hsr_announce+0x10/0x10 [ 54.295130][ C3] __run_timers+0x757/0xb00 [ 54.295146][ C3] ? __pfx___run_timers+0x10/0x10 [ 54.295158][ C3] ? try_to_wake_up+0x158/0x1c90 [ 54.295178][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 54.295197][ C3] run_timer_base+0x114/0x190 [ 54.295210][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 54.295225][ C3] run_timer_softirq+0x1a/0x50 [ 54.295238][ C3] handle_softirqs+0x1ea/0x9b0 [ 54.295253][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 54.295268][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 54.295281][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 54.295293][ C3] ? wg_packet_encrypt_worker+0x254/0xbd0 [ 54.295311][ C3] do_softirq+0xac/0xe0 [ 54.295325][ C3] [ 54.295328][ C3] [ 54.295332][ C3] __local_bh_enable_ip+0xf8/0x120 [ 54.295346][ C3] wg_packet_encrypt_worker+0x254/0xbd0 [ 54.295367][ C3] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 54.295385][ C3] ? rcu_is_watching+0x12/0xc0 [ 54.295403][ C3] process_one_work+0xa23/0x1940 [ 54.295421][ C3] ? __pfx_process_one_work+0x10/0x10 [ 54.295437][ C3] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 54.295455][ C3] worker_thread+0x5ef/0xe50 [ 54.295470][ C3] ? __pfx_worker_thread+0x10/0x10 [ 54.295483][ C3] ? kthread+0x13a/0x450 [ 54.295493][ C3] ? __pfx_worker_thread+0x10/0x10 [ 54.295504][ C3] kthread+0x370/0x450 [ 54.295515][ C3] ? __pfx_kthread+0x10/0x10 [ 54.295526][ C3] ret_from_fork+0x72b/0xd50 [ 54.295543][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 54.295559][ C3] ? __switch_to+0x800/0x10f0 [ 54.295571][ C3] ? __pfx_kthread+0x10/0x10 [ 54.295582][ C3] ret_from_fork_asm+0x1a/0x30 [ 54.295604][ C3] [ 54.295621][ C3] hsr0: HSR: Could not send supervision frame [ 54.295923][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 54.295938][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.295945][ C0] Call Trace: [ 54.295960][ C0] [ 54.295966][ C0] dump_stack_lvl+0x100/0x190 [ 54.295983][ C0] should_fail_ex.cold+0x5/0xa [ 54.295997][ C0] should_failslab+0xc2/0x120 [ 54.296011][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.296025][ C0] ? __alloc_skb+0x140/0x710 [ 54.296040][ C0] __alloc_skb+0x140/0x710 [ 54.296051][ C0] ? __alloc_skb+0x5b7/0x710 [ 54.296063][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 54.296076][ C0] ? find_held_lock+0x2b/0x80 [ 54.296095][ C0] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 54.296110][ C0] ndisc_alloc_skb+0xd8/0x530 [ 54.296124][ C0] ndisc_send_rs+0x73/0x680 [ 54.296139][ C0] addrconf_rs_timer+0x424/0x880 [ 54.296153][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 54.296169][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 54.296181][ C0] call_timer_fn+0x19a/0x610 [ 54.296194][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 54.296208][ C0] ? __run_timers+0x747/0xb00 [ 54.296220][ C0] ? rcu_is_watching+0x12/0xc0 [ 54.296238][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 54.296250][ C0] __run_timers+0x757/0xb00 [ 54.296265][ C0] ? __pfx___run_timers+0x10/0x10 [ 54.296278][ C0] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 54.296298][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 54.296317][ C0] run_timer_base+0x114/0x190 [ 54.296330][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 54.296345][ C0] run_timer_softirq+0x1a/0x50 [ 54.296357][ C0] handle_softirqs+0x1ea/0x9b0 [ 54.296373][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 54.296388][ C0] ? run_ksoftirqd+0x5b/0x60 [ 54.296401][ C0] ? rcu_is_watching+0x12/0xc0 [ 54.296417][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 54.296430][ C0] run_ksoftirqd+0x38/0x60 [ 54.296443][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 54.296462][ C0] ? kthread+0x13a/0x450 [ 54.296471][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 54.296487][ C0] kthread+0x370/0x450 [ 54.296496][ C0] ? __pfx_kthread+0x10/0x10 [ 54.296507][ C0] ret_from_fork+0x72b/0xd50 [ 54.296523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 54.296538][ C0] ? __switch_to+0x800/0x10f0 [ 54.296549][ C0] ? __pfx_kthread+0x10/0x10 [ 54.296560][ C0] ret_from_fork_asm+0x1a/0x30 [ 54.296586][ C0] [ 54.296752][ C0] FAULT_INJECTION: forcing a failure. [ 54.296752][ C0] name failslab, interval 1, probability 1, space 0, times 20 [ 54.297376][ C3] FAULT_INJECTION: forcing a failure. [ 54.297376][ C3] name failslab, interval 1, probability 1, space 0, times 20 [ 54.299051][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 54.299066][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.299072][ C0] Call Trace: [ 54.299077][ C0] [ 54.299083][ C0] dump_stack_lvl+0x100/0x190 [ 54.299101][ C0] should_fail_ex.cold+0x5/0xa [ 54.299114][ C0] ? ret_from_fork+0x72b/0xd50 [ 54.299130][ C0] should_failslab+0xc2/0x120 [ 54.299145][ C0] __kmalloc_cache_noprof+0x91/0x6c0 [ 54.299165][ C0] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 54.299180][ C0] dst_cow_metrics_generic+0x4c/0x1e0 [ 54.299193][ C0] icmp6_dst_alloc+0x418/0x4f0 [ 54.299209][ C0] ndisc_send_skb+0x133f/0x1bf0 [ 54.299225][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 54.299240][ C0] ? kmalloc_reserve+0xf9/0x350 [ 54.299260][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 54.299277][ C0] ndisc_send_rs+0x129/0x680 [ 54.299292][ C0] addrconf_rs_timer+0x424/0x880 [ 54.299307][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 54.299322][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 54.299334][ C0] call_timer_fn+0x19a/0x610 [ 54.299349][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 54.299362][ C0] ? __run_timers+0x747/0xb00 [ 54.299375][ C0] ? rcu_is_watching+0x12/0xc0 [ 54.299393][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 54.299405][ C0] __run_timers+0x757/0xb00 [ 54.299420][ C0] ? __pfx___run_timers+0x10/0x10 [ 54.299432][ C0] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 54.299453][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 54.299472][ C0] run_timer_base+0x114/0x190 [ 54.299485][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 54.299499][ C0] run_timer_softirq+0x1a/0x50 [ 54.299511][ C0] handle_softirqs+0x1ea/0x9b0 [ 54.299528][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 54.299542][ C0] ? run_ksoftirqd+0x5b/0x60 [ 54.299555][ C0] ? rcu_is_watching+0x12/0xc0 [ 54.299571][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 54.299589][ C0] run_ksoftirqd+0x38/0x60 [ 54.299602][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 54.299620][ C0] ? kthread+0x13a/0x450 [ 54.299630][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 54.299646][ C0] kthread+0x370/0x450 [ 54.299656][ C0] ? __pfx_kthread+0x10/0x10 [ 54.299667][ C0] ret_from_fork+0x72b/0xd50 [ 54.299683][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 54.299698][ C0] ? __switch_to+0x800/0x10f0 [ 54.299710][ C0] ? __pfx_kthread+0x10/0x10 [ 54.299721][ C0] ret_from_fork_asm+0x1a/0x30 [ 54.299742][ C0] [ 54.303354][ T5788] FAULT_INJECTION: forcing a failure. [ 54.303354][ T5788] name failslab, interval 1, probability 1, space 0, times 17 [ 54.303586][ T30] ahci 0000:00:1f.2: Using 48-bit DMA addresses [ 54.304690][ C3] CPU: 3 UID: 0 PID: 5831 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 54.304722][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.304731][ C3] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 54.304753][ C3] Call Trace: [ 54.304757][ C3] [ 54.304761][ C3] dump_stack_lvl+0x100/0x190 [ 54.304778][ C3] should_fail_ex.cold+0x5/0xa [ 54.304790][ C3] ? do_raw_spin_lock+0x128/0x260 [ 54.304808][ C3] should_failslab+0xc2/0x120 [ 54.304823][ C3] __kmalloc_noprof+0xfc/0x820 [ 54.304835][ C3] ? mark_held_locks+0x40/0x70 [ 54.304848][ C3] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 54.304869][ C3] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 54.304887][ C3] ? kasan_save_stack+0x3f/0x50 [ 54.304903][ C3] ? kasan_save_stack+0x30/0x50 [ 54.304916][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 54.304927][ C3] ? __kmalloc_noprof+0x322/0x820 [ 54.304941][ C3] ? lock_acquire+0x1b9/0x370 [ 54.304954][ C3] ? find_held_lock+0x2b/0x80 [ 54.304983][ C3] ? __kfree_rcu_sheaf+0x195/0x730 [ 54.304997][ C3] ? __kfree_rcu_sheaf+0x195/0x730 [ 54.305010][ C3] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 54.305031][ C3] ? kvfree_call_rcu+0x1be/0x4f0 [ 54.305050][ C3] ? __asan_memcpy+0x3c/0x60 [ 54.305062][ C3] ieee80211_inform_bss+0x159/0x1170 [ 54.305079][ C3] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 54.305098][ C3] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 54.305115][ C3] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 54.305131][ C3] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 54.305149][ C3] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 54.305172][ C3] ? ret_from_fork_asm+0x1a/0x30 [ 54.305189][ C3] ? kfree_skbmem+0x19a/0x210 [ 54.305207][ C3] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 54.305221][ C3] cfg80211_inform_bss_data+0x230/0x3b60 [ 54.305236][ C3] ? kasan_save_stack+0x3f/0x50 [ 54.305249][ C3] ? kasan_save_stack+0x30/0x50 [ 54.305261][ C3] ? kasan_save_track+0x14/0x30 [ 54.305273][ C3] ? kasan_save_free_info+0x3b/0x70 [ 54.305289][ C3] ? __kasan_slab_free+0x5f/0x80 [ 54.305301][ C3] ? kmem_cache_free+0x127/0x6b0 [ 54.305311][ C3] ? kfree_skbmem+0x19a/0x210 [ 54.305326][ C3] ? sk_skb_reason_drop+0x10f/0x1b0 [ 54.305340][ C3] ? __netif_receive_skb_core.constprop.0+0x571/0x3530 [ 54.305353][ C3] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 54.305364][ C3] ? __netif_receive_skb+0x1f/0x120 [ 54.305374][ C3] ? process_backlog+0x37a/0x1580 [ 54.305385][ C3] ? __napi_poll.constprop.0+0xaf/0x450 [ 54.305396][ C3] ? net_rx_action+0xa40/0xf20 [ 54.305407][ C3] ? handle_softirqs+0x1ea/0x9b0 [ 54.305422][ C3] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 54.305435][ C3] ? process_one_work+0xa23/0x1940 [ 54.305447][ C3] ? worker_thread+0x5ef/0xe50 [ 54.305458][ C3] ? kthread+0x370/0x450 [ 54.305468][ C3] ? ret_from_fork+0x72b/0xd50 [ 54.305483][ C3] ? ret_from_fork_asm+0x1a/0x30 [ 54.305511][ C3] ? __lock_acquire+0x49f/0x1a40 [ 54.305524][ C3] ? kfree_skbmem+0x19a/0x210 [ 54.305539][ C3] ? kmem_cache_free+0x127/0x6b0 [ 54.305550][ C3] ? skb_release_data+0x6ca/0x8e0 [ 54.305566][ C3] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 54.305585][ C3] ieee80211_bss_info_update+0x310/0xab0 [ 54.305601][ C3] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 54.305618][ C3] ? napi_consume_skb+0x2cd/0x320 [ 54.305633][ C3] ? skb_defer_free_flush+0x1f1/0x290 [ 54.305649][ C3] ? kthread+0x370/0x450 [ 54.305659][ C3] ? ret_from_fork+0x72b/0xd50 [ 54.305673][ C3] ? ret_from_fork_asm+0x1a/0x30 [ 54.305689][ C3] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 54.305703][ C3] ieee80211_scan_rx+0x4e6/0xb60 [ 54.305719][ C3] ? __lock_acquire+0x49f/0x1a40 [ 54.305733][ C3] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 54.305754][ C3] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 54.305771][ C3] ? do_raw_spin_lock+0x128/0x260 [ 54.305790][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 54.305802][ C3] ? ieee80211_clean_skb+0x1a7/0x740 [ 54.305819][ C3] ieee80211_rx_list+0xf19/0x2160 [ 54.305839][ C3] ? lock_acquire+0x1b9/0x370 [ 54.305852][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 54.305872][ C3] ieee80211_rx_napi+0xdc/0x400 [ 54.305888][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 54.305909][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 54.305921][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.305934][ C3] ieee80211_handle_queued_frames+0xc8/0x120 [ 54.305950][ C3] tasklet_action_common+0x2de/0x3d0 [ 54.305967][ C3] handle_softirqs+0x1ea/0x9b0 [ 54.305982][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 54.305997][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 54.306010][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 54.306023][ C3] ? wg_packet_encrypt_worker+0x254/0xbd0 [ 54.306040][ C3] do_softirq+0xac/0xe0 [ 54.306054][ C3] [ 54.306057][ C3] [ 54.306061][ C3] __local_bh_enable_ip+0xf8/0x120 [ 54.306075][ C3] wg_packet_encrypt_worker+0x254/0xbd0 [ 54.306096][ C3] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 54.306113][ C3] ? rcu_is_watching+0x12/0xc0 [ 54.306132][ C3] process_one_work+0xa23/0x1940 [ 54.306148][ C3] ? __pfx_process_one_work+0x10/0x10 [ 54.306164][ C3] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 54.306182][ C3] worker_thread+0x5ef/0xe50 [ 54.306197][ C3] ? __pfx_worker_thread+0x10/0x10 [ 54.306210][ C3] ? kthread+0x13a/0x450 [ 54.306219][ C3] ? __pfx_worker_thread+0x10/0x10 [ 54.306230][ C3] kthread+0x370/0x450 [ 54.306240][ C3] ? __pfx_kthread+0x10/0x10 [ 54.306252][ C3] ret_from_fork+0x72b/0xd50 [ 54.306267][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 54.306283][ C3] ? __switch_to+0x800/0x10f0 [ 54.306295][ C3] ? __pfx_kthread+0x10/0x10 [ 54.306306][ C3] ret_from_fork_asm+0x1a/0x30 [ 54.306327][ C3] [ 54.307233][ T5738] Bluetooth: hci2: command tx timeout [ 54.308502][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 54.308518][ T5788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.308525][ T5788] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 54.308543][ T5788] Call Trace: [ 54.308548][ T5788] [ 54.308552][ T5788] dump_stack_lvl+0x100/0x190 [ 54.308568][ T5788] should_fail_ex.cold+0x5/0xa [ 54.308582][ T5788] should_failslab+0xc2/0x120 [ 54.308598][ T5788] kmem_cache_alloc_noprof+0x91/0x6a0 [ 54.308611][ T5788] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.308628][ T5788] ? skb_clone+0x190/0x400 [ 54.308645][ T5788] skb_clone+0x190/0x400 [ 54.308659][ T5788] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 54.308678][ T5788] process_one_work+0xa23/0x1940 [ 54.308696][ T5788] ? __pfx_process_one_work+0x10/0x10 [ 54.308736][ T5788] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 54.308753][ T5788] worker_thread+0x5ef/0xe50 [ 54.308770][ T5788] ? kthread+0x13a/0x450 [ 54.308780][ T5788] ? __pfx_worker_thread+0x10/0x10 [ 54.308791][ T5788] kthread+0x370/0x450 [ 54.308802][ T5788] ? __pfx_kthread+0x10/0x10 [ 54.308813][ T5788] ret_from_fork+0x72b/0xd50 [ 54.308830][ T5788] ? __pfx_ret_from_fork+0x10/0x10 [ 54.308847][ T5788] ? __switch_to+0x800/0x10f0 [ 54.308859][ T5788] ? __pfx_kthread+0x10/0x10 [ 54.308870][ T5788] ret_from_fork_asm+0x1a/0x30 [ 54.308893][ T5788] [ 54.309254][ T5909] ,mems_allowed=0-1 [ 54.311521][ T5788] FAULT_INJECTION: forcing a failure. [ 54.311521][ T5788] name failslab, interval 1, probability 1, space 0, times 12 [ 54.313179][ T5909] [ 54.315177][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 54.315192][ T5788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.315199][ T5788] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 54.315218][ T5788] Call Trace: [ 54.315223][ T5788] [ 54.315227][ T5788] dump_stack_lvl+0x100/0x190 [ 54.315243][ T5788] should_fail_ex.cold+0x5/0xa [ 54.315257][ T5788] should_failslab+0xc2/0x120 [ 54.315289][ T5788] kmem_cache_alloc_noprof+0x91/0x6a0 [ 54.315302][ T5788] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.315319][ T5788] ? skb_clone+0x190/0x400 [ 54.315335][ T5788] skb_clone+0x190/0x400 [ 54.315349][ T5788] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 54.315368][ T5788] process_one_work+0xa23/0x1940 [ 54.315387][ T5788] ? __pfx_process_one_work+0x10/0x10 [ 54.315403][ T5788] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 54.315419][ T5788] worker_thread+0x5ef/0xe50 [ 54.315437][ T5788] ? kthread+0x13a/0x450 [ 54.315447][ T5788] ? __pfx_worker_thread+0x10/0x10 [ 54.315458][ T5788] kthread+0x370/0x450 [ 54.315468][ T5788] ? __pfx_kthread+0x10/0x10 [ 54.315479][ T5788] ret_from_fork+0x72b/0xd50 [ 54.315500][ T5788] ? __pfx_ret_from_fork+0x10/0x10 [ 54.315517][ T5788] ? __switch_to+0x800/0x10f0 [ 54.315529][ T5788] ? __pfx_kthread+0x10/0x10 [ 54.315540][ T5788] ret_from_fork_asm+0x1a/0x30 [ 54.315564][ T5788] [ 54.483292][ C0] FAULT_INJECTION: forcing a failure. [ 54.483292][ C0] name failslab, interval 1, probability 1, space 0, times 10 [ 54.483319][ C0] CPU: 0 UID: 0 PID: 5909 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 54.483332][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.483339][ C0] Call Trace: [ 54.483343][ C0] [ 54.483347][ C0] dump_stack_lvl+0x100/0x190 [ 54.483367][ C0] should_fail_ex.cold+0x5/0xa [ 54.483382][ C0] should_failslab+0xc2/0x120 [ 54.483398][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.483412][ C0] ? __alloc_skb+0x140/0x710 [ 54.483427][ C0] __alloc_skb+0x140/0x710 [ 54.483439][ C0] ? __alloc_skb+0x5b7/0x710 [ 54.483452][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 54.483464][ C0] ? lock_acquire+0x1b9/0x370 [ 54.483481][ C0] __netdev_alloc_skb+0x7a/0x960 [ 54.483495][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 54.483511][ C0] ? __lock_acquire+0x49f/0x1a40 [ 54.483526][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 54.483540][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 54.483558][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 54.483576][ C0] __iterate_interfaces+0x2e6/0x650 [ 54.483595][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 54.483610][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 54.483625][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 54.483640][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 54.483658][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 54.483675][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 54.483696][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 54.483714][ C0] handle_softirqs+0x1ea/0x9b0 [ 54.483731][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 54.483745][ C0] ? _raw_spin_unlock+0x28/0x50 [ 54.483762][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 54.483775][ C0] __irq_exit_rcu+0x162/0x210 [ 54.483789][ C0] irq_exit_rcu+0x9/0x30 [ 54.483802][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 54.483814][ C0] [ 54.483818][ C0] [ 54.483822][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.483835][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 54.483853][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 54.483864][ C0] RSP: 0018:ffffc9000470f7c8 EFLAGS: 00000293 [ 54.483874][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 54.483881][ C0] RDX: ffff88802b224a80 RSI: ffffffff81e88a0f RDI: ffff88802b224a80 [ 54.483888][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 54.483894][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000012e1 [ 54.483900][ C0] R13: ffffffff8f9acd98 R14: ffffc9000470f848 R15: dffffc0000000000 [ 54.483910][ C0] ? console_flush_one_record+0xab1/0xe50 [ 54.483926][ C0] ? console_flush_one_record+0xabf/0xe50 [ 54.483944][ C0] ? console_flush_one_record+0xabf/0xe50 [ 54.483963][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 54.483979][ C0] ? __lock_acquire+0x49f/0x1a40 [ 54.483995][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 54.484008][ C0] console_unlock+0x103/0x260 [ 54.484024][ C0] ? __pfx_console_unlock+0x10/0x10 [ 54.484041][ C0] ? lock_acquire+0x100/0x370 [ 54.484054][ C0] ? vprintk_emit+0x516/0x6b0 [ 54.484073][ C0] vprintk_emit+0x407/0x6b0 [ 54.484090][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 54.484107][ C0] ? do_raw_spin_lock+0x128/0x260 [ 54.484124][ C0] _printk+0xcf/0x110 [ 54.484135][ C0] ? __pfx__printk+0x10/0x10 [ 54.484145][ C0] ? __rcu_read_unlock+0x27f/0x5e0 [ 54.484160][ C0] ? rcu_is_watching+0x12/0xc0 [ 54.484176][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.484187][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 54.484199][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.484212][ C0] warn_alloc.cold+0x8f/0xa8 [ 54.484224][ C0] ? __pfx_warn_alloc+0x10/0x10 [ 54.484235][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 54.484248][ C0] ? __get_vm_area_node+0x2cd/0x330 [ 54.484265][ C0] ? __get_vm_area_node+0x208/0x330 [ 54.484281][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.484294][ C0] __vmalloc_node_range_noprof+0xccd/0x1630 [ 54.484314][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.484325][ C0] ? do_vfs_ioctl+0x226/0x13e0 [ 54.484342][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 54.484363][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.484382][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.484401][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 54.484416][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.484428][ C0] vmalloc_user_noprof+0x9e/0xe0 [ 54.484443][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.484455][ C0] kcov_ioctl+0x4d/0x750 [ 54.484467][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 54.484480][ C0] __x64_sys_ioctl+0x18e/0x210 [ 54.484497][ C0] do_syscall_64+0x115/0x870 [ 54.484509][ C0] ? clear_bhb_loop+0x40/0x90 [ 54.484522][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.484533][ C0] RIP: 0033:0x7f7653d9dc2b [ 54.484544][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 54.484554][ C0] RSP: 002b:00007fffd6dca800 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.484563][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7653d9dc2b [ 54.484570][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 54.484577][ C0] RBP: 00007f7654026308 R08: 0000000000000000 R09: 0000000000000000 [ 54.484587][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.484593][ C0] R13: 0000000000000003 R14: 00007fffd6dcaab8 R15: 0000000000000000 [ 54.484606][ C0] [ 54.484636][ C0] FAULT_INJECTION: forcing a failure. [ 54.484636][ C0] name failslab, interval 1, probability 1, space 0, times 9 [ 54.484650][ C0] CPU: 0 UID: 0 PID: 5909 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 54.484662][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.484668][ C0] Call Trace: [ 54.484671][ C0] [ 54.484675][ C0] dump_stack_lvl+0x100/0x190 [ 54.484689][ C0] should_fail_ex.cold+0x5/0xa [ 54.484720][ C0] should_failslab+0xc2/0x120 [ 54.484737][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.484751][ C0] ? __alloc_skb+0x140/0x710 [ 54.484765][ C0] __alloc_skb+0x140/0x710 [ 54.484776][ C0] ? __alloc_skb+0x5b7/0x710 [ 54.484788][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 54.484801][ C0] ? do_raw_spin_lock+0x128/0x260 [ 54.484818][ C0] skb_copy+0x1ca/0x3a0 [ 54.484832][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 54.484850][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 54.484863][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 54.484877][ C0] ? __lock_acquire+0x49f/0x1a40 [ 54.484892][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 54.484908][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 54.484923][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 54.484941][ C0] __iterate_interfaces+0x2e6/0x650 [ 54.484953][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 54.484968][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 54.484983][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 54.484998][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 54.485015][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 54.485033][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 54.485053][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 54.485070][ C0] handle_softirqs+0x1ea/0x9b0 [ 54.485086][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 54.485100][ C0] ? _raw_spin_unlock+0x28/0x50 [ 54.485116][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 54.485128][ C0] __irq_exit_rcu+0x162/0x210 [ 54.485142][ C0] irq_exit_rcu+0x9/0x30 [ 54.485155][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 54.485167][ C0] [ 54.485171][ C0] [ 54.485174][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.485187][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 54.485204][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 54.485214][ C0] RSP: 0018:ffffc9000470f7c8 EFLAGS: 00000293 [ 54.485222][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 54.485229][ C0] RDX: ffff88802b224a80 RSI: ffffffff81e88a0f RDI: ffff88802b224a80 [ 54.485236][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 54.485242][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000012e1 [ 54.485248][ C0] R13: ffffffff8f9acd98 R14: ffffc9000470f848 R15: dffffc0000000000 [ 54.485258][ C0] ? console_flush_one_record+0xab1/0xe50 [ 54.485274][ C0] ? console_flush_one_record+0xabf/0xe50 [ 54.485292][ C0] ? console_flush_one_record+0xabf/0xe50 [ 54.485310][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 54.485326][ C0] ? __lock_acquire+0x49f/0x1a40 [ 54.485342][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 54.485355][ C0] console_unlock+0x103/0x260 [ 54.485371][ C0] ? __pfx_console_unlock+0x10/0x10 [ 54.485388][ C0] ? lock_acquire+0x100/0x370 [ 54.485401][ C0] ? vprintk_emit+0x516/0x6b0 [ 54.485420][ C0] vprintk_emit+0x407/0x6b0 [ 54.485436][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 54.485454][ C0] ? do_raw_spin_lock+0x128/0x260 [ 54.485470][ C0] _printk+0xcf/0x110 [ 54.485481][ C0] ? __pfx__printk+0x10/0x10 [ 54.485490][ C0] ? __rcu_read_unlock+0x27f/0x5e0 [ 54.485504][ C0] ? rcu_is_watching+0x12/0xc0 [ 54.485520][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.485531][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 54.485543][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.485556][ C0] warn_alloc.cold+0x8f/0xa8 [ 54.485567][ C0] ? __pfx_warn_alloc+0x10/0x10 [ 54.485582][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 54.485595][ C0] ? __get_vm_area_node+0x2cd/0x330 [ 54.485612][ C0] ? __get_vm_area_node+0x208/0x330 [ 54.485628][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.485640][ C0] __vmalloc_node_range_noprof+0xccd/0x1630 [ 54.485660][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.485671][ C0] ? do_vfs_ioctl+0x226/0x13e0 [ 54.485687][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 54.485702][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.485720][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.485739][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 54.485753][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.485765][ C0] vmalloc_user_noprof+0x9e/0xe0 [ 54.485780][ C0] ? kcov_ioctl+0x4d/0x750 [ 54.485793][ C0] kcov_ioctl+0x4d/0x750 [ 54.485804][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 54.485817][ C0] __x64_sys_ioctl+0x18e/0x210 [ 54.485834][ C0] do_syscall_64+0x115/0x870 [ 54.485846][ C0] ? clear_bhb_loop+0x40/0x90 [ 54.485858][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.485870][ C0] RIP: 0033:0x7f7653d9dc2b [ 54.485878][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 54.485888][ C0] RSP: 002b:00007fffd6dca800 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.485897][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7653d9dc2b [ 54.485904][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 54.485911][ C0] RBP: 00007f7654026308 R08: 0000000000000000 R09: 0000000000000000 [ 54.485917][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.485923][ C0] R13: 0000000000000003 R14: 00007fffd6dcaab8 R15: 0000000000000000 [ 54.485936][ C0] [ 54.613378][ T5739] FAULT_INJECTION: forcing a failure. [ 54.613378][ T5739] name failslab, interval 1, probability 1, space 0, times 5 [ 54.613615][ T5909] CPU: 2 UID: 0 PID: 5909 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 54.613631][ T5909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.613638][ T5909] Call Trace: [ 54.613643][ T5909] [ 54.613648][ T5909] dump_stack_lvl+0x100/0x190 [ 54.613668][ T5909] warn_alloc.cold+0x94/0xa8 [ 54.613680][ T5909] ? __pfx_warn_alloc+0x10/0x10 [ 54.613693][ T5909] ? lockdep_hardirqs_on+0x78/0x100 [ 54.613708][ T5909] ? __get_vm_area_node+0x2cd/0x330 [ 54.613726][ T5909] ? __get_vm_area_node+0x208/0x330 [ 54.613742][ T5909] ? kcov_ioctl+0x4d/0x750 [ 54.613755][ T5909] __vmalloc_node_range_noprof+0xccd/0x1630 [ 54.613776][ T5909] ? kcov_ioctl+0x4d/0x750 [ 54.613788][ T5909] ? do_vfs_ioctl+0x226/0x13e0 [ 54.613805][ T5909] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 54.613822][ T5909] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.613842][ T5909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.613862][ T5909] ? hook_file_ioctl_common+0x140/0x440 [ 54.613883][ T5909] ? kcov_ioctl+0x4d/0x750 [ 54.613895][ T5909] vmalloc_user_noprof+0x9e/0xe0 [ 54.613911][ T5909] ? kcov_ioctl+0x4d/0x750 [ 54.613924][ T5909] kcov_ioctl+0x4d/0x750 [ 54.613936][ T5909] ? __pfx_kcov_ioctl+0x10/0x10 [ 54.613949][ T5909] __x64_sys_ioctl+0x18e/0x210 [ 54.613968][ T5909] do_syscall_64+0x115/0x870 [ 54.613980][ T5909] ? clear_bhb_loop+0x40/0x90 [ 54.613993][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.614005][ T5909] RIP: 0033:0x7f7653d9dc2b [ 54.614016][ T5909] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 54.614027][ T5909] RSP: 002b:00007fffd6dca800 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.614039][ T5909] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7653d9dc2b [ 54.614046][ T5909] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 54.614053][ T5909] RBP: 00007f7654026308 R08: 0000000000000000 R09: 0000000000000000 [ 54.614059][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.614066][ T5909] R13: 0000000000000003 R14: 00007fffd6dcaab8 R15: 0000000000000000 [ 54.614079][ T5909] [ 54.614083][ T5909] Mem-Info: [ 54.621660][ T142] FAULT_INJECTION: forcing a failure. [ 54.621660][ T142] name failslab, interval 1, probability 1, space 0, times 3 [ 54.622236][ T5909] active_anon:6803 inactive_anon:0 isolated_anon:0 [ 54.622236][ T5909] active_file:0 inactive_file:56058 isolated_file:0 [ 54.622236][ T5909] unevictable:1768 dirty:1809 writeback:0 [ 54.622236][ T5909] slab_reclaimable:11539 slab_unreclaimable:64265 [ 54.622236][ T5909] mapped:22173 shmem:2322 pagetables:889 [ 54.622236][ T5909] sec_pagetables:294 bounce:0 [ 54.622236][ T5909] kernel_misc_reclaimable:0 [ 54.622236][ T5909] free:467048 free_pcp:18129 free_cma:0 [ 54.622335][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 54.622352][ T5739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.622360][ T5739] Call Trace: [ 54.622364][ T5739] [ 54.622368][ T5739] dump_stack_lvl+0x100/0x190 [ 54.622389][ T5739] should_fail_ex.cold+0x5/0xa [ 54.622405][ T5739] should_failslab+0xc2/0x120 [ 54.622422][ T5739] kmem_cache_alloc_noprof+0x91/0x6a0 [ 54.622436][ T5739] ? trace_kmem_cache_alloc+0xdd/0x100 [ 54.622452][ T5739] ? security_file_alloc+0x34/0x2c0 [ 54.622467][ T5739] security_file_alloc+0x34/0x2c0 [ 54.622479][ T5739] init_file+0x95/0x480 [ 54.622494][ T5739] alloc_empty_file+0x79/0x1c0 [ 54.622509][ T5739] path_openat+0xe7/0x4280 [ 54.622521][ T5739] ? __kasan_slab_alloc+0x89/0x90 [ 54.622536][ T5739] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 54.622549][ T5739] ? do_getname+0x35/0x390 [ 54.622564][ T5739] ? do_sys_openat2+0xc7/0x1e0 [ 54.622580][ T5739] ? __x64_sys_openat+0x12d/0x210 [ 54.622594][ T5739] ? do_syscall_64+0x115/0x870 [ 54.622621][ T5739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.622637][ T5739] ? __pfx_path_openat+0x10/0x10 [ 54.622654][ T5739] do_file_open+0x20e/0x430 [ 54.622667][ T5739] ? __pfx_do_file_open+0x10/0x10 [ 54.622689][ T5739] ? alloc_fd+0x471/0x7a0 [ 54.622704][ T5739] ? do_getname+0x191/0x390 [ 54.622720][ T5739] do_sys_openat2+0x10f/0x1e0 [ 54.622735][ T5739] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.622755][ T5739] __x64_sys_openat+0x12d/0x210 [ 54.622771][ T5739] ? __pfx___x64_sys_openat+0x10/0x10 [ 54.622786][ T5739] ? kmem_cache_free+0x127/0x6b0 [ 54.622801][ T5739] do_syscall_64+0x115/0x870 [ 54.622814][ T5739] ? clear_bhb_loop+0x40/0x90 [ 54.622828][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.622840][ T5739] RIP: 0033:0x7fb0eb75e7ce [ 54.622852][ T5739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.622863][ T5739] RSP: 002b:00007ffe89b4d758 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.622875][ T5739] RAX: ffffffffffffffda RBX: 000055556693e500 RCX: 00007fb0eb75e7ce [ 54.622883][ T5739] RDX: 0000000000000002 RSI: 00007ffe89b4d8a0 RDI: ffffffffffffff9c [ 54.622890][ T5739] RBP: 00007ffe89b4d84c R08: 0000000000000000 R09: 0000000000000000 [ 54.622897][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.622903][ T5739] R13: 00005555669519f0 R14: 000000000000c4aa R15: 00007ffe89b4d8a0 [ 54.622917][ T5739] [ 54.623727][ T142] CPU: 3 UID: 0 PID: 142 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 54.623742][ T142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.623749][ T142] Workqueue: events_unbound nsim_dev_trap_report_work [ 54.623767][ T142] Call Trace: [ 54.623771][ T142] [ 54.623775][ T142] dump_stack_lvl+0x100/0x190 [ 54.623779][ T5749] FAULT_INJECTION: forcing a failure. [ 54.623779][ T5749] name failslab, interval 1, probability 1, space 0, times 2 [ 54.623791][ T142] should_fail_ex.cold+0x5/0xa [ 54.623805][ T142] should_failslab+0xc2/0x120 [ 54.623820][ T142] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 54.623835][ T142] ? __alloc_skb+0x140/0x710 [ 54.623850][ T142] __alloc_skb+0x140/0x710 [ 54.623862][ T142] ? __alloc_skb+0x5b7/0x710 [ 54.623875][ T142] ? __pfx___alloc_skb+0x10/0x10 [ 54.623889][ T142] ? kfree_skbmem+0x19f/0x210 [ 54.623908][ T142] nsim_dev_trap_report_work+0x2af/0xd20 [ 54.623930][ T142] process_one_work+0xa23/0x1940 [ 54.623949][ T142] ? __pfx_process_one_work+0x10/0x10 [ 54.623965][ T142] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 54.623980][ T142] worker_thread+0x5ef/0xe50 [ 54.623997][ T142] ? kthread+0x13a/0x450 [ 54.624007][ T142] ? __pfx_worker_thread+0x10/0x10 [ 54.624018][ T142] kthread+0x370/0x450 [ 54.624028][ T142] ? __pfx_kthread+0x10/0x10 [ 54.624040][ T142] ret_from_fork+0x72b/0xd50 [ 54.624057][ T142] ? __pfx_ret_from_fork+0x10/0x10 [ 54.624073][ T142] ? __switch_to+0x800/0x10f0 [ 54.624085][ T142] ? __pfx_kthread+0x10/0x10 [ 54.624096][ T142] ret_from_fork_asm+0x1a/0x30 [ 54.624119][ T142] [ 54.625628][ T5909] Node 0 active_anon:27212kB inactive_anon:0kB active_file:0kB inactive_file:224032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88692kB dirty:7196kB writeback:0kB shmem:5752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12448kB pagetables:3372kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 54.627452][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 54.627467][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.627474][ T5749] Call Trace: [ 54.627478][ T5749] [ 54.627483][ T5749] dump_stack_lvl+0x100/0x190 [ 54.627500][ T5749] should_fail_ex.cold+0x5/0xa [ 54.627514][ T5749] should_failslab+0xc2/0x120 [ 54.627529][ T5749] kmem_cache_alloc_noprof+0x91/0x6a0 [ 54.627543][ T5749] ? do_getname+0x35/0x390 [ 54.627560][ T5749] do_getname+0x35/0x390 [ 54.627575][ T5749] do_sys_openat2+0xc7/0x1e0 [ 54.627594][ T5749] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.627611][ T5749] ? __x64_sys_recvmsg+0x1b9/0x260 [ 54.627627][ T5749] __x64_sys_openat+0x12d/0x210 [ 54.627642][ T5749] ? __pfx___x64_sys_openat+0x10/0x10 [ 54.627662][ T5749] do_syscall_64+0x115/0x870 [ 54.627674][ T5749] ? clear_bhb_loop+0x40/0x90 [ 54.627688][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.627700][ T5749] RIP: 0033:0x7fc4e14a7407 [ 54.627710][ T5749] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 54.627721][ T5749] RSP: 002b:00007ffe59494c60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 54.627732][ T5749] RAX: ffffffffffffffda RBX: 00007fc4e1b61880 RCX: 00007fc4e14a7407 [ 54.627739][ T5749] RDX: 0000000000080000 RSI: 00007ffe59494dd0 RDI: ffffffffffffff9c [ 54.627745][ T5749] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 54.627752][ T5749] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d4b56897f5 [ 54.627758][ T5749] R13: 000055d4b56897f5 R14: 0000000000000001 R15: 000055d4b56a4140 [ 54.627771][ T5749] [ 55.700228][ T5909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.712919][ T5909] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.724515][ T5909] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 55.726808][ T5909] Node 0 DMA32 free:184592kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27256kB inactive_anon:0kB active_file:0kB inactive_file:224032kB unevictable:3516kB writepending:7128kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:86544kB local_pcp:21700kB free_cma:0kB [ 55.739444][ T5909] lowmem_reserve[]: 0 0 0 0 0 [ 55.741381][ T5909] Node 1 Normal free:1646084kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:4364kB local_pcp:0kB free_cma:0kB [ 55.753567][ T5909] lowmem_reserve[]: 0 0 0 0 0 [ 55.755430][ T5909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.760450][ T5909] Node 0 DMA32: 1*4kB (M) 1*8kB (E) 2*16kB (UE) 1*32kB (M) 2*64kB (ME) 2*128kB (UE) 2*256kB (ME) 1*512kB (M) 1*1024kB (U) 2*2048kB (UM) 43*4096kB (UM) = 182732kB [ 55.765770][ T5909] Node 1 Normal: 4*4kB (UM) 5*8kB (U) 11*16kB (UM) 13*32kB (UM) 4*64kB (UM) 7*128kB (UM) 1*256kB (U) 5*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 399*4096kB (M) = 1646088kB [ 55.772582][ T5909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.776250][ T5909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.779599][ T5909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.783263][ T5909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.784766][ T5816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.786457][ T5909] 59381 total pagecache pages [ 55.786465][ T5909] 0 pages in swap cache [ 55.786469][ T5909] Free swap = 124996kB [ 55.786474][ T5909] Total swap = 124996kB [ 55.786479][ T5909] 1048443 pages RAM [ 55.786483][ T5909] 0 pages HighMem/MovableOnly [ 55.786487][ T5909] 285322 pages reserved [ 55.786491][ T5909] 0 pages cma reserved [ 55.886194][ T41] kauditd_printk_skb: 45 callbacks suppressed [ 55.886206][ T41] audit: type=1400 audit(1785406907.617:213): avc: denied { read write } for pid=5917 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.897135][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.899399][ T41] audit: type=1400 audit(1785406907.627:214): avc: denied { open } for pid=5917 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.900425][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.909229][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.912022][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.914116][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.917291][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.920813][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.921431][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.925043][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.929753][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.969538][ T5816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.073298][ T41] audit: type=1400 audit(1785406907.807:215): avc: denied { write } for pid=5934 comm="syz.2.19" name="001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.096802][ T41] audit: type=1400 audit(1785406907.827:216): avc: denied { sys_module } for pid=5917 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.123945][ T41] audit: type=1400 audit(1785406907.857:217): avc: denied { mounton } for pid=5940 comm="syz.2.20" path="/4/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 56.131839][ T41] audit: type=1400 audit(1785406907.857:218): avc: denied { mount } for pid=5940 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 56.138739][ T41] audit: type=1400 audit(1785406907.857:219): avc: denied { search } for pid=5940 comm="syz.2.20" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 56.139633][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.145214][ T41] audit: type=1400 audit(1785406907.857:220): avc: denied { write } for pid=5940 comm="syz.2.20" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 56.145243][ T41] audit: type=1400 audit(1785406907.857:221): avc: denied { open } for pid=5940 comm="syz.2.20" path="/4/proc/fs/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 56.163313][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.166583][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.169873][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.173085][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.361207][ T5098] Bluetooth: hci2: command tx timeout [ 56.479019][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.481427][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.483663][ T5917] bridge_slave_0: entered allmulticast mode [ 56.486783][ T5917] bridge_slave_0: entered promiscuous mode [ 56.493465][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.496236][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.499189][ T5917] bridge_slave_1: entered allmulticast mode [ 56.504282][ T5917] bridge_slave_1: entered promiscuous mode [ 56.507551][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.510088][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.512476][ T5918] bridge_slave_0: entered allmulticast mode [ 56.515145][ T5918] bridge_slave_0: entered promiscuous mode [ 56.518370][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.521068][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.523428][ T5918] bridge_slave_1: entered allmulticast mode [ 56.526096][ T5918] bridge_slave_1: entered promiscuous mode [ 56.567498][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.573096][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.582067][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.587183][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.634793][ T5918] team0: Port device team_slave_0 added [ 56.649264][ T5917] team0: Port device team_slave_0 added [ 56.652595][ T5918] team0: Port device team_slave_1 added [ 56.664601][ T5917] team0: Port device team_slave_1 added [ 56.688038][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.690969][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.701199][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.718185][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.721326][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.731262][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.743615][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.746375][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.756822][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.770672][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.772944][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.781096][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.819624][ T5918] hsr_slave_0: entered promiscuous mode [ 56.822420][ T5918] hsr_slave_1: entered promiscuous mode [ 56.825087][ T5918] debugfs: 'hsr0' already exists in 'hsr' [ 56.827362][ T5918] Cannot create hsr debugfs directory [ 56.844501][ T5917] hsr_slave_0: entered promiscuous mode [ 56.846839][ T5917] hsr_slave_1: entered promiscuous mode [ 56.850492][ T5917] debugfs: 'hsr0' already exists in 'hsr' [ 56.852861][ T5917] Cannot create hsr debugfs directory [ 56.957403][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.959798][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.962076][ T5942] bridge_slave_0: entered allmulticast mode [ 56.964807][ T5942] bridge_slave_0: entered promiscuous mode [ 56.969008][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.971286][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.973568][ T5942] bridge_slave_1: entered allmulticast mode [ 56.976549][ T5942] bridge_slave_1: entered promiscuous mode [ 57.027442][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.032206][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.081877][ T5942] team0: Port device team_slave_0 added [ 57.085379][ T5942] team0: Port device team_slave_1 added [ 57.113381][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.115593][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.123828][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.128901][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.131529][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.140138][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.169229][ T5942] hsr_slave_0: entered promiscuous mode [ 57.172448][ T5942] hsr_slave_1: entered promiscuous mode [ 57.175596][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 57.178005][ T5942] Cannot create hsr debugfs directory [ 57.639969][ T5816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.698569][ T5816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.812206][ T5816] bridge_slave_1: left allmulticast mode [ 57.814328][ T5816] bridge_slave_1: left promiscuous mode [ 57.817062][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.823503][ T5816] bridge_slave_0: left allmulticast mode [ 57.825371][ T5816] bridge_slave_0: left promiscuous mode [ 57.827171][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.916785][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.923836][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.928883][ T5816] bond0 (unregistering): Released all slaves [ 57.959224][ T5745] Bluetooth: hci1: command tx timeout [ 57.961776][ T5098] Bluetooth: hci0: command tx timeout [ 58.032224][ T41] audit: type=1400 audit(1785406909.767:222): avc: denied { write } for pid=5978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.132324][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.208624][ T5098] Bluetooth: hci3: command tx timeout [ 58.355337][ T5816] hsr_slave_0: left promiscuous mode [ 58.358113][ T5816] hsr_slave_1: left promiscuous mode [ 58.365781][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.368729][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.372954][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.375508][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.382410][ T5816] veth1_macvtap: left promiscuous mode [ 58.384420][ T5816] veth0_macvtap: left promiscuous mode [ 58.386196][ T5816] veth1_vlan: left promiscuous mode [ 58.387826][ T5816] veth0_vlan: left promiscuous mode [ 58.527473][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 58.542474][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 58.770407][ T5918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.779271][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.782702][ T5918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.789899][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.793209][ T5918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.806226][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.812481][ T5918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.817177][ T5918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.873904][ T5917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.878041][ T5917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.881244][ T5917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.885061][ T5917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.888184][ T5917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.894933][ T5917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.899064][ T5917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.904243][ T5917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.919296][ T5942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.979520][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.995144][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.000607][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.002830][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.012495][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.014948][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.036655][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.049421][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.056610][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.058846][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.066600][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.068791][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.092450][ T5942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.224560][ T5942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.269780][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.290474][ T5918] veth0_vlan: entered promiscuous mode [ 59.297569][ T5918] veth1_vlan: entered promiscuous mode [ 59.313440][ T5942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.325888][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.334406][ T5918] veth0_macvtap: entered promiscuous mode [ 59.338379][ T5918] veth1_macvtap: entered promiscuous mode [ 59.346524][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.353496][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.359896][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.365554][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.371700][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.376374][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.435436][ T5816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.464498][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.468880][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.512563][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.515233][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.515232][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.526200][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.528954][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.532508][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.538316][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.543129][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.545941][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.550204][ T5942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.554105][ T5917] veth0_vlan: entered promiscuous mode [ 59.569927][ T5816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.590890][ T5917] veth1_vlan: entered promiscuous mode [ 59.595009][ T6050] udc dummy_udc.0: failed to start g1: -19 [ 59.599169][ T6050] UDC core: g1: couldn't find an available UDC or it's busy [ 59.623708][ T5917] veth0_macvtap: entered promiscuous mode [ 59.651921][ T5816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.664447][ T5917] veth1_macvtap: entered promiscuous mode [ 59.684331][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.695411][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.707007][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711269][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.715108][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.724434][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.761587][ T5816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.771280][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.792538][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.804243][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.806424][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.812899][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.815015][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.832980][ T6067] bdc PNP0103:00: error -ENXIO: IRQ index 0 not found [ 59.862530][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.866012][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.926493][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.939164][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.941377][ T6072] gsmld_receive_buf: 00000000: f9 . [ 59.946516][ T6072] gsmld_receive_buf: 00000000: 03 . [ 59.950128][ T6072] gsmld_receive_buf: 00000000: 3f ? [ 59.953843][ T6072] gsmld_receive_buf: 00000000: 01 . [ 59.957304][ T6072] gsmld_receive_buf: 00000000: 1c . [ 59.962437][ T6072] gsmld_receive_buf: 00000000: f9 . [ 60.042099][ T5098] Bluetooth: hci1: command tx timeout [ 60.093038][ T5816] bridge_slave_1: left allmulticast mode [ 60.094825][ T5816] bridge_slave_1: left promiscuous mode [ 60.110022][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.133795][ T5816] bridge_slave_0: left allmulticast mode [ 60.139775][ T5816] bridge_slave_0: left promiscuous mode [ 60.141642][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.154450][ T5816] bridge_slave_1: left allmulticast mode [ 60.156144][ T5816] bridge_slave_1: left promiscuous mode [ 60.160294][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.164957][ T5816] bridge_slave_0: left allmulticast mode [ 60.166669][ T5816] bridge_slave_0: left promiscuous mode [ 60.168406][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.187844][ T5917] svc: failed to register nfsdv3 RPC service (errno 111). [ 60.195184][ T5917] svc: failed to register nfsaclv3 RPC service (errno 111). [ 60.207051][ T5917] failed to unregister tcp with rpcbind [ 60.210625][ T5917] svc: failed to register nfsdv3 RPC service (errno 97). [ 60.213094][ T5917] svc: failed to register nfsaclv3 RPC service (errno 97). [ 60.215932][ T5917] failed to unregister tcp with rpcbind [ 60.288707][ T5098] Bluetooth: hci3: command tx timeout [ 60.331246][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.337061][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.342628][ T5816] bond0 (unregistering): Released all slaves [ 60.415348][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.420876][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.427012][ T5816] bond0 (unregistering): Released all slaves [ 60.438044][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.520515][ T5817] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 60.633471][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.689883][ T5817] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 60.697660][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.701095][ T5817] usb 9-1: Product: syz [ 60.702637][ T5817] usb 9-1: Manufacturer: syz [ 60.704147][ T5817] usb 9-1: SerialNumber: syz [ 60.724345][ T5817] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 60.727205][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.742878][ T5817] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 60.749042][ T5817] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 60.800035][ T5942] veth0_vlan: entered promiscuous mode [ 60.828887][ T5942] veth1_vlan: entered promiscuous mode [ 60.839304][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.855062][ T5942] veth0_macvtap: entered promiscuous mode [ 60.863905][ T5942] veth1_macvtap: entered promiscuous mode [ 60.873612][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.887612][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.907660][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.928188][ T41] kauditd_printk_skb: 73 callbacks suppressed [ 60.928200][ T41] audit: type=1400 audit(1785406912.657:296): avc: denied { write } for pid=6113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.943883][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.947665][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.957335][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.996004][ T41] audit: type=1400 audit(1785406912.727:297): avc: denied { write } for pid=6121 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.026113][ T5816] hsr_slave_0: left promiscuous mode [ 61.030895][ T5816] hsr_slave_1: left promiscuous mode [ 61.033111][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.035395][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.040487][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.043172][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.051332][ T5816] hsr_slave_0: left promiscuous mode [ 61.056229][ T5816] hsr_slave_1: left promiscuous mode [ 61.058181][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.060308][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.062877][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.064961][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.074882][ T5816] veth1_macvtap: left promiscuous mode [ 61.076639][ T5816] veth0_macvtap: left promiscuous mode [ 61.079117][ T5816] veth1_vlan: left promiscuous mode [ 61.080945][ T5816] veth0_vlan: left promiscuous mode [ 61.084580][ T5816] veth1_macvtap: left promiscuous mode [ 61.086173][ T5816] veth0_macvtap: left promiscuous mode [ 61.087921][ T5816] veth1_vlan: left promiscuous mode [ 61.090400][ T5816] veth0_vlan: left promiscuous mode [ 61.263977][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 61.276871][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 61.492589][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 61.499766][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 61.573928][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 61.583426][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.588386][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.629150][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.632375][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.039133][ T6123] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 62.052113][ T847] usb 9-1: USB disconnect, device number 2 [ 62.064753][ T847] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 62.072747][ T847] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 62.082044][ T847] ti_usb_3410_5052 9-1:2.0: device disconnected [ 62.119472][ T5098] Bluetooth: hci1: command tx timeout [ 62.208616][ T6122] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.233544][ T6134] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 62.239295][ T6134] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 62.241983][ T6134] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 62.244945][ T6134] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 62.247668][ T6134] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 62.250913][ T6134] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 62.270074][ T6134] pci 0000:00:01.0: Adding to iommu group 1 [ 62.277715][ T6134] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 62.280451][ T6134] pci 0000:00:01.0: vgaarb: bridge control possible [ 62.283037][ T6134] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io,locks=none [ 62.297002][ T6134] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 62.301638][ T6134] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 62.305842][ T6134] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 62.311200][ T6134] virtio-pci 0000:00:01.0: enabling device (0101 -> 0103) [ 62.358642][ T5098] Bluetooth: hci3: command tx timeout [ 62.371417][ T6122] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 62.374221][ T6122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.377010][ T6122] usb 6-1: Product: syz [ 62.378638][ T6122] usb 6-1: Manufacturer: syz [ 62.381640][ T6122] usb 6-1: SerialNumber: syz [ 62.387394][ T6134] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 62.390358][ T6134] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 62.393096][ T6122] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 002 [ 62.394230][ T6134] [drm] features: -virgl +edid -resource_blob -host_visible [ 62.396160][ T6134] [drm] features: -context_init -blob_alignment [ 62.414708][ T6134] [drm] number of scanouts: 1 [ 62.416595][ T6134] [drm] number of cap sets: 0 [ 62.446458][ T6134] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 62.485338][ T6134] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 62.570754][ T6141] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.576330][ T41] audit: type=1400 audit(1785406914.307:298): avc: denied { unmount } for pid=5917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.608189][ T41] audit: type=1400 audit(1785406914.337:299): avc: denied { name_bind } for pid=6142 comm="syz.4.33" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.614957][ T41] audit: type=1400 audit(1785406914.337:300): avc: denied { node_bind } for pid=6142 comm="syz.4.33" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 62.678054][ T41] audit: type=1400 audit(1785406914.407:301): avc: denied { write } for pid=6144 comm="syz.4.35" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.690965][ T6122] (null): failure reading functionality [ 62.702833][ T6122] i2c i2c-2: failure reading functionality [ 62.711740][ T6122] i2c i2c-2: connected i2c-tiny-usb device [ 62.908810][ T1483] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.060208][ T1483] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 63.064017][ T1483] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.068825][ T6122] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 63.079744][ T1483] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 002 [ 63.251247][ T6122] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.255587][ T6122] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.259747][ T6122] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.263568][ T6122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.273563][ T6156] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 63.292879][ T6122] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.494427][ T6065] usb 9-1: USB disconnect, device number 3 [ 63.854493][ T1483] i2c i2c-3: connected i2c-tiny-usb device [ 63.951491][ T6161] i2c i2c-2: failure reading status [ 63.953812][ T1483] usb 6-1: USB disconnect, device number 2 [ 63.953870][ T6161] retu-mfd 2-0002: could not read Tahvo revision: -5 [ 63.961950][ T6161] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 63.965733][ T6161] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 63.969185][ T6161] CPU: 0 UID: 0 PID: 6161 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT(full) [ 63.972591][ T6161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.975722][ T6161] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 63.977750][ T6161] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 63.984727][ T6161] RSP: 0018:ffffc900036af530 EFLAGS: 00010286 [ 63.986941][ T6161] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 63.989835][ T6161] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 63.992448][ T6161] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 63.994635][ T6161] R10: ffff8880203e6c7b R11: 0000000000000000 R12: ffffffff81e53a84 [ 63.996920][ T6161] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 63.999331][ T6161] FS: 00007fd09ae5a6c0(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 64.002122][ T6161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.004205][ T6161] CR2: 00007fd09ae39d58 CR3: 00000000562e2000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.006643][ T6161] Call Trace: [ 64.007772][ T6161] [ 64.008638][ T6161] __kasan_check_byte+0x13/0x50 [ 64.010288][ T6161] lock_acquire+0x132/0x370 [ 64.012014][ T6161] ? __pfx___might_resched+0x10/0x10 [ 64.013693][ T6161] down_write_nested+0x94/0x200 [ 64.015424][ T6161] ? __simple_recursive_removal+0x7f/0x5c0 [ 64.017547][ T6161] ? __pfx_down_write_nested+0x10/0x10 [ 64.019187][ T6161] ? __simple_recursive_removal+0x3d/0x5c0 [ 64.021008][ T6161] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.022657][ T6161] __simple_recursive_removal+0x7f/0x5c0 [ 64.024332][ T6161] ? __pfx_remove_one+0x10/0x10 [ 64.025853][ T6161] ? mntput+0x70/0xa0 [ 64.027116][ T6161] debugfs_remove+0x5d/0x80 [ 64.028606][ T6161] i2c_device_probe+0x6e2/0xd10 [ 64.030197][ T6161] ? kernfs_put+0x3f/0x60 [ 64.031571][ T6161] ? __pfx_i2c_device_probe+0x10/0x10 [ 64.033190][ T6161] ? sysfs_create_link+0x68/0xc0 [ 64.034756][ T6161] ? __pfx_i2c_device_probe+0x10/0x10 [ 64.036442][ T6161] really_probe+0x241/0xa60 [ 64.037910][ T6161] __driver_probe_device+0x20e/0x450 [ 64.039864][ T6161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.042077][ T6161] driver_probe_device+0x4a/0x140 [ 64.043934][ T6161] __device_attach_driver+0x1df/0x320 [ 64.045814][ T6161] ? __pfx___device_attach_driver+0x10/0x10 [ 64.047729][ T6161] bus_for_each_drv+0x159/0x1e0 [ 64.049290][ T6161] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.051298][ T6161] ? lockdep_hardirqs_on+0x78/0x100 [ 64.053124][ T6161] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.054919][ T6161] __device_attach+0x1e4/0x4d0 [ 64.056410][ T6161] ? __pfx___device_attach+0x10/0x10 [ 64.058006][ T6161] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.059651][ T6161] device_initial_probe+0xaf/0xd0 [ 64.061258][ T6161] bus_probe_device+0x64/0x160 [ 64.063023][ T6161] device_add+0x121d/0x1970 [ 64.064859][ T6161] ? __pfx_device_add+0x10/0x10 [ 64.066888][ T6161] ? lockdep_init_map_type+0x5c/0x250 [ 64.068729][ T6161] ? __init_waitqueue_head+0xca/0x150 [ 64.070577][ T6161] i2c_new_client_device+0x660/0xd30 [ 64.072380][ T6161] new_device_store+0x20f/0x420 [ 64.074014][ T6161] ? __lock_acquire+0x49f/0x1a40 [ 64.075575][ T6161] ? __pfx_new_device_store+0x10/0x10 [ 64.077276][ T6161] ? find_held_lock+0x2b/0x80 [ 64.078790][ T6161] ? sysfs_file_kobj+0xe4/0x290 [ 64.080327][ T6161] ? sysfs_file_kobj+0xe4/0x290 [ 64.081910][ T6161] ? __pfx_new_device_store+0x10/0x10 [ 64.084031][ T6161] dev_attr_store+0x58/0x80 [ 64.085492][ T6161] ? __pfx_dev_attr_store+0x10/0x10 [ 64.087132][ T6161] sysfs_kf_write+0xf2/0x150 [ 64.088710][ T6161] kernfs_fop_write_iter+0x3e0/0x5f0 [ 64.090306][ T6161] ? __pfx_sysfs_kf_write+0x10/0x10 [ 64.091949][ T6161] vfs_write+0x6ac/0x1050 [ 64.093593][ T6161] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 64.095741][ T6161] ? __pfx_vfs_write+0x10/0x10 [ 64.097508][ T6161] ksys_write+0x12a/0x250 [ 64.099097][ T6161] ? __pfx_ksys_write+0x10/0x10 [ 64.100685][ T6161] ? kcov_ioctl+0x17a/0x750 [ 64.102166][ T6161] do_syscall_64+0x115/0x870 [ 64.103689][ T6161] ? clear_bhb_loop+0x40/0x90 [ 64.105366][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.107353][ T6161] RIP: 0033:0x7fd099f9df99 [ 64.108736][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.114631][ T6161] RSP: 002b:00007fd09ae5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.117142][ T6161] RAX: ffffffffffffffda RBX: 00007fd09a226090 RCX: 00007fd099f9df99 [ 64.119534][ T6161] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000004 [ 64.121952][ T6161] RBP: 00007fd09a034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 64.124370][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.127008][ T6161] R13: 00007fd09a226128 R14: 00007fd09a226090 R15: 00007ffd8dfb4418 [ 64.130059][ T6161] [ 64.131253][ T6161] Modules linked in: [ 64.133290][ T6161] ---[ end trace 0000000000000000 ]--- [ 64.135527][ T6161] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 64.137516][ T6161] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 64.143937][ T6161] RSP: 0018:ffffc900036af530 EFLAGS: 00010286 [ 64.145884][ T6161] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.148452][ T6161] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 64.151043][ T6161] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 64.153723][ T6161] R10: ffff8880203e6c7b R11: 0000000000000000 R12: ffffffff81e53a84 [ 64.156717][ T6161] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 64.159856][ T6161] FS: 00007fd09ae5a6c0(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 64.162774][ T6161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.164867][ T6161] CR2: 00007fd09ae39d58 CR3: 00000000562e2000 CR4: 0000000000352ef0 [ 64.167430][ T6161] Kernel panic - not syncing: Fatal exception [ 64.169915][ T6161] Kernel Offset: disabled [ 64.171265][ T6161] Rebooting in 86400 seconds..