last executing test programs: 26.865503846s ago: executing program 1 (id=250): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r0, 0x40000) r1 = eventfd2(0x2, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 26.811223245s ago: executing program 1 (id=251): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 26.810939023s ago: executing program 1 (id=252): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000102030109022000010100c000090400000200000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000300), 0xd, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0xe, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000500), 0x15, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000600), 0x16, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000700), 0x17, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) 25.274582905s ago: executing program 0 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='ra', 0x2) 25.215460556s ago: executing program 0 (id=269): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="01010101", 0x4) read(r0, &(0x7f00000001c0)=""/4, 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) 25.215245484s ago: executing program 0 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 25.135290884s ago: executing program 0 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 24.394947724s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='ra', 0x2) 24.39443653s ago: executing program 1 (id=280): r0 = syz_ublk_setup_io_uring(0x3297, &(0x7f0000000280)={0x0, 0xe2be, 0x1000, 0x3, 0x3a7}, &(0x7f0000000340), 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000400), 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d}, 0x94) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x12, 0x0, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x20) 24.323944427s ago: executing program 0 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0x200000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x1, 0x4, 0x100000, 0x100000, &(0x7f0000100000)=nil, 0x100000, r2}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x200000}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x100000, 0x200000}) 24.323602465s ago: executing program 1 (id=284): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 18.375576703s ago: executing program 1 (id=285): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100"/20], 0x14}}, 0x0) 18.359722789s ago: executing program 32 (id=285): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100"/20], 0x14}}, 0x0) 13.644935946s ago: executing program 3 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 12.432536301s ago: executing program 4 (id=297): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='1', 0x1) 12.375505076s ago: executing program 4 (id=298): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) nanosleep(&(0x7f00000000c0)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_RESET={{0x1}}}}, 0x7) nanosleep(&(0x7f0000000140)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1}, {0x0, '\x00\x00\x00\x00@\x00'}}}}, 0xf) nanosleep(&(0x7f00000001c0)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_read_bd_addr={{0x1}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x1}}}}, 0x47) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, '@\x00'}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x1}}}}, 0xa) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0x1, 0xc01}}}}, 0x7) 12.255464235s ago: executing program 3 (id=301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 12.255325605s ago: executing program 3 (id=302): mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='tracefs\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000400)='./mnt/events/netlink/netlink_extack/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) 12.204581247s ago: executing program 3 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000004400)='./file0\x00', 0x4c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000004480)='./file0\x00', &(0x7f00000044c0), 0x0, &(0x7f0000004500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x40000}}) chdir(&(0x7f0000004580)='./file0/../file0/file0\x00') mount$9p_unix(&(0x7f00000045c0)='./file0/file0/..\x00', &(0x7f0000004600)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000004640)='./file0\x00', 0x1) 12.074552119s ago: executing program 4 (id=304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x6006}, @val={0x1, 0x4, 0x47, 0x2, 0x80, 0x6}, @mpls={[], @llc={@llc={0xaa, 0xff, '>', "20c3e9fd647f7f1d3b641d81c0971d3bd60f9594c9dde7a340c51ad97f1f4a1cf3fba7ebd6a8318eee27e72f4f4c15af53597d55edb758306ec88f6e37161bac8cea0a12cb8304bc874428e23fbc71380dcded9bf0dc780357426c5dade2cb2a36a83f0dcce7c46b23eea07c3cc068d5e381e4eb77945fa160159743b63d66139c0a5fc728"}}}}, 0x96) 11.985198936s ago: executing program 4 (id=305): r0 = syz_ublk_setup_io_uring(0x3297, &(0x7f0000000280)={0x0, 0xe2be, 0x1000, 0x3, 0x3a7}, &(0x7f0000000340), 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000400), 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='10', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d}, 0x94) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x12, 0x0, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x20) 11.951211653s ago: executing program 3 (id=306): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xae64, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10003, 0x0, 0xfd, 0x0, 0xfd, 0x0, 0x21, 0x5, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) close_range(r0, 0xffffffffffffffff, 0x0) 11.951090437s ago: executing program 4 (id=307): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) shutdown(r0, 0x1) syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) 8.82079441s ago: executing program 33 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0x200000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x1, 0x4, 0x100000, 0x100000, &(0x7f0000100000)=nil, 0x100000, r2}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x200000}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x100000, 0x200000}) 7.565299276s ago: executing program 3 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 7.518881637s ago: executing program 34 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 7.475370541s ago: executing program 2 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 7.353179115s ago: executing program 4 (id=318): mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='tracefs\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000400)='./mnt/events/netlink/netlink_extack/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000700)='traceon', 0x7) 7.291700045s ago: executing program 35 (id=318): mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='tracefs\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000400)='./mnt/events/netlink/netlink_extack/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000700)='traceon', 0x7) 6.822589405s ago: executing program 2 (id=320): setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 6.745536436s ago: executing program 2 (id=321): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="01010101", 0x4) read(r0, &(0x7f00000001c0)=""/4, 0x4) close(r0) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) 6.745114572s ago: executing program 2 (id=322): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) write(0xffffffffffffffff, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r1, &(0x7f0000001600)='1', 0x1) 6.694651986s ago: executing program 2 (id=323): syz_usb_connect$cdc_ecm(0x3, 0x52, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4e}, "9d48a32534ebc2674536daaf02d39dbf2754762ab4d7e0c3497f544734eba2b090147bc8784a9b795968501f1d9c8e2468ddb57594b9bd6c022d5a9facc2c11c5acf81849924852cf4d613e0b6e0"}, 0x52) 4.645231632s ago: executing program 5 (id=325): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 4.644900888s ago: executing program 5 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 4.072784434s ago: executing program 2 (id=327): setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.9954568s ago: executing program 6 (id=328): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="01010101", 0x4) read(r0, &(0x7f00000001c0)=""/4, 0x4) close(r0) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) 3.99528625s ago: executing program 6 (id=329): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) nanosleep(&(0x7f00000000c0)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_RESET={{0x1}}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1}, {0x0, '\x00\x00\x00\x00@\x00'}}}}, 0xf) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x1}, {0x0, 0x6, 0x0, 0x6}}}}, 0xf) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_read_bd_addr={{0x1}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x1}}}}, 0x47) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, '@\x00'}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x1}}}}, 0xa) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0x1, 0xc01}}}}, 0x7) 3.865628308s ago: executing program 5 (id=330): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r0, &(0x7f0000001600)='1', 0x1) 3.86531981s ago: executing program 5 (id=331): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) r2 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='21064', 0x5) 3.785462166s ago: executing program 6 (id=332): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 3.485540251s ago: executing program 6 (id=333): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) 3.485288623s ago: executing program 5 (id=334): r0 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='traceon', 0x7) 93.627982ms ago: executing program 6 (id=335): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='1', 0x1) 9.196296ms ago: executing program 5 (id=336): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 6 (id=337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="01010101", 0x4) read(r0, &(0x7f00000001c0)=""/4, 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./myconfig/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0x0104', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000', 0x41) close(r4) symlinkat(&(0x7f0000000640)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='usbip-vudc.0', 0xc) nanosleep(&(0x7f0000000740)={0x0, 0xbebc200}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000780), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000800)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000940)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000a80)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) kernel console output (not intermixed with test programs): 0 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.780566][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.780575][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.780582][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.780589][ T5150] RBP: 0000000000000000 R08: 00000000060022a8 R09: 0000000000000001 [ 100.780596][ T5150] R10: 0000000000004a64 R11: 0000000000000202 R12: 0000000000000000 [ 100.780602][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.780616][ T5150] [ 100.780716][ T5150] FAULT_INJECTION: forcing a failure. [ 100.780716][ T5150] name failslab, interval 1, probability 10, space 0, times 88 [ 100.780729][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.780740][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.780746][ T5150] Call Trace: [ 100.780750][ T5150] [ 100.780754][ T5150] dump_stack_lvl+0x100/0x190 [ 100.780766][ T5150] should_fail_ex.cold+0x5/0xa [ 100.780778][ T5150] should_failslab+0xc2/0x120 [ 100.780792][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.780806][ T5150] ? do_getname+0x35/0x390 [ 100.780821][ T5150] do_getname+0x35/0x390 [ 100.780835][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.780847][ T5150] do_syscall_64+0x115/0x840 [ 100.780859][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.780872][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.780883][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.780891][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.780901][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.780911][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.780917][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.780924][ T5150] RBP: 0000000000000000 R08: 0000000006002467 R09: 0000000000000001 [ 100.780930][ T5150] R10: 0000000000004a64 R11: 0000000000000202 R12: 0000000000000000 [ 100.780937][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.780950][ T5150] [ 100.781046][ T5150] FAULT_INJECTION: forcing a failure. [ 100.781046][ T5150] name failslab, interval 1, probability 10, space 0, times 87 [ 100.781059][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.781071][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.781077][ T5150] Call Trace: [ 100.781080][ T5150] [ 100.781084][ T5150] dump_stack_lvl+0x100/0x190 [ 100.781097][ T5150] should_fail_ex.cold+0x5/0xa [ 100.781108][ T5150] should_failslab+0xc2/0x120 [ 100.781123][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.781138][ T5150] ? __d_alloc+0x35/0xa50 [ 100.781151][ T5150] __d_alloc+0x35/0xa50 [ 100.781164][ T5150] d_alloc+0x4a/0x1e0 [ 100.781177][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.781190][ T5150] ? mnt_want_write+0x161/0x410 [ 100.781207][ T5150] filename_unlinkat+0x275/0x730 [ 100.781219][ T5150] ? __might_fault+0xc5/0x140 [ 100.781231][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.781248][ T5150] ? do_getname+0x191/0x390 [ 100.781263][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.781275][ T5150] do_syscall_64+0x115/0x840 [ 100.781287][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.781300][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.781311][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.781320][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.781330][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.781339][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.781346][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.781353][ T5150] RBP: 0000000000000000 R08: 00000000060025aa R09: 0000000000000001 [ 100.781359][ T5150] R10: 0000000000004a64 R11: 0000000000000202 R12: 0000000000000000 [ 100.781366][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.781379][ T5150] [ 100.781455][ T5150] FAULT_INJECTION: forcing a failure. [ 100.781455][ T5150] name failslab, interval 1, probability 10, space 0, times 86 [ 100.781469][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.781480][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.781486][ T5150] Call Trace: [ 100.781490][ T5150] [ 100.781494][ T5150] dump_stack_lvl+0x100/0x190 [ 100.781506][ T5150] should_fail_ex.cold+0x5/0xa [ 100.781518][ T5150] should_failslab+0xc2/0x120 [ 100.781537][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.781551][ T5150] ? __d_alloc+0x35/0xa50 [ 100.781565][ T5150] __d_alloc+0x35/0xa50 [ 100.781578][ T5150] d_alloc+0x4a/0x1e0 [ 100.781590][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.781604][ T5150] ? mnt_want_write+0x161/0x410 [ 100.781620][ T5150] filename_unlinkat+0x275/0x730 [ 100.781646][ T5150] ? __might_fault+0xc5/0x140 [ 100.781658][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.781676][ T5150] ? do_getname+0x191/0x390 [ 100.781691][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.781703][ T5150] do_syscall_64+0x115/0x840 [ 100.781715][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.781728][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.781739][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.781748][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.781758][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.781768][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.781775][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.781781][ T5150] RBP: 0000000000000000 R08: 0000000006002743 R09: 0000000000000001 [ 100.781787][ T5150] R10: 0000000000004a64 R11: 0000000000000202 R12: 0000000000000000 [ 100.781794][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.781807][ T5150] [ 100.781817][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.6.316 Not tainted syzkaller #0 PREEMPT(full) [ 100.781840][ T5150] FAULT_INJECTION: forcing a failure. [ 100.781840][ T5150] name failslab, interval 1, probability 10, space 0, times 85 [ 100.781848][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.781856][ T6979] Call Trace: [ 100.781862][ T6979] [ 100.781867][ T6979] dump_stack_lvl+0x100/0x190 [ 100.781884][ T6979] should_fail_ex.cold+0x5/0xa [ 100.781898][ T6979] should_failslab+0xc2/0x120 [ 100.781916][ T6979] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.781933][ T6979] ? do_getname+0x35/0x390 [ 100.781951][ T6979] do_getname+0x35/0x390 [ 100.781968][ T6979] do_sys_openat2+0xc7/0x1e0 [ 100.781983][ T6979] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.781998][ T6979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.782017][ T6979] __ia32_compat_sys_openat+0x12d/0x210 [ 100.782034][ T6979] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.782053][ T6979] ? ksys_write+0x1ac/0x250 [ 100.782076][ T6979] __do_fast_syscall_32+0xe7/0x970 [ 100.782100][ T6979] ? lockdep_hardirqs_on+0x78/0x100 [ 100.782126][ T6979] do_fast_syscall_32+0x32/0x70 [ 100.782150][ T6979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.782173][ T6979] RIP: 0023:0xf70befec [ 100.782195][ T6979] Code: Unable to access opcode bytes at 0xf70befc2. [ 100.782204][ T6979] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 100.782224][ T6979] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 100.782238][ T6979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.782251][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.782262][ T6979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.782274][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.782296][ T6979] [ 100.785779][ T5818] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.788209][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.788225][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.788232][ T6870] Call Trace: [ 100.788236][ T6870] [ 100.788241][ T6870] dump_stack_lvl+0x100/0x190 [ 100.788257][ T6870] should_fail_ex.cold+0x5/0xa [ 100.788270][ T6870] should_failslab+0xc2/0x120 [ 100.788286][ T6870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.788299][ T6870] ? __pfx_map_id_range_down+0x10/0x10 [ 100.788315][ T6870] ? security_inode_alloc+0x3b/0x2c0 [ 100.788330][ T6870] security_inode_alloc+0x3b/0x2c0 [ 100.788343][ T6870] inode_init_always_gfp+0xc77/0xfb0 [ 100.788356][ T6870] alloc_inode+0x8e/0x250 [ 100.788371][ T6870] sock_alloc+0x44/0x280 [ 100.788387][ T6870] ? security_socket_create+0x7f/0x250 [ 100.788400][ T6870] __sock_create+0xc2/0x860 [ 100.788414][ T6870] __sys_socket+0x14d/0x260 [ 100.788426][ T6870] ? __pfx___sys_socket+0x10/0x10 [ 100.788441][ T6870] __ia32_compat_sys_socketcall+0x65b/0x770 [ 100.788461][ T6870] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 100.788479][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.788505][ T6870] __do_fast_syscall_32+0xe7/0x970 [ 100.788520][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 100.788535][ T6870] do_fast_syscall_32+0x32/0x70 [ 100.788549][ T6870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.788563][ T6870] RIP: 0023:0xf7fb4fec [ 100.788577][ T6870] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 100.788583][ T6870] RSP: 002b:00000000ff820b00 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 100.788594][ T6870] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ff820b10 [ 100.788601][ T6870] RDX: 00000000f7446ff4 RSI: 00000000f7282761 RDI: 00000000ff820b6c [ 100.788608][ T6870] RBP: 00000000ff820c08 R08: 0000000000000000 R09: 0000000000000000 [ 100.788615][ T6870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.788622][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.788634][ T6870] [ 100.788686][ T6870] socket: no more sockets [ 100.791432][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.791447][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.791454][ T5150] Call Trace: [ 100.791458][ T5150] [ 100.791463][ T5150] dump_stack_lvl+0x100/0x190 [ 100.791477][ T5150] should_fail_ex.cold+0x5/0xa [ 100.791490][ T5150] should_failslab+0xc2/0x120 [ 100.791506][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.791524][ T5150] ? do_getname+0x35/0x390 [ 100.791541][ T5150] do_getname+0x35/0x390 [ 100.791555][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.791568][ T5150] do_syscall_64+0x115/0x840 [ 100.791581][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.791595][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.791606][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.791616][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.791628][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.791639][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.791647][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.791654][ T5150] RBP: 0000000000000000 R08: 00000000060028cb R09: 0000000000000001 [ 100.791660][ T5150] R10: 0000000000004a64 R11: 0000000000000202 R12: 0000000000000000 [ 100.791667][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.791680][ T5150] [ 100.791766][ T5150] FAULT_INJECTION: forcing a failure. [ 100.791766][ T5150] name failslab, interval 1, probability 10, space 0, times 82 [ 100.791782][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.791794][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.791800][ T5150] Call Trace: [ 100.791804][ T5150] [ 100.791808][ T5150] dump_stack_lvl+0x100/0x190 [ 100.791821][ T5150] should_fail_ex.cold+0x5/0xa [ 100.791833][ T5150] should_failslab+0xc2/0x120 [ 100.791848][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.791863][ T5150] ? __d_alloc+0x35/0xa50 [ 100.791877][ T5150] __d_alloc+0x35/0xa50 [ 100.791890][ T5150] d_alloc+0x4a/0x1e0 [ 100.791903][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.791916][ T5150] ? mnt_want_write+0x161/0x410 [ 100.791933][ T5150] filename_unlinkat+0x275/0x730 [ 100.791945][ T5150] ? __might_fault+0xc5/0x140 [ 100.791957][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.791975][ T5150] ? do_getname+0x191/0x390 [ 100.791989][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.792002][ T5150] do_syscall_64+0x115/0x840 [ 100.792014][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.792027][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.792038][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.792047][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.792058][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.792068][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.792075][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.792082][ T5150] RBP: 0000000000000000 R08: 0000000006004f8a R09: 0000000000000001 [ 100.792088][ T5150] R10: 0000000000004a66 R11: 0000000000000202 R12: 0000000000000000 [ 100.792094][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.792107][ T5150] [ 100.792186][ T5150] FAULT_INJECTION: forcing a failure. [ 100.792186][ T5150] name failslab, interval 1, probability 10, space 0, times 81 [ 100.793258][ T6979] FAULT_INJECTION: forcing a failure. [ 100.793258][ T6979] name failslab, interval 1, probability 10, space 0, times 81 [ 100.793276][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.6.316 Not tainted syzkaller #0 PREEMPT(full) [ 100.793289][ T6979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.793296][ T6979] Call Trace: [ 100.793300][ T6979] [ 100.793306][ T6979] dump_stack_lvl+0x100/0x190 [ 100.793321][ T6979] should_fail_ex.cold+0x5/0xa [ 100.793333][ T6979] should_failslab+0xc2/0x120 [ 100.793351][ T6979] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.793365][ T6979] ? __lock_acquire+0x49f/0x1a40 [ 100.793384][ T6979] ? sock_alloc_inode+0x26/0x2c0 [ 100.793403][ T6979] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.793421][ T6979] sock_alloc_inode+0x26/0x2c0 [ 100.793437][ T6979] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.793454][ T6979] alloc_inode+0x68/0x250 [ 100.793469][ T6979] sock_alloc+0x44/0x280 [ 100.793489][ T6979] ? security_socket_create+0x7f/0x250 [ 100.793511][ T6979] __sock_create+0xc2/0x860 [ 100.793535][ T6979] __sys_socket+0x14d/0x260 [ 100.793555][ T6979] ? xfd_validate_state+0x129/0x190 [ 100.793577][ T6979] ? __pfx___sys_socket+0x10/0x10 [ 100.793604][ T6979] __ia32_sys_socket+0x72/0xb0 [ 100.793624][ T6979] ? lockdep_hardirqs_on+0x78/0x100 [ 100.793645][ T6979] __do_fast_syscall_32+0xe7/0x970 [ 100.793671][ T6979] ? lockdep_hardirqs_on+0x78/0x100 [ 100.793691][ T6979] do_fast_syscall_32+0x32/0x70 [ 100.793706][ T6979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.793707][ T6870] FAULT_INJECTION: forcing a failure. [ 100.793707][ T6870] name failslab, interval 1, probability 10, space 0, times 81 [ 100.793720][ T6979] RIP: 0023:0xf70befec [ 100.793734][ T6979] Code: Unable to access opcode bytes at 0xf70befc2. [ 100.793740][ T6979] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 100.793751][ T6979] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 0000000000000001 [ 100.793758][ T6979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.793765][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.793771][ T6979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.793777][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.793797][ T6979] [ 100.793805][ T6979] socket: no more sockets [ 100.796528][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.796542][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.796548][ T5150] Call Trace: [ 100.796552][ T5150] [ 100.796557][ T5150] dump_stack_lvl+0x100/0x190 [ 100.796571][ T5150] should_fail_ex.cold+0x5/0xa [ 100.796584][ T5150] should_failslab+0xc2/0x120 [ 100.796599][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.796613][ T5150] ? __d_alloc+0x35/0xa50 [ 100.796627][ T5150] __d_alloc+0x35/0xa50 [ 100.796641][ T5150] d_alloc+0x4a/0x1e0 [ 100.796653][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.796667][ T5150] ? mnt_want_write+0x161/0x410 [ 100.796683][ T5150] filename_unlinkat+0x275/0x730 [ 100.796709][ T5150] ? __might_fault+0xc5/0x140 [ 100.796721][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.796739][ T5150] ? do_getname+0x191/0x390 [ 100.796754][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.796766][ T5150] do_syscall_64+0x115/0x840 [ 100.796778][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.796791][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.796803][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.796812][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.796823][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.796834][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.796841][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.796847][ T5150] RBP: 0000000000000000 R08: 000000000600512d R09: 0000000000000001 [ 100.796854][ T5150] R10: 0000000000004a66 R11: 0000000000000202 R12: 0000000000000000 [ 100.796861][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.796874][ T5150] [ 100.797728][ T5150] FAULT_INJECTION: forcing a failure. [ 100.797728][ T5150] name failslab, interval 1, probability 10, space 0, times 75 [ 100.801680][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.801697][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.801704][ T6870] Call Trace: [ 100.801709][ T6870] [ 100.801714][ T6870] dump_stack_lvl+0x100/0x190 [ 100.801730][ T6870] should_fail_ex.cold+0x5/0xa [ 100.801744][ T6870] should_failslab+0xc2/0x120 [ 100.801760][ T6870] __kmalloc_noprof+0xfc/0x820 [ 100.801774][ T6870] ? trace_kmem_cache_alloc+0xdd/0x100 [ 100.801790][ T6870] ? lsm_blob_alloc+0x68/0x90 [ 100.801811][ T6870] lsm_blob_alloc+0x68/0x90 [ 100.801828][ T6870] security_sk_alloc+0x2d/0x290 [ 100.801843][ T6870] sk_prot_alloc+0x1d1/0x2a0 [ 100.801862][ T6870] sk_alloc+0x36/0xe80 [ 100.801879][ T6870] inet_create+0x3a0/0x1060 [ 100.801895][ T6870] ? inet_create+0x94/0x1060 [ 100.801912][ T6870] __sock_create+0x339/0x860 [ 100.801927][ T6870] __sys_socket+0x14d/0x260 [ 100.801939][ T6870] ? __pfx___sys_socket+0x10/0x10 [ 100.801955][ T6870] __ia32_compat_sys_socketcall+0x65b/0x770 [ 100.801964][ T6660] FAULT_INJECTION: forcing a failure. [ 100.801964][ T6660] name failslab, interval 1, probability 10, space 0, times 75 [ 100.801975][ T6870] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 100.801994][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.802014][ T6870] ? xfd_validate_state+0x129/0x190 [ 100.802034][ T6870] __do_fast_syscall_32+0xe7/0x970 [ 100.802049][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 100.802064][ T6870] do_fast_syscall_32+0x32/0x70 [ 100.802079][ T6870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.802093][ T6870] RIP: 0023:0xf7fb4fec [ 100.802106][ T6870] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 100.802112][ T6870] RSP: 002b:00000000ff820b00 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 100.802122][ T6870] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ff820b10 [ 100.802130][ T6870] RDX: 00000000f7446ff4 RSI: 00000000f7282761 RDI: 00000000ff820b6c [ 100.802137][ T6870] RBP: 00000000ff820c08 R08: 0000000000000000 R09: 0000000000000000 [ 100.802143][ T6870] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 100.802149][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.802162][ T6870] [ 100.802273][ T6870] FAULT_INJECTION: forcing a failure. [ 100.802273][ T6870] name failslab, interval 1, probability 10, space 0, times 74 [ 100.802288][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.802300][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.802307][ T6870] Call Trace: [ 100.802310][ T6870] [ 100.802314][ T6870] dump_stack_lvl+0x100/0x190 [ 100.802327][ T6870] should_fail_ex.cold+0x5/0xa [ 100.802339][ T6870] should_failslab+0xc2/0x120 [ 100.802353][ T6870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.802367][ T6870] ? trace_kmem_cache_alloc+0xdd/0x100 [ 100.802382][ T6870] ? security_file_alloc+0x34/0x2c0 [ 100.802399][ T6870] security_file_alloc+0x34/0x2c0 [ 100.802415][ T6870] init_file+0x95/0x480 [ 100.802428][ T6870] alloc_empty_file+0x79/0x1c0 [ 100.802442][ T6870] alloc_file_pseudo+0x183/0x290 [ 100.802457][ T6870] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 100.802471][ T6870] ? alloc_fd+0x471/0x7a0 [ 100.802484][ T6870] sock_alloc_file+0x50/0x210 [ 100.802500][ T6870] __sys_socket+0x1c0/0x260 [ 100.802512][ T6870] ? __pfx___sys_socket+0x10/0x10 [ 100.802527][ T6870] __ia32_compat_sys_socketcall+0x65b/0x770 [ 100.802545][ T6870] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 100.802563][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.802582][ T6870] ? xfd_validate_state+0x129/0x190 [ 100.802600][ T6870] __do_fast_syscall_32+0xe7/0x970 [ 100.802614][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 100.802627][ T6870] do_fast_syscall_32+0x32/0x70 [ 100.802642][ T6870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.802655][ T6870] RIP: 0023:0xf7fb4fec [ 100.802665][ T6870] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 100.802670][ T6870] RSP: 002b:00000000ff820b00 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 100.802680][ T6870] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ff820b10 [ 100.802686][ T6870] RDX: 00000000f7446ff4 RSI: 00000000f7282761 RDI: 00000000ff820b6c [ 100.802693][ T6870] RBP: 00000000ff820c08 R08: 0000000000000000 R09: 0000000000000000 [ 100.802699][ T6870] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 100.802705][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.802718][ T6870] [ 100.803171][ T6870] FAULT_INJECTION: forcing a failure. [ 100.803171][ T6870] name failslab, interval 1, probability 10, space 0, times 73 [ 100.803342][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.803357][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.803363][ T5150] Call Trace: [ 100.803367][ T5150] [ 100.803371][ T5150] dump_stack_lvl+0x100/0x190 [ 100.803385][ T5150] should_fail_ex.cold+0x5/0xa [ 100.803398][ T5150] should_failslab+0xc2/0x120 [ 100.803413][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.803427][ T5150] ? do_getname+0x35/0x390 [ 100.803442][ T5150] do_getname+0x35/0x390 [ 100.803457][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.803469][ T5150] do_syscall_64+0x115/0x840 [ 100.803481][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.803495][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.803506][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.803515][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.803531][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.803541][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.803548][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.803554][ T5150] RBP: 0000000000000000 R08: 00000000060066da R09: 0000000000000001 [ 100.803561][ T5150] R10: 0000000000004a66 R11: 0000000000000202 R12: 0000000000000000 [ 100.803568][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.803588][ T5150] [ 100.803969][ T5150] FAULT_INJECTION: forcing a failure. [ 100.803969][ T5150] name failslab, interval 1, probability 10, space 0, times 72 [ 100.803985][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.803997][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.804003][ T5150] Call Trace: [ 100.804007][ T5150] [ 100.804011][ T5150] dump_stack_lvl+0x100/0x190 [ 100.804024][ T5150] should_fail_ex.cold+0x5/0xa [ 100.804036][ T5150] should_failslab+0xc2/0x120 [ 100.804051][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.804064][ T5150] ? do_getname+0x35/0x390 [ 100.804080][ T5150] do_getname+0x35/0x390 [ 100.804095][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.804107][ T5150] do_syscall_64+0x115/0x840 [ 100.804120][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.804133][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.804164][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.804175][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.804186][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.804196][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.804203][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.804209][ T5150] RBP: 0000000000000000 R08: 0000000006007f3d R09: 0000000000000001 [ 100.804216][ T5150] R10: 0000000000004a68 R11: 0000000000000202 R12: 0000000000000000 [ 100.804223][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.804236][ T5150] [ 100.804282][ T5150] FAULT_INJECTION: forcing a failure. [ 100.804282][ T5150] name failslab, interval 1, probability 10, space 0, times 71 [ 100.804295][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.804307][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.804313][ T5150] Call Trace: [ 100.804316][ T5150] [ 100.804320][ T5150] dump_stack_lvl+0x100/0x190 [ 100.804333][ T5150] should_fail_ex.cold+0x5/0xa [ 100.804345][ T5150] should_failslab+0xc2/0x120 [ 100.804359][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.804373][ T5150] ? do_getname+0x35/0x390 [ 100.804388][ T5150] do_getname+0x35/0x390 [ 100.804403][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.804415][ T5150] do_syscall_64+0x115/0x840 [ 100.804427][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.804440][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.804451][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.804460][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.804471][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.804481][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.804488][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.804495][ T5150] RBP: 0000000000000000 R08: 0000000006008075 R09: 0000000000000001 [ 100.804502][ T5150] R10: 0000000000004a68 R11: 0000000000000202 R12: 0000000000000000 [ 100.804508][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.804526][ T5150] [ 100.804664][ T5150] FAULT_INJECTION: forcing a failure. [ 100.804664][ T5150] name failslab, interval 1, probability 10, space 0, times 70 [ 100.807117][ T6775] FAULT_INJECTION: forcing a failure. [ 100.807117][ T6775] name failslab, interval 1, probability 10, space 0, times 70 [ 100.807498][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.807511][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.807518][ T5150] Call Trace: [ 100.807525][ T5150] [ 100.807529][ T5150] dump_stack_lvl+0x100/0x190 [ 100.807542][ T5150] should_fail_ex.cold+0x5/0xa [ 100.807554][ T5150] should_failslab+0xc2/0x120 [ 100.807568][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.807582][ T5150] ? do_getname+0x35/0x390 [ 100.807598][ T5150] do_getname+0x35/0x390 [ 100.807612][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.807625][ T5150] do_syscall_64+0x115/0x840 [ 100.807637][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.807650][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.807661][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.807670][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.807681][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.807690][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.807697][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.807703][ T5150] RBP: 0000000000000000 R08: 00000000060081f3 R09: 0000000000000001 [ 100.807710][ T5150] R10: 0000000000004a68 R11: 0000000000000202 R12: 0000000000000000 [ 100.807717][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.807730][ T5150] [ 100.807742][ T5720] FAULT_INJECTION: forcing a failure. [ 100.807742][ T5720] name failslab, interval 1, probability 10, space 0, times 69 [ 100.807937][ T5150] FAULT_INJECTION: forcing a failure. [ 100.807937][ T5150] name failslab, interval 1, probability 10, space 0, times 69 [ 100.807951][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.807962][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.807969][ T5150] Call Trace: [ 100.807972][ T5150] [ 100.807976][ T5150] dump_stack_lvl+0x100/0x190 [ 100.807988][ T5150] should_fail_ex.cold+0x5/0xa [ 100.808001][ T5150] should_failslab+0xc2/0x120 [ 100.808015][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.808030][ T5150] ? __d_alloc+0x35/0xa50 [ 100.808043][ T5150] __d_alloc+0x35/0xa50 [ 100.808057][ T5150] d_alloc+0x4a/0x1e0 [ 100.808070][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.808083][ T5150] ? mnt_want_write+0x161/0x410 [ 100.808113][ T5150] filename_unlinkat+0x275/0x730 [ 100.808126][ T5150] ? __might_fault+0xc5/0x140 [ 100.808139][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.808174][ T5150] ? do_getname+0x191/0x390 [ 100.808189][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.808202][ T5150] do_syscall_64+0x115/0x840 [ 100.808215][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.808228][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.808239][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.808248][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.808259][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.808269][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.808276][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.808282][ T5150] RBP: 0000000000000000 R08: 0000000006008eb5 R09: 0000000000000001 [ 100.808289][ T5150] R10: 0000000000004a68 R11: 0000000000000202 R12: 0000000000000000 [ 100.808295][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.808309][ T5150] [ 100.809495][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 100.809510][ T6775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.809518][ T6775] Workqueue: mld mld_ifc_work [ 100.809536][ T6775] Call Trace: [ 100.809540][ T6775] [ 100.809544][ T6775] dump_stack_lvl+0x100/0x190 [ 100.809558][ T6775] should_fail_ex.cold+0x5/0xa [ 100.809570][ T6775] should_failslab+0xc2/0x120 [ 100.809586][ T6775] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.809600][ T6775] ? __alloc_skb+0x140/0x710 [ 100.809618][ T6775] __alloc_skb+0x140/0x710 [ 100.809631][ T6775] ? __alloc_skb+0x5b7/0x710 [ 100.809644][ T6775] ? __pfx___alloc_skb+0x10/0x10 [ 100.809657][ T6775] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.809671][ T6775] ? __mod_timer+0x40e/0xca0 [ 100.809684][ T6775] mld_newpack.isra.0+0x18e/0xa20 [ 100.809699][ T6775] ? lock_acquire+0x1b9/0x370 [ 100.809717][ T6775] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 100.809733][ T6775] ? rcu_is_watching+0x12/0xc0 [ 100.809746][ T6775] ? trace_contention_end+0x126/0x160 [ 100.809761][ T6775] ? add_grhead+0x299/0x340 [ 100.809774][ T6775] add_grhead+0x299/0x340 [ 100.809789][ T6775] add_grec+0x1389/0x1930 [ 100.809808][ T6775] ? __pfx_add_grec+0x10/0x10 [ 100.809827][ T6775] mld_ifc_work+0x3c5/0xc10 [ 100.809842][ T6775] ? rcu_is_watching+0x12/0xc0 [ 100.809862][ T6775] process_one_work+0xa23/0x1940 [ 100.809883][ T6775] ? __pfx_process_one_work+0x10/0x10 [ 100.809903][ T6775] ? __pfx_mld_ifc_work+0x10/0x10 [ 100.809920][ T6775] worker_thread+0x5ef/0xe50 [ 100.809939][ T6775] ? __pfx_worker_thread+0x10/0x10 [ 100.809955][ T6775] ? kthread+0x13a/0x450 [ 100.809968][ T6775] ? __pfx_worker_thread+0x10/0x10 [ 100.809986][ T6775] kthread+0x370/0x450 [ 100.810005][ T6775] ? __pfx_kthread+0x10/0x10 [ 100.810026][ T6775] ret_from_fork+0x72b/0xd50 [ 100.810046][ T6775] ? __pfx_ret_from_fork+0x10/0x10 [ 100.810069][ T6775] ? __switch_to+0x800/0x10f0 [ 100.810096][ T6775] ? __pfx_kthread+0x10/0x10 [ 100.810120][ T6775] ret_from_fork_asm+0x1a/0x30 [ 100.810145][ T6775] [ 100.810274][ T6775] FAULT_INJECTION: forcing a failure. [ 100.810274][ T6775] name failslab, interval 1, probability 10, space 0, times 67 [ 100.812250][ T5150] FAULT_INJECTION: forcing a failure. [ 100.812250][ T5150] name failslab, interval 1, probability 10, space 0, times 66 [ 100.813044][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.813058][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.813065][ T6870] Call Trace: [ 100.813069][ T6870] [ 100.813074][ T6870] dump_stack_lvl+0x100/0x190 [ 100.813088][ T6870] should_fail_ex.cold+0x5/0xa [ 100.813098][ T6870] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 100.813111][ T6870] should_failslab+0xc2/0x120 [ 100.813128][ T6870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.813142][ T6870] ? skb_clone+0x190/0x400 [ 100.813159][ T6870] skb_clone+0x190/0x400 [ 100.813175][ T6870] netlink_deliver_tap+0xaed/0xcc0 [ 100.813190][ T6870] netlink_unicast+0x62b/0x850 [ 100.813203][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 100.813219][ T6870] netlink_sendmsg+0x8b0/0xda0 [ 100.813233][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.813247][ T6870] ? apparmor_socket_sendmsg+0x15b/0x270 [ 100.813261][ T6870] __sys_sendto+0x48b/0x4e0 [ 100.813274][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.813286][ T6870] ? __pfx___sys_sendto+0x10/0x10 [ 100.813312][ T6870] __ia32_compat_sys_socketcall+0x59a/0x770 [ 100.813332][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.813352][ T6870] ? __pfx_fput_close_sync+0x10/0x10 [ 100.813372][ T6870] do_int80_emulation+0x14b/0x720 [ 100.813389][ T6870] asm_int80_emulation+0x1a/0x20 [ 100.813400][ T6870] RIP: 0023:0xf71b736b [ 100.813409][ T6870] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.813420][ T6870] RSP: 002b:00000000ff820aac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 100.813431][ T6870] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff820b54 [ 100.813438][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.813445][ T6870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.813451][ T6870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.813458][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.813471][ T6870] [ 100.813810][ T6870] FAULT_INJECTION: forcing a failure. [ 100.813810][ T6870] name failslab, interval 1, probability 10, space 0, times 64 [ 100.815360][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.815376][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.815383][ T6660] Call Trace: [ 100.815387][ T6660] [ 100.815391][ T6660] dump_stack_lvl+0x100/0x190 [ 100.815406][ T6660] should_fail_ex.cold+0x5/0xa [ 100.815419][ T6660] should_failslab+0xc2/0x120 [ 100.815434][ T6660] __kmalloc_noprof+0xfc/0x820 [ 100.815447][ T6660] ? tomoyo_encode2+0xfb/0x3c0 [ 100.815466][ T6660] tomoyo_encode2+0xfb/0x3c0 [ 100.815483][ T6660] tomoyo_encode+0x29/0x50 [ 100.815499][ T6660] tomoyo_realpath_from_path+0x18c/0x690 [ 100.815518][ T6660] tomoyo_path_perm+0x276/0x460 [ 100.815531][ T6660] ? tomoyo_path_perm+0x262/0x460 [ 100.815546][ T6660] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 100.815574][ T6660] ? kasan_quarantine_put+0x104/0x240 [ 100.815600][ T6660] ? lockdep_hardirqs_on+0x78/0x100 [ 100.815616][ T6660] security_inode_getattr+0x116/0x280 [ 100.815631][ T6660] do_statx_fd+0x120/0x3b0 [ 100.815646][ T6660] ? __pfx_do_statx_fd+0x10/0x10 [ 100.815660][ T6660] ? putname+0xb6/0x110 [ 100.815681][ T6660] ? __might_fault+0x111/0x140 [ 100.815695][ T6660] __ia32_sys_statx+0x199/0x1f0 [ 100.815711][ T6660] __do_fast_syscall_32+0xe7/0x970 [ 100.815725][ T6660] ? lockdep_hardirqs_on+0x78/0x100 [ 100.815739][ T6660] do_fast_syscall_32+0x32/0x70 [ 100.815753][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.815767][ T6660] RIP: 0023:0xf7f74fec [ 100.815777][ T6660] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.815788][ T6660] RSP: 002b:00000000ffa4c2a0 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 100.815798][ T6660] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f725f4d7 [ 100.815806][ T6660] RDX: 0000000000001800 RSI: 00000000000007ff RDI: 00000000ffa4c33c [ 100.815812][ T6660] RBP: 00000000ffa4c490 R08: 0000000000000000 R09: 0000000000000000 [ 100.815819][ T6660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.815825][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.815842][ T6660] [ 100.815875][ T6660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.815954][ T6660] FAULT_INJECTION: forcing a failure. [ 100.815954][ T6660] name failslab, interval 1, probability 10, space 0, times 63 [ 100.815968][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.815980][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.815986][ T6660] Call Trace: [ 100.815990][ T6660] [ 100.815994][ T6660] dump_stack_lvl+0x100/0x190 [ 100.816006][ T6660] should_fail_ex.cold+0x5/0xa [ 100.816018][ T6660] should_failslab+0xc2/0x120 [ 100.816033][ T6660] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.816047][ T6660] ? do_getname+0x35/0x390 [ 100.816062][ T6660] do_getname+0x35/0x390 [ 100.816077][ T6660] user_path_at+0x26/0x60 [ 100.816094][ T6660] __ia32_sys_umount+0x109/0x190 [ 100.816106][ T6660] ? __pfx___ia32_sys_umount+0x10/0x10 [ 100.816121][ T6660] __do_fast_syscall_32+0xe7/0x970 [ 100.816137][ T6660] do_fast_syscall_32+0x32/0x70 [ 100.816172][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.816186][ T6660] RIP: 0023:0xf7f74fec [ 100.816195][ T6660] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.816205][ T6660] RSP: 002b:00000000ffa4c4f8 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 100.816215][ T6660] RAX: ffffffffffffffda RBX: 00000000ffa4c5a0 RCX: 0000000000000009 [ 100.816222][ T6660] RDX: 00000000f7406ff4 RSI: 00000000f72414fe RDI: 00000000ffa4d634 [ 100.816229][ T6660] RBP: 00000000ffa4c5a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.816235][ T6660] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000 [ 100.816241][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.816254][ T6660] [ 100.816563][ T6660] FAULT_INJECTION: forcing a failure. [ 100.816563][ T6660] name failslab, interval 1, probability 10, space 0, times 62 [ 100.816577][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.816589][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.816595][ T6660] Call Trace: [ 100.816599][ T6660] [ 100.816603][ T6660] dump_stack_lvl+0x100/0x190 [ 100.816615][ T6660] should_fail_ex.cold+0x5/0xa [ 100.816626][ T6660] should_failslab+0xc2/0x120 [ 100.816641][ T6660] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.816655][ T6660] ? do_getname+0x35/0x390 [ 100.816670][ T6660] do_getname+0x35/0x390 [ 100.816684][ T6660] __ia32_sys_statx+0x1ad/0x1f0 [ 100.816700][ T6660] __do_fast_syscall_32+0xe7/0x970 [ 100.816715][ T6660] do_fast_syscall_32+0x32/0x70 [ 100.816729][ T6660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.816742][ T6660] RIP: 0023:0xf7f74fec [ 100.816751][ T6660] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.816761][ T6660] RSP: 002b:00000000ffa4c270 EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 100.816771][ T6660] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffa4c5a0 [ 100.816778][ T6660] RDX: 0000000000000900 RSI: 00000000000007ff RDI: 00000000ffa4c30c [ 100.816784][ T6660] RBP: 00000000ffa4c460 R08: 0000000000000000 R09: 0000000000000000 [ 100.816791][ T6660] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.816797][ T6660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.816810][ T6660] [ 100.817878][ T5720] CPU: 1 UID: 0 PID: 5720 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 100.817891][ T5720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.817897][ T5720] Call Trace: [ 100.817901][ T5720] [ 100.817905][ T5720] dump_stack_lvl+0x100/0x190 [ 100.817919][ T5720] should_fail_ex.cold+0x5/0xa [ 100.817931][ T5720] should_failslab+0xc2/0x120 [ 100.817946][ T5720] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.817960][ T5720] ? __alloc_skb+0x140/0x710 [ 100.817977][ T5720] __alloc_skb+0x140/0x710 [ 100.817991][ T5720] ? __pfx___alloc_skb+0x10/0x10 [ 100.818004][ T5720] ? __lock_acquire+0x49f/0x1a40 [ 100.818022][ T5720] ? __lock_acquire+0x49f/0x1a40 [ 100.818040][ T5720] tcp_stream_alloc_skb+0x34/0x660 [ 100.818071][ T5720] tcp_sendmsg_locked+0x13b2/0x44d0 [ 100.818090][ T5720] ? __lock_acquire+0x49f/0x1a40 [ 100.818124][ T5720] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 100.818141][ T5720] ? do_raw_spin_lock+0x128/0x260 [ 100.818153][ T5720] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.818168][ T5720] ? __local_bh_enable_ip+0x9e/0x120 [ 100.818183][ T5720] tcp_sendmsg+0x2e/0x50 [ 100.818198][ T5720] ? __pfx_tcp_sendmsg+0x10/0x10 [ 100.818213][ T5720] inet_sendmsg+0xb9/0x140 [ 100.818229][ T5720] sock_write_iter+0x4ea/0x5b0 [ 100.818240][ T5720] ? __pfx_inet_sendmsg+0x10/0x10 [ 100.818254][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 100.818269][ T5720] ? bpf_lsm_file_permission+0x9/0x10 [ 100.818280][ T5720] ? security_file_permission+0x76/0x210 [ 100.818296][ T5720] ? rw_verify_area+0xce/0x6d0 [ 100.818313][ T5720] vfs_write+0x6ac/0x1050 [ 100.818324][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 100.818336][ T5720] ? __pfx_vfs_write+0x10/0x10 [ 100.818347][ T5720] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 100.818361][ T5720] ? lockdep_hardirqs_on+0x78/0x100 [ 100.818374][ T5720] ? _raw_spin_unlock_irq+0x2e/0x50 [ 100.818386][ T5720] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 100.818399][ T5720] ksys_write+0x1f8/0x250 [ 100.818409][ T5720] ? __pfx_ksys_write+0x10/0x10 [ 100.818423][ T5720] do_syscall_64+0x115/0x840 [ 100.818435][ T5720] ? clear_bhb_loop+0x40/0x90 [ 100.818448][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.818460][ T5720] RIP: 0033:0x7f916b6a7407 [ 100.818469][ T5720] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.818480][ T5720] RSP: 002b:00007ffd149b1b70 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 100.818490][ T5720] RAX: ffffffffffffffda RBX: 00007f916bde8300 RCX: 00007f916b6a7407 [ 100.818497][ T5720] RDX: 0000000000008024 RSI: 00007f916bd62010 RDI: 0000000000000004 [ 100.818503][ T5720] RBP: 00005577d4baa050 R08: 0000000000000000 R09: 0000000000000000 [ 100.818509][ T5720] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 100.818516][ T5720] R13: 00007ffd149b1cc0 R14: 0000000000000000 R15: 0000000000000004 [ 100.818529][ T5720] [ 100.819058][ T5720] FAULT_INJECTION: forcing a failure. [ 100.819058][ T5720] name failslab, interval 1, probability 10, space 0, times 60 [ 100.819076][ T5720] CPU: 1 UID: 0 PID: 5720 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 100.819089][ T5720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.819096][ T5720] Call Trace: [ 100.819100][ T5720] [ 100.819105][ T5720] dump_stack_lvl+0x100/0x190 [ 100.819120][ T5720] should_fail_ex.cold+0x5/0xa [ 100.819133][ T5720] should_failslab+0xc2/0x120 [ 100.819149][ T5720] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.819163][ T5720] ? lock_acquire+0x1b9/0x370 [ 100.819181][ T5720] ? skb_clone+0x190/0x400 [ 100.819199][ T5720] skb_clone+0x190/0x400 [ 100.819216][ T5720] dev_queue_xmit_nit+0x255/0xa60 [ 100.819236][ T5720] dev_hard_start_xmit+0x2f5/0x760 [ 100.819253][ T5720] sch_direct_xmit+0x1b2/0xc70 [ 100.819271][ T5720] ? lock_acquire+0x1b9/0x370 [ 100.819289][ T5720] ? __pfx_sch_direct_xmit+0x10/0x10 [ 100.819306][ T5720] ? do_raw_spin_lock+0x240/0x260 [ 100.819323][ T5720] __dev_queue_xmit+0x27ac/0x4970 [ 100.819342][ T5720] ? __pfx___dev_queue_xmit+0x10/0x10 [ 100.819359][ T5720] ? __lock_acquire+0x49f/0x1a40 [ 100.819376][ T5720] ? find_held_lock+0x2b/0x80 [ 100.819390][ T5720] ? is_bpf_text_address+0x8a/0x1a0 [ 100.819407][ T5720] ? is_bpf_text_address+0x8a/0x1a0 [ 100.819432][ T5720] ip_finish_output2+0xf4a/0x2400 [ 100.819450][ T5720] ? __pfx_ip_finish_output2+0x10/0x10 [ 100.819464][ T5720] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 100.819480][ T5720] __ip_finish_output.part.0+0x444/0x6f0 [ 100.819496][ T5720] ip_output+0x39b/0xc10 [ 100.819510][ T5720] ? __pfx_ip_output+0x10/0x10 [ 100.819525][ T5720] ? __pfx_ip_finish_output+0x10/0x10 [ 100.819540][ T5720] ? __pfx_ip_output+0x10/0x10 [ 100.819554][ T5720] ip_local_out+0x193/0x1f0 [ 100.819569][ T5720] __ip_queue_xmit+0x885/0x1e90 [ 100.819585][ T5720] ? __pfx_ip_queue_xmit+0x10/0x10 [ 100.819599][ T5720] __tcp_transmit_skb+0x3506/0x4f20 [ 100.819629][ T5720] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 100.819656][ T5720] ? kmalloc_reserve+0xf9/0x350 [ 100.819690][ T5720] tcp_write_xmit+0x1130/0x8470 [ 100.819732][ T5720] ? alloc_pages_noprof+0xf9/0x160 [ 100.819759][ T5720] __tcp_push_pending_frames+0xaf/0x3b0 [ 100.819788][ T5720] tcp_sendmsg_locked+0x330c/0x44d0 [ 100.819814][ T5720] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 100.819832][ T5720] ? do_raw_spin_lock+0x128/0x260 [ 100.819849][ T5720] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.819865][ T5720] ? __local_bh_enable_ip+0x9e/0x120 [ 100.819879][ T5720] tcp_sendmsg+0x2e/0x50 [ 100.819894][ T5720] ? __pfx_tcp_sendmsg+0x10/0x10 [ 100.819909][ T5720] inet_sendmsg+0xb9/0x140 [ 100.819925][ T5720] sock_write_iter+0x4ea/0x5b0 [ 100.819936][ T5720] ? __pfx_inet_sendmsg+0x10/0x10 [ 100.819950][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 100.819965][ T5720] ? bpf_lsm_file_permission+0x9/0x10 [ 100.819976][ T5720] ? security_file_permission+0x76/0x210 [ 100.819992][ T5720] ? rw_verify_area+0xce/0x6d0 [ 100.820008][ T5720] vfs_write+0x6ac/0x1050 [ 100.820019][ T5720] ? __pfx_sock_write_iter+0x10/0x10 [ 100.820045][ T5720] ? __pfx_vfs_write+0x10/0x10 [ 100.820056][ T5720] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 100.820071][ T5720] ? lockdep_hardirqs_on+0x78/0x100 [ 100.820084][ T5720] ? _raw_spin_unlock_irq+0x2e/0x50 [ 100.820095][ T5720] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 100.820108][ T5720] ksys_write+0x1f8/0x250 [ 100.820118][ T5720] ? __pfx_ksys_write+0x10/0x10 [ 100.820133][ T5720] do_syscall_64+0x115/0x840 [ 100.820162][ T5720] ? clear_bhb_loop+0x40/0x90 [ 100.820177][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.820188][ T5720] RIP: 0033:0x7f916b6a7407 [ 100.820198][ T5720] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.820209][ T5720] RSP: 002b:00007ffd149b1b70 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 100.820219][ T5720] RAX: ffffffffffffffda RBX: 00007f916bde8300 RCX: 00007f916b6a7407 [ 100.820226][ T5720] RDX: 0000000000010048 RSI: 00007f916bd62010 RDI: 0000000000000004 [ 100.820233][ T5720] RBP: 00005577d4baa050 R08: 0000000000000000 R09: 0000000000000000 [ 100.820239][ T5720] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 100.820246][ T5720] R13: 00007ffd149b1cc0 R14: 0000000000000000 R15: 0000000000000004 [ 100.820259][ T5720] [ 100.820267][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.820282][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.820289][ T5150] Call Trace: [ 100.820293][ T5150] [ 100.820298][ T5150] dump_stack_lvl+0x100/0x190 [ 100.820312][ T5150] should_fail_ex.cold+0x5/0xa [ 100.820324][ T5150] should_failslab+0xc2/0x120 [ 100.820339][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.820354][ T5150] ? __d_alloc+0x35/0xa50 [ 100.820368][ T5150] __d_alloc+0x35/0xa50 [ 100.820382][ T5150] d_alloc+0x4a/0x1e0 [ 100.820394][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.820408][ T5150] ? mnt_want_write+0x161/0x410 [ 100.820424][ T5150] filename_unlinkat+0x275/0x730 [ 100.820437][ T5150] ? __might_fault+0xc5/0x140 [ 100.820449][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.820466][ T5150] ? do_getname+0x191/0x390 [ 100.820481][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.820493][ T5150] do_syscall_64+0x115/0x840 [ 100.820506][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.820523][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.820535][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.820544][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.820555][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.820566][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.820573][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.820580][ T5150] RBP: 0000000000000000 R08: 0000000006009f8d R09: 0000000000000001 [ 100.820586][ T5150] R10: 0000000000004a6a R11: 0000000000000202 R12: 0000000000000000 [ 100.820593][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.820607][ T5150] [ 100.820739][ T5150] FAULT_INJECTION: forcing a failure. [ 100.820739][ T5150] name failslab, interval 1, probability 10, space 0, times 58 [ 100.821951][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 100.821966][ T6775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.821974][ T6775] Workqueue: mld mld_ifc_work [ 100.821991][ T6775] Call Trace: [ 100.821995][ T6775] [ 100.822000][ T6775] dump_stack_lvl+0x100/0x190 [ 100.822013][ T6775] should_fail_ex.cold+0x5/0xa [ 100.822025][ T6775] should_failslab+0xc2/0x120 [ 100.822040][ T6775] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.822054][ T6775] ? dst_alloc+0x99/0x1a0 [ 100.822068][ T6775] ? __pfx_ip6_dst_gc+0x10/0x10 [ 100.822086][ T6775] dst_alloc+0x99/0x1a0 [ 100.822101][ T6775] icmp6_dst_alloc+0x79/0x4f0 [ 100.822117][ T6775] mld_sendpack+0x5ae/0xec0 [ 100.822135][ T6775] ? __pfx_mld_sendpack+0x10/0x10 [ 100.822157][ T6775] mld_ifc_work+0x75a/0xc10 [ 100.822172][ T6775] ? rcu_is_watching+0x12/0xc0 [ 100.822188][ T6775] process_one_work+0xa23/0x1940 [ 100.822209][ T6775] ? __pfx_process_one_work+0x10/0x10 [ 100.822229][ T6775] ? __pfx_mld_ifc_work+0x10/0x10 [ 100.822246][ T6775] worker_thread+0x5ef/0xe50 [ 100.822265][ T6775] ? __pfx_worker_thread+0x10/0x10 [ 100.822281][ T6775] ? kthread+0x13a/0x450 [ 100.822295][ T6775] ? __pfx_worker_thread+0x10/0x10 [ 100.822310][ T6775] kthread+0x370/0x450 [ 100.822323][ T6775] ? __pfx_kthread+0x10/0x10 [ 100.822339][ T6775] ret_from_fork+0x72b/0xd50 [ 100.822353][ T6775] ? __pfx_ret_from_fork+0x10/0x10 [ 100.822367][ T6775] ? __switch_to+0x800/0x10f0 [ 100.822383][ T6775] ? __pfx_kthread+0x10/0x10 [ 100.822398][ T6775] ret_from_fork_asm+0x1a/0x30 [ 100.822420][ T6775] [ 100.823759][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.823773][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.823780][ T6870] Call Trace: [ 100.823784][ T6870] [ 100.823788][ T6870] dump_stack_lvl+0x100/0x190 [ 100.823802][ T6870] should_fail_ex.cold+0x5/0xa [ 100.823814][ T6870] should_failslab+0xc2/0x120 [ 100.823830][ T6870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.823843][ T6870] ? __pfx_map_id_range_down+0x10/0x10 [ 100.823866][ T6870] ? security_inode_alloc+0x3b/0x2c0 [ 100.823881][ T6870] security_inode_alloc+0x3b/0x2c0 [ 100.823894][ T6870] inode_init_always_gfp+0xc77/0xfb0 [ 100.823908][ T6870] alloc_inode+0x8e/0x250 [ 100.823922][ T6870] sock_alloc+0x44/0x280 [ 100.823938][ T6870] ? security_socket_create+0x7f/0x250 [ 100.823951][ T6870] __sock_create+0xc2/0x860 [ 100.823962][ T6870] ? __lock_acquire+0x49f/0x1a40 [ 100.823981][ T6870] udp_sock_create6+0xc7/0x6a0 [ 100.824000][ T6870] ? __pfx_udp_sock_create6+0x10/0x10 [ 100.824023][ T6870] geneve_create_sock+0x37a/0x3e0 [ 100.824036][ T6870] ? __pfx_geneve_create_sock+0x10/0x10 [ 100.824051][ T6870] ? trace_kmalloc+0xeb/0x110 [ 100.824068][ T6870] geneve_sock_add+0x70e/0xb80 [ 100.824082][ T6870] ? __pfx_geneve_sock_add+0x10/0x10 [ 100.824096][ T6870] ? notifier_call_chain+0x31b/0x3f0 [ 100.824132][ T6870] geneve_open+0x110/0x1b0 [ 100.824163][ T6870] ? __pfx_geneve_open+0x10/0x10 [ 100.824176][ T6870] __dev_open+0x3ad/0x8f0 [ 100.824193][ T6870] ? __pfx___dev_open+0x10/0x10 [ 100.824210][ T6870] ? __local_bh_enable_ip+0x9e/0x120 [ 100.824225][ T6870] __dev_change_flags+0x596/0x850 [ 100.824240][ T6870] ? __pfx___dev_change_flags+0x10/0x10 [ 100.824254][ T6870] ? find_held_lock+0x2b/0x80 [ 100.824267][ T6870] ? do_setlink.isra.0+0x788/0x3e60 [ 100.824282][ T6870] ? do_setlink.isra.0+0x788/0x3e60 [ 100.824300][ T6870] netif_change_flags+0x8d/0x160 [ 100.824315][ T6870] do_setlink.isra.0+0x1ac4/0x3e60 [ 100.824333][ T6870] ? stack_trace_save+0x8e/0xc0 [ 100.824347][ T6870] ? __pfx_stack_trace_save+0x10/0x10 [ 100.824363][ T6870] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 100.824381][ T6870] ? __lock_acquire+0x49f/0x1a40 [ 100.824397][ T6870] ? rtnl_newlink+0x126/0x2380 [ 100.824411][ T6870] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 100.824426][ T6870] ? netlink_rcv_skb+0x159/0x420 [ 100.824438][ T6870] ? netlink_unicast+0x585/0x850 [ 100.824449][ T6870] ? netlink_sendmsg+0x8b0/0xda0 [ 100.824459][ T6870] ? __sys_sendto+0x48b/0x4e0 [ 100.824472][ T6870] ? __ia32_compat_sys_socketcall+0x59a/0x770 [ 100.824490][ T6870] ? asm_int80_emulation+0x1a/0x20 [ 100.824504][ T6870] ? lock_acquire+0x1b9/0x370 [ 100.824522][ T6870] ? rcu_is_watching+0x12/0xc0 [ 100.824535][ T6870] ? trace_contention_end+0x126/0x160 [ 100.824547][ T6870] ? __mutex_lock+0x26d/0x1bd0 [ 100.824561][ T6870] ? rtnl_newlink+0x8bb/0x2380 [ 100.824575][ T6870] ? __nla_validate_parse+0x1e7/0x28b0 [ 100.824598][ T6870] ? netlink_ns_capable+0xfa/0x130 [ 100.824617][ T6870] rtnl_newlink+0x11c2/0x2380 [ 100.824637][ T6870] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.824653][ T6870] ? irq_work_queue+0xce/0x100 [ 100.824665][ T6870] ? __wake_up_klogd+0xe2/0x140 [ 100.824677][ T6870] ? vprintk_emit+0x1c9/0x6b0 [ 100.824693][ T6870] ? __lock_acquire+0x49f/0x1a40 [ 100.824710][ T6870] ? _printk+0xcf/0x110 [ 100.824720][ T6870] ? __pfx__printk+0x10/0x10 [ 100.824730][ T6870] ? find_held_lock+0x2b/0x80 [ 100.824747][ T6870] ? find_held_lock+0x2b/0x80 [ 100.824759][ T6870] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.824775][ T6870] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.824791][ T6870] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.824807][ T6870] rtnetlink_rcv_msg+0x95e/0xe90 [ 100.824824][ T6870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.824839][ T6870] ? __lock_acquire+0x49f/0x1a40 [ 100.824860][ T6870] ? dump_stack_lvl+0x137/0x190 [ 100.824870][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 100.824886][ T6870] netlink_rcv_skb+0x159/0x420 [ 100.824898][ T6870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.824915][ T6870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.824931][ T6870] ? rcu_is_watching+0x12/0xc0 [ 100.824947][ T6870] netlink_unicast+0x585/0x850 [ 100.824961][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 100.824976][ T6870] netlink_sendmsg+0x8b0/0xda0 [ 100.824990][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.825004][ T6870] ? apparmor_socket_sendmsg+0x15b/0x270 [ 100.825019][ T6870] __sys_sendto+0x48b/0x4e0 [ 100.825031][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.825043][ T6870] ? __pfx___sys_sendto+0x10/0x10 [ 100.825070][ T6870] __ia32_compat_sys_socketcall+0x59a/0x770 [ 100.825089][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.825109][ T6870] ? __pfx_fput_close_sync+0x10/0x10 [ 100.825129][ T6870] do_int80_emulation+0x14b/0x720 [ 100.825144][ T6870] asm_int80_emulation+0x1a/0x20 [ 100.825155][ T6870] RIP: 0023:0xf71b736b [ 100.825165][ T6870] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.825176][ T6870] RSP: 002b:00000000ff820aac EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 100.825186][ T6870] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff820b54 [ 100.825193][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.825199][ T6870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.825206][ T6870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.825212][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.825226][ T6870] [ 100.825266][ T6870] socket: no more sockets [ 100.828428][ T5836] FAULT_INJECTION: forcing a failure. [ 100.828428][ T5836] name failslab, interval 1, probability 10, space 0, times 49 [ 100.830132][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.830147][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.830154][ T5150] Call Trace: [ 100.830157][ T5150] [ 100.830162][ T5150] dump_stack_lvl+0x100/0x190 [ 100.830177][ T5150] should_fail_ex.cold+0x5/0xa [ 100.830189][ T5150] should_failslab+0xc2/0x120 [ 100.830205][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.830219][ T5150] ? __d_alloc+0x35/0xa50 [ 100.830234][ T5150] __d_alloc+0x35/0xa50 [ 100.830247][ T5150] d_alloc+0x4a/0x1e0 [ 100.830259][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.830273][ T5150] ? mnt_want_write+0x161/0x410 [ 100.830290][ T5150] filename_unlinkat+0x275/0x730 [ 100.830302][ T5150] ? __might_fault+0xc5/0x140 [ 100.830315][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.830332][ T5150] ? do_getname+0x191/0x390 [ 100.830347][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.830359][ T5150] do_syscall_64+0x115/0x840 [ 100.830372][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.830385][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.830396][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.830407][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.830417][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.830428][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.830435][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.830442][ T5150] RBP: 0000000000000000 R08: 000000000600c0b7 R09: 0000000000000001 [ 100.830448][ T5150] R10: 0000000000004a6c R11: 0000000000000202 R12: 0000000000000000 [ 100.830455][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.830468][ T5150] [ 100.830707][ T5150] FAULT_INJECTION: forcing a failure. [ 100.830707][ T5150] name failslab, interval 1, probability 10, space 0, times 44 [ 100.830722][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.830733][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.830739][ T5150] Call Trace: [ 100.830743][ T5150] [ 100.830747][ T5150] dump_stack_lvl+0x100/0x190 [ 100.830759][ T5150] should_fail_ex.cold+0x5/0xa [ 100.830789][ T5150] should_failslab+0xc2/0x120 [ 100.830804][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.830831][ T5150] ? do_getname+0x35/0x390 [ 100.830847][ T5150] do_getname+0x35/0x390 [ 100.830862][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.830874][ T5150] do_syscall_64+0x115/0x840 [ 100.830887][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.830900][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.830911][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.830920][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.830931][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.830941][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.830948][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.830955][ T5150] RBP: 0000000000000000 R08: 000000000600e7ae R09: 0000000000000001 [ 100.830962][ T5150] R10: 0000000000004a6e R11: 0000000000000202 R12: 0000000000000000 [ 100.830968][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.830981][ T5150] [ 100.833289][ T5150] FAULT_INJECTION: forcing a failure. [ 100.833289][ T5150] name failslab, interval 1, probability 10, space 0, times 38 [ 100.834560][ T6870] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 100.834742][ T6870] FAULT_INJECTION: forcing a failure. [ 100.834742][ T6870] name failslab, interval 1, probability 10, space 0, times 36 [ 100.834767][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.834784][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.834793][ T6870] Call Trace: [ 100.834798][ T6870] [ 100.834803][ T6870] dump_stack_lvl+0x100/0x190 [ 100.834822][ T6870] should_fail_ex.cold+0x5/0xa [ 100.834839][ T6870] should_failslab+0xc2/0x120 [ 100.834867][ T6870] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.834888][ T6870] ? rcu_is_watching+0x12/0xc0 [ 100.834908][ T6870] ? sock_alloc_inode+0x26/0x2c0 [ 100.834938][ T6870] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.834965][ T6870] sock_alloc_inode+0x26/0x2c0 [ 100.834993][ T6870] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.835018][ T6870] alloc_inode+0x68/0x250 [ 100.835041][ T6870] sock_alloc+0x44/0x280 [ 100.835068][ T6870] ? security_socket_create+0x7f/0x250 [ 100.835091][ T6870] __sock_create+0xc2/0x860 [ 100.835114][ T6870] __sys_socket+0x14d/0x260 [ 100.835136][ T6870] ? __pfx___sys_socket+0x10/0x10 [ 100.835162][ T6870] __ia32_compat_sys_socketcall+0x65b/0x770 [ 100.835193][ T6870] ? __ia32_compat_sys_socketcall+0x2f6/0x770 [ 100.835222][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.835265][ T6870] __do_fast_syscall_32+0xe7/0x970 [ 100.835288][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 100.835310][ T6870] do_fast_syscall_32+0x32/0x70 [ 100.835335][ T6870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.835357][ T6870] RIP: 0023:0xf7fb4fec [ 100.835381][ T6870] Code: Unable to access opcode bytes at 0xf7fb4fc2. [ 100.835390][ T6870] RSP: 002b:00000000ff820b00 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 100.835406][ T6870] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ff820b10 [ 100.835418][ T6870] RDX: 00000000f7446ff4 RSI: 00000000f7282769 RDI: 00000000ff820b6c [ 100.835429][ T6870] RBP: 00000000ff820c08 R08: 0000000000000000 R09: 0000000000000000 [ 100.835440][ T6870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.835451][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.835474][ T6870] [ 100.835484][ T6870] socket: no more sockets [ 100.835948][ T6870] FAULT_INJECTION: forcing a failure. [ 100.835948][ T6870] name failslab, interval 1, probability 10, space 0, times 33 [ 100.836208][ T5818] FAULT_INJECTION: forcing a failure. [ 100.836208][ T5818] name failslab, interval 1, probability 10, space 0, times 33 [ 100.836225][ T5818] CPU: 3 UID: 0 PID: 5818 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 100.836238][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.836247][ T5818] Workqueue: bat_events batadv_mcast_mla_update [ 100.836267][ T5818] Call Trace: [ 100.836271][ T5818] [ 100.836275][ T5818] dump_stack_lvl+0x100/0x190 [ 100.836289][ T5818] should_fail_ex.cold+0x5/0xa [ 100.836301][ T5818] should_failslab+0xc2/0x120 [ 100.836316][ T5818] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.836328][ T5818] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 100.836348][ T5818] batadv_mcast_mla_update+0x19ae/0x3200 [ 100.836368][ T5818] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 100.836388][ T5818] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.836410][ T5818] ? rcu_is_watching+0x12/0xc0 [ 100.836425][ T5818] process_one_work+0xa23/0x1940 [ 100.836447][ T5818] ? __pfx_process_one_work+0x10/0x10 [ 100.836467][ T5818] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 100.836485][ T5818] worker_thread+0x5ef/0xe50 [ 100.836511][ T5818] ? kthread+0x13a/0x450 [ 100.836525][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 100.836540][ T5818] kthread+0x370/0x450 [ 100.836554][ T5818] ? __pfx_kthread+0x10/0x10 [ 100.836569][ T5818] ret_from_fork+0x72b/0xd50 [ 100.836583][ T5818] ? __pfx_ret_from_fork+0x10/0x10 [ 100.836598][ T5818] ? __switch_to+0x800/0x10f0 [ 100.836615][ T5818] ? __pfx_kthread+0x10/0x10 [ 100.836630][ T5818] ret_from_fork_asm+0x1a/0x30 [ 100.836651][ T5818] [ 100.836658][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.836672][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.836679][ T5150] Call Trace: [ 100.836683][ T5150] [ 100.836688][ T5150] dump_stack_lvl+0x100/0x190 [ 100.836702][ T5150] should_fail_ex.cold+0x5/0xa [ 100.836714][ T5150] should_failslab+0xc2/0x120 [ 100.836729][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.836754][ T5150] ? do_getname+0x35/0x390 [ 100.836772][ T5150] do_getname+0x35/0x390 [ 100.836787][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.836800][ T5150] do_syscall_64+0x115/0x840 [ 100.836813][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.836826][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.836838][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.836847][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.836858][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.836869][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.836876][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.836882][ T5150] RBP: 0000000000000000 R08: 000000000600f1c4 R09: 0000000000000001 [ 100.836889][ T5150] R10: 0000000000004a6e R11: 0000000000000202 R12: 0000000000000000 [ 100.836896][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.836909][ T5150] [ 100.836945][ T5150] FAULT_INJECTION: forcing a failure. [ 100.836945][ T5150] name failslab, interval 1, probability 10, space 0, times 29 [ 100.836979][ T5836] CPU: 3 UID: 0 PID: 5836 Comm: kworker/3:4 Not tainted syzkaller #0 PREEMPT(full) [ 100.836993][ T5836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.837000][ T5836] Workqueue: events nsim_fib_event_work [ 100.837015][ T5836] Call Trace: [ 100.837019][ T5836] [ 100.837024][ T5836] dump_stack_lvl+0x100/0x190 [ 100.837037][ T5836] should_fail_ex.cold+0x5/0xa [ 100.837049][ T5836] should_failslab+0xc2/0x120 [ 100.837064][ T5836] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.837076][ T5836] ? nsim_fib_event_work+0x156d/0x6310 [ 100.837089][ T5836] nsim_fib_event_work+0x156d/0x6310 [ 100.837106][ T5836] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.837123][ T5836] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 100.837137][ T5836] ? rcu_is_watching+0x12/0xc0 [ 100.837153][ T5836] process_one_work+0xa23/0x1940 [ 100.837174][ T5836] ? __pfx_process_one_work+0x10/0x10 [ 100.837194][ T5836] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 100.837206][ T5836] worker_thread+0x5ef/0xe50 [ 100.837225][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 100.837242][ T5836] ? kthread+0x13a/0x450 [ 100.837255][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 100.837270][ T5836] kthread+0x370/0x450 [ 100.837283][ T5836] ? __pfx_kthread+0x10/0x10 [ 100.837299][ T5836] ret_from_fork+0x72b/0xd50 [ 100.837313][ T5836] ? __pfx_ret_from_fork+0x10/0x10 [ 100.837327][ T5836] ? __switch_to+0x800/0x10f0 [ 100.837344][ T5836] ? __pfx_kthread+0x10/0x10 [ 100.837359][ T5836] ret_from_fork_asm+0x1a/0x30 [ 100.837380][ T5836] [ 100.839344][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.839360][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.839367][ T6870] Call Trace: [ 100.839371][ T6870] [ 100.839376][ T6870] dump_stack_lvl+0x100/0x190 [ 100.839389][ T6870] should_fail_ex.cold+0x5/0xa [ 100.839401][ T6870] should_failslab+0xc2/0x120 [ 100.839416][ T6870] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.839428][ T6870] ? inet_alloc_ifa+0x43/0x190 [ 100.839442][ T6870] inet_alloc_ifa+0x43/0x190 [ 100.839453][ T6870] inet_rtm_newaddr+0x3b5/0x18b0 [ 100.839467][ T6870] ? find_held_lock+0x2b/0x80 [ 100.839481][ T6870] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 100.839496][ T6870] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.839512][ T6870] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.839529][ T6870] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 100.839541][ T6870] rtnetlink_rcv_msg+0x95e/0xe90 [ 100.839552][ T5721] FAULT_INJECTION: forcing a failure. [ 100.839552][ T5721] name failslab, interval 1, probability 10, space 0, times 28 [ 100.839558][ T6870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.839577][ T6870] ? ref_tracker_free+0x37e/0x6c0 [ 100.839590][ T6870] netlink_rcv_skb+0x159/0x420 [ 100.839603][ T6870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.839619][ T6870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.839636][ T6870] ? netlink_deliver_tap+0x1ae/0xcc0 [ 100.839650][ T6870] netlink_unicast+0x585/0x850 [ 100.839663][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 100.839679][ T6870] netlink_sendmsg+0x8b0/0xda0 [ 100.839693][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.839706][ T6870] ? apparmor_socket_sendmsg+0x15b/0x270 [ 100.839721][ T6870] __sys_sendto+0x48b/0x4e0 [ 100.839734][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.839746][ T6870] ? __pfx___sys_sendto+0x10/0x10 [ 100.839773][ T6870] __ia32_compat_sys_socketcall+0x59a/0x770 [ 100.839792][ T6870] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 100.839812][ T6870] ? __pfx_fput_close_sync+0x10/0x10 [ 100.839832][ T6870] do_int80_emulation+0x14b/0x720 [ 100.839851][ T6870] asm_int80_emulation+0x1a/0x20 [ 100.839862][ T6870] RIP: 0023:0xf71b736b [ 100.839871][ T6870] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.839882][ T6870] RSP: 002b:00000000ff820a7c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 100.839892][ T6870] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff820b24 [ 100.839899][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.839906][ T6870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.839912][ T6870] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.839919][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.839932][ T6870] [ 100.840083][ T13] FAULT_INJECTION: forcing a failure. [ 100.840083][ T13] name failslab, interval 1, probability 10, space 0, times 26 [ 100.840100][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 100.840113][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.840121][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.840136][ T13] Call Trace: [ 100.840140][ T13] [ 100.840162][ T13] dump_stack_lvl+0x100/0x190 [ 100.840177][ T13] should_fail_ex.cold+0x5/0xa [ 100.840189][ T13] should_failslab+0xc2/0x120 [ 100.840204][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.840218][ T13] ? dst_alloc+0x99/0x1a0 [ 100.840235][ T13] dst_alloc+0x99/0x1a0 [ 100.840249][ T13] rt_dst_alloc+0x35/0x3a0 [ 100.840264][ T13] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 100.840285][ T13] ip_route_output_key_hash+0x118/0x2b0 [ 100.840301][ T13] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 100.840318][ T13] ? lock_acquire+0x1b9/0x370 [ 100.840336][ T13] ? dst_cache_get_ip4+0x5c8/0x860 [ 100.840351][ T13] ? dst_cache_get_ip4+0x5c8/0x860 [ 100.840367][ T13] ip_route_output_flow+0x27/0x150 [ 100.840385][ T13] udp_tunnel_dst_lookup+0x24b/0x3f0 [ 100.840400][ T13] ? __pfx_udp_tunnel_dst_lookup+0x10/0x10 [ 100.840415][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.840433][ T13] geneve_xmit+0xf74/0x4070 [ 100.840451][ T13] ? sk_tx_queue_get+0x91/0x270 [ 100.840462][ T13] ? __pfx_geneve_xmit+0x10/0x10 [ 100.840475][ T13] ? validate_xmit_xfrm+0x457/0x13c0 [ 100.840500][ T13] ? dev_hard_start_xmit+0x121/0x760 [ 100.840512][ T13] dev_hard_start_xmit+0x121/0x760 [ 100.840527][ T13] __dev_queue_xmit+0x1bbf/0x4970 [ 100.840543][ T13] ? look_up_lock_class+0x64/0x120 [ 100.840557][ T13] ? __pfx___dev_queue_xmit+0x10/0x10 [ 100.840569][ T13] ? register_lock_class+0x40/0x560 [ 100.840589][ T13] ? __lock_acquire+0x49f/0x1a40 [ 100.840613][ T13] ? __asan_memcpy+0x3c/0x60 [ 100.840626][ T13] ? eth_header+0x120/0x1f0 [ 100.840637][ T13] neigh_resolve_output+0x51f/0x8f0 [ 100.840660][ T13] ip6_finish_output2+0xb0f/0x1ce0 [ 100.840679][ T13] __ip6_finish_output+0x357/0xdf0 [ 100.840696][ T13] ip6_output+0x2aa/0xa60 [ 100.840710][ T13] ? __pfx_ip6_output+0x10/0x10 [ 100.840726][ T13] ? __pfx_ip6_finish_output+0x10/0x10 [ 100.840740][ T13] ? ndisc_send_skb+0xbba/0x1bf0 [ 100.840755][ T13] ? ndisc_send_skb+0xbba/0x1bf0 [ 100.840771][ T13] ? __pfx_ip6_output+0x10/0x10 [ 100.840784][ T13] ndisc_send_skb+0xa85/0x1bf0 [ 100.840801][ T13] ? __pfx_ndisc_send_skb+0x10/0x10 [ 100.840815][ T13] ? ndisc_alloc_skb+0x319/0x530 [ 100.840830][ T13] ? __pfx_dst_output+0x10/0x10 [ 100.840845][ T13] ? __asan_memcpy+0x3c/0x60 [ 100.840861][ T13] ? mark_held_locks+0x40/0x70 [ 100.840880][ T13] ndisc_send_ns+0xc6/0x140 [ 100.840894][ T13] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 100.840912][ T13] ? __pfx_ndisc_send_ns+0x10/0x10 [ 100.840931][ T13] addrconf_dad_work+0xca1/0x1360 [ 100.840947][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.840962][ T13] ? rcu_is_watching+0x12/0xc0 [ 100.840977][ T13] process_one_work+0xa23/0x1940 [ 100.840998][ T13] ? __pfx_process_one_work+0x10/0x10 [ 100.841018][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.841033][ T13] worker_thread+0x5ef/0xe50 [ 100.841054][ T13] ? kthread+0x13a/0x450 [ 100.841067][ T13] ? __pfx_worker_thread+0x10/0x10 [ 100.841082][ T13] kthread+0x370/0x450 [ 100.841095][ T13] ? __pfx_kthread+0x10/0x10 [ 100.841110][ T13] ret_from_fork+0x72b/0xd50 [ 100.841124][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 100.841138][ T13] ? __switch_to+0x800/0x10f0 [ 100.841155][ T13] ? __pfx_kthread+0x10/0x10 [ 100.841170][ T13] ret_from_fork_asm+0x1a/0x30 [ 100.841191][ T13] [ 100.841268][ T13] FAULT_INJECTION: forcing a failure. [ 100.841268][ T13] name failslab, interval 1, probability 10, space 0, times 25 [ 100.841324][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 100.841336][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.841343][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.841357][ T13] Call Trace: [ 100.841360][ T13] [ 100.841364][ T13] dump_stack_lvl+0x100/0x190 [ 100.841376][ T13] should_fail_ex.cold+0x5/0xa [ 100.841388][ T13] should_failslab+0xc2/0x120 [ 100.841403][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.841417][ T13] ? fib6_add_1+0x2b0/0x1700 [ 100.841430][ T13] fib6_add_1+0x2b0/0x1700 [ 100.841446][ T13] fib6_add+0x1c5/0x1d30 [ 100.841461][ T13] ? do_raw_spin_lock+0x128/0x260 [ 100.841473][ T13] ? __pfx_fib6_add+0x10/0x10 [ 100.841485][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.841504][ T13] ip6_ins_rt+0xb5/0x110 [ 100.841518][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 100.841533][ T13] ? nlmsg_notify+0xbf/0x290 [ 100.841545][ T13] ? nlmsg_notify+0xdc/0x290 [ 100.841556][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.841572][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 100.841585][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 100.841595][ T13] ? __cancel_work+0x2b5/0x340 [ 100.841612][ T13] ? __cancel_work+0x245/0x340 [ 100.841628][ T13] ? __pfx___cancel_work+0x10/0x10 [ 100.841645][ T13] ? __lock_acquire+0x49f/0x1a40 [ 100.841664][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 100.841677][ T13] addrconf_dad_completed+0x195/0xff0 [ 100.841693][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 100.841711][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 100.841724][ T13] addrconf_dad_work+0x83c/0x1360 [ 100.841739][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.841755][ T13] ? rcu_is_watching+0x12/0xc0 [ 100.841769][ T13] process_one_work+0xa23/0x1940 [ 100.841790][ T13] ? __pfx_process_one_work+0x10/0x10 [ 100.841809][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.841824][ T13] worker_thread+0x5ef/0xe50 [ 100.841844][ T13] ? kthread+0x13a/0x450 [ 100.841857][ T13] ? __pfx_worker_thread+0x10/0x10 [ 100.841872][ T13] kthread+0x370/0x450 [ 100.841885][ T13] ? __pfx_kthread+0x10/0x10 [ 100.841900][ T13] ret_from_fork+0x72b/0xd50 [ 100.841914][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 100.841928][ T13] ? __switch_to+0x800/0x10f0 [ 100.841944][ T13] ? __pfx_kthread+0x10/0x10 [ 100.841959][ T13] ret_from_fork_asm+0x1a/0x30 [ 100.841979][ T13] [ 100.842722][ T13] FAULT_INJECTION: forcing a failure. [ 100.842722][ T13] name failslab, interval 1, probability 10, space 0, times 24 [ 100.842737][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 100.842749][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.842756][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.842770][ T13] Call Trace: [ 100.842774][ T13] [ 100.842778][ T13] dump_stack_lvl+0x100/0x190 [ 100.842790][ T13] should_fail_ex.cold+0x5/0xa [ 100.842802][ T13] should_failslab+0xc2/0x120 [ 100.842817][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.842831][ T13] ? fib6_add_1+0x33b/0x1700 [ 100.842844][ T13] fib6_add_1+0x33b/0x1700 [ 100.842859][ T13] fib6_add+0x1c5/0x1d30 [ 100.842874][ T13] ? do_raw_spin_lock+0x128/0x260 [ 100.842886][ T13] ? __pfx_fib6_add+0x10/0x10 [ 100.842898][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.842913][ T13] ip6_ins_rt+0xb5/0x110 [ 100.842926][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 100.842942][ T13] ? nlmsg_notify+0xbf/0x290 [ 100.842953][ T13] ? nlmsg_notify+0xdc/0x290 [ 100.842964][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.842980][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 100.842992][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 100.843002][ T13] ? __cancel_work+0x2b5/0x340 [ 100.843019][ T13] ? __cancel_work+0x245/0x340 [ 100.843036][ T13] ? __pfx___cancel_work+0x10/0x10 [ 100.843053][ T13] ? __lock_acquire+0x49f/0x1a40 [ 100.843071][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 100.843085][ T13] addrconf_dad_completed+0x195/0xff0 [ 100.843101][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 100.843119][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 100.843134][ T13] addrconf_dad_work+0x83c/0x1360 [ 100.843149][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.843164][ T13] ? rcu_is_watching+0x12/0xc0 [ 100.843179][ T13] process_one_work+0xa23/0x1940 [ 100.843199][ T13] ? __pfx_process_one_work+0x10/0x10 [ 100.843218][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.843233][ T13] worker_thread+0x5ef/0xe50 [ 100.843253][ T13] ? kthread+0x13a/0x450 [ 100.843266][ T13] ? __pfx_worker_thread+0x10/0x10 [ 100.843280][ T13] kthread+0x370/0x450 [ 100.843294][ T13] ? __pfx_kthread+0x10/0x10 [ 100.843309][ T13] ret_from_fork+0x72b/0xd50 [ 100.843322][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 100.843336][ T13] ? __switch_to+0x800/0x10f0 [ 100.843352][ T13] ? __pfx_kthread+0x10/0x10 [ 100.843367][ T13] ret_from_fork_asm+0x1a/0x30 [ 100.843387][ T13] [ 100.843394][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.843408][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.843414][ T5150] Call Trace: [ 100.843419][ T5150] [ 100.843423][ T5150] dump_stack_lvl+0x100/0x190 [ 100.843436][ T5150] should_fail_ex.cold+0x5/0xa [ 100.843448][ T5150] should_failslab+0xc2/0x120 [ 100.843463][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.843476][ T13] FAULT_INJECTION: forcing a failure. [ 100.843476][ T13] name failslab, interval 1, probability 10, space 0, times 23 [ 100.843477][ T5150] ? do_getname+0x35/0x390 [ 100.843493][ T5150] do_getname+0x35/0x390 [ 100.843507][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.843523][ T5150] do_syscall_64+0x115/0x840 [ 100.843536][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.843549][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.843560][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.843569][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.843580][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.843590][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.843597][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.843604][ T5150] RBP: 0000000000000000 R08: 000000000601000c R09: 0000000000000001 [ 100.843611][ T5150] R10: 0000000000004a6e R11: 0000000000000202 R12: 0000000000000000 [ 100.843617][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.843631][ T5150] [ 100.843669][ T5150] FAULT_INJECTION: forcing a failure. [ 100.843669][ T5150] name failslab, interval 1, probability 10, space 0, times 22 [ 100.843683][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.843695][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.843701][ T5150] Call Trace: [ 100.843705][ T5150] [ 100.843709][ T5150] dump_stack_lvl+0x100/0x190 [ 100.843721][ T5150] should_fail_ex.cold+0x5/0xa [ 100.843733][ T5150] should_failslab+0xc2/0x120 [ 100.843748][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.843762][ T5150] ? __d_alloc+0x35/0xa50 [ 100.843776][ T5150] __d_alloc+0x35/0xa50 [ 100.843789][ T5150] d_alloc+0x4a/0x1e0 [ 100.843802][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.843816][ T5150] ? mnt_want_write+0x161/0x410 [ 100.843832][ T5150] filename_unlinkat+0x275/0x730 [ 100.843844][ T5150] ? __might_fault+0xc5/0x140 [ 100.843857][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.843874][ T5150] ? do_getname+0x191/0x390 [ 100.843889][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.843901][ T5150] do_syscall_64+0x115/0x840 [ 100.843913][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.843926][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.843937][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.843946][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.843956][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.843966][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.843973][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.843980][ T5150] RBP: 0000000000000000 R08: 0000000006011a41 R09: 0000000000000001 [ 100.843986][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.843992][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.844005][ T5150] [ 100.844241][ T5150] FAULT_INJECTION: forcing a failure. [ 100.844241][ T5150] name failslab, interval 1, probability 10, space 0, times 21 [ 100.844255][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.844266][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.844272][ T5150] Call Trace: [ 100.844276][ T5150] [ 100.844280][ T5150] dump_stack_lvl+0x100/0x190 [ 100.844292][ T5150] should_fail_ex.cold+0x5/0xa [ 100.844304][ T5150] should_failslab+0xc2/0x120 [ 100.844319][ T5150] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.844333][ T5150] ? __d_alloc+0x35/0xa50 [ 100.844347][ T5150] __d_alloc+0x35/0xa50 [ 100.844360][ T5150] d_alloc+0x4a/0x1e0 [ 100.844372][ T5150] lookup_one_qstr_excl+0x171/0x250 [ 100.844386][ T5150] ? mnt_want_write+0x161/0x410 [ 100.844403][ T5150] filename_unlinkat+0x275/0x730 [ 100.844415][ T5150] ? __might_fault+0xc5/0x140 [ 100.844427][ T5150] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.844444][ T5150] ? do_getname+0x191/0x390 [ 100.844459][ T5150] __x64_sys_unlink+0x46/0x70 [ 100.844471][ T5150] do_syscall_64+0x115/0x840 [ 100.844484][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.844497][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.844508][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.844516][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.844531][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.844541][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.844548][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.844554][ T5150] RBP: 0000000000000000 R08: 0000000006011c85 R09: 0000000000000001 [ 100.844561][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.844568][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.844581][ T5150] [ 100.844804][ T5150] FAULT_INJECTION: forcing a failure. [ 100.844804][ T5150] name failslab, interval 1, probability 10, space 0, times 20 [ 100.844817][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.844829][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.844835][ T5150] Call Trace: [ 100.844838][ T5150] [ 100.844842][ T5150] dump_stack_lvl+0x100/0x190 [ 100.844855][ T5150] should_fail_ex.cold+0x5/0xa [ 100.844866][ T5150] should_failslab+0xc2/0x120 [ 100.844881][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.844895][ T5150] ? do_getname+0x35/0x390 [ 100.844910][ T5150] do_getname+0x35/0x390 [ 100.844924][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.844936][ T5150] do_syscall_64+0x115/0x840 [ 100.844949][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.844962][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.844973][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.844981][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.844991][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.845001][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.845008][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.845014][ T5150] RBP: 0000000000000000 R08: 0000000006011ebf R09: 0000000000000001 [ 100.845021][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.845027][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.845040][ T5150] [ 100.845080][ T5150] FAULT_INJECTION: forcing a failure. [ 100.845080][ T5150] name failslab, interval 1, probability 10, space 0, times 19 [ 100.845092][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.845103][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.845109][ T5150] Call Trace: [ 100.845113][ T5150] [ 100.845117][ T5150] dump_stack_lvl+0x100/0x190 [ 100.845129][ T5150] should_fail_ex.cold+0x5/0xa [ 100.845140][ T5150] should_failslab+0xc2/0x120 [ 100.845155][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.845169][ T5150] ? do_getname+0x35/0x390 [ 100.845184][ T5150] do_getname+0x35/0x390 [ 100.845198][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.845210][ T5150] do_syscall_64+0x115/0x840 [ 100.845223][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.845235][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.845246][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.845254][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.845265][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.845275][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.845282][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.845288][ T5150] RBP: 0000000000000000 R08: 0000000006011fd3 R09: 0000000000000001 [ 100.845295][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.845301][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.845314][ T5150] [ 100.845580][ T5150] FAULT_INJECTION: forcing a failure. [ 100.845580][ T5150] name failslab, interval 1, probability 10, space 0, times 18 [ 100.845594][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.845605][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.845611][ T5150] Call Trace: [ 100.845614][ T5150] [ 100.845618][ T5150] dump_stack_lvl+0x100/0x190 [ 100.845630][ T5150] should_fail_ex.cold+0x5/0xa [ 100.845642][ T5150] should_failslab+0xc2/0x120 [ 100.845656][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.845670][ T5150] ? do_getname+0x35/0x390 [ 100.845696][ T5150] do_getname+0x35/0x390 [ 100.845714][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.845726][ T5150] do_syscall_64+0x115/0x840 [ 100.845738][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.845751][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.845762][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.845770][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.845781][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.845791][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.845798][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.845805][ T5150] RBP: 0000000000000000 R08: 00000000060121c7 R09: 0000000000000001 [ 100.845811][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.845817][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.845831][ T5150] [ 100.846055][ T5150] FAULT_INJECTION: forcing a failure. [ 100.846055][ T5150] name failslab, interval 1, probability 10, space 0, times 17 [ 100.846068][ T5150] CPU: 2 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.846080][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.846086][ T5150] Call Trace: [ 100.846089][ T5150] [ 100.846093][ T5150] dump_stack_lvl+0x100/0x190 [ 100.846106][ T5150] should_fail_ex.cold+0x5/0xa [ 100.846117][ T5150] should_failslab+0xc2/0x120 [ 100.846132][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.846145][ T5150] ? do_getname+0x35/0x390 [ 100.846160][ T5150] do_getname+0x35/0x390 [ 100.846175][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.846187][ T5150] do_syscall_64+0x115/0x840 [ 100.846199][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.846212][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.846223][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.846231][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.846241][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.846252][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.846258][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.846265][ T5150] RBP: 0000000000000000 R08: 00000000060123a2 R09: 0000000000000001 [ 100.846271][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.846277][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.846290][ T5150] [ 100.846303][ T5150] FAULT_INJECTION: forcing a failure. [ 100.846303][ T5150] name failslab, interval 1, probability 10, space 0, times 16 [ 100.847382][ T5721] CPU: 0 UID: 0 PID: 5721 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.847396][ T5721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.847403][ T5721] Call Trace: [ 100.847406][ T5721] [ 100.847411][ T5721] dump_stack_lvl+0x100/0x190 [ 100.847425][ T5721] should_fail_ex.cold+0x5/0xa [ 100.847437][ T5721] should_failslab+0xc2/0x120 [ 100.847452][ T5721] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.847466][ T5721] ? __alloc_skb+0x140/0x710 [ 100.847483][ T5721] __alloc_skb+0x140/0x710 [ 100.847497][ T5721] ? __pfx___alloc_skb+0x10/0x10 [ 100.847514][ T5721] tcp_stream_alloc_skb+0x34/0x660 [ 100.847531][ T5721] tcp_sendmsg_locked+0x13b2/0x44d0 [ 100.847549][ T5721] ? __lock_acquire+0x49f/0x1a40 [ 100.847570][ T5721] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 100.847587][ T5721] ? do_raw_spin_lock+0x128/0x260 [ 100.847599][ T5721] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.847614][ T5721] ? __local_bh_enable_ip+0x9e/0x120 [ 100.847628][ T5721] tcp_sendmsg+0x2e/0x50 [ 100.847642][ T5721] ? __pfx_tcp_sendmsg+0x10/0x10 [ 100.847657][ T5721] inet_sendmsg+0xb9/0x140 [ 100.847673][ T5721] sock_write_iter+0x4ea/0x5b0 [ 100.847684][ T5721] ? __pfx_inet_sendmsg+0x10/0x10 [ 100.847698][ T5721] ? __pfx_sock_write_iter+0x10/0x10 [ 100.847712][ T5721] ? bpf_lsm_file_permission+0x9/0x10 [ 100.847724][ T5721] ? security_file_permission+0x76/0x210 [ 100.847740][ T5721] ? rw_verify_area+0xce/0x6d0 [ 100.847756][ T5721] vfs_write+0x6ac/0x1050 [ 100.847767][ T5721] ? __pfx_sock_write_iter+0x10/0x10 [ 100.847779][ T5721] ? __pfx_vfs_write+0x10/0x10 [ 100.847794][ T5721] ? __pfx_do_compat_pselect+0x10/0x10 [ 100.847814][ T5721] ksys_write+0x1f8/0x250 [ 100.847824][ T5721] ? __pfx_ksys_write+0x10/0x10 [ 100.847838][ T5721] __do_fast_syscall_32+0xe7/0x970 [ 100.847858][ T5721] do_fast_syscall_32+0x32/0x70 [ 100.847872][ T5721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.847886][ T5721] RIP: 0023:0xf706efec [ 100.847895][ T5721] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.847906][ T5721] RSP: 002b:00000000ffabb640 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 100.847917][ T5721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f0c668e8 [ 100.847924][ T5721] RDX: 0000000000000718 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.847930][ T5721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.847936][ T5721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.847942][ T5721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.847955][ T5721] [ 100.849085][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 100.849099][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.849107][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.849122][ T13] Call Trace: [ 100.849126][ T13] [ 100.849130][ T13] dump_stack_lvl+0x100/0x190 [ 100.849143][ T13] should_fail_ex.cold+0x5/0xa [ 100.849155][ T13] should_failslab+0xc2/0x120 [ 100.849170][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.849185][ T13] ? __alloc_skb+0x140/0x710 [ 100.849201][ T13] __alloc_skb+0x140/0x710 [ 100.849214][ T13] ? __alloc_skb+0x5b7/0x710 [ 100.849227][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 100.849241][ T13] ? find_held_lock+0x2b/0x80 [ 100.849254][ T13] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 100.849272][ T13] inet6_rt_notify+0x1d2/0x4c0 [ 100.849292][ T13] fib6_add_rt2node+0x1c1d/0x3df0 [ 100.849310][ T13] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 100.849329][ T13] ? fib6_add+0x60e/0x1d30 [ 100.849341][ T13] fib6_add+0x60e/0x1d30 [ 100.849355][ T13] ? do_raw_spin_lock+0x128/0x260 [ 100.849367][ T13] ? __pfx_fib6_add+0x10/0x10 [ 100.849378][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.849393][ T13] ip6_ins_rt+0xb5/0x110 [ 100.849407][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 100.849422][ T13] ? nlmsg_notify+0xbf/0x290 [ 100.849432][ T13] ? nlmsg_notify+0xdc/0x290 [ 100.849444][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.849461][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 100.849473][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 100.849497][ T13] ? __cancel_work+0x2b5/0x340 [ 100.849517][ T13] ? __cancel_work+0x245/0x340 [ 100.849533][ T13] ? __pfx___cancel_work+0x10/0x10 [ 100.849550][ T13] ? __lock_acquire+0x49f/0x1a40 [ 100.849568][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 100.849582][ T13] addrconf_dad_completed+0x195/0xff0 [ 100.849598][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 100.849616][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 100.849629][ T13] addrconf_dad_work+0x83c/0x1360 [ 100.849644][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.849660][ T13] ? rcu_is_watching+0x12/0xc0 [ 100.849674][ T13] process_one_work+0xa23/0x1940 [ 100.849695][ T13] ? __pfx_process_one_work+0x10/0x10 [ 100.849715][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.849730][ T13] worker_thread+0x5ef/0xe50 [ 100.849751][ T13] ? kthread+0x13a/0x450 [ 100.849764][ T13] ? __pfx_worker_thread+0x10/0x10 [ 100.849779][ T13] kthread+0x370/0x450 [ 100.849793][ T13] ? __pfx_kthread+0x10/0x10 [ 100.849807][ T13] ret_from_fork+0x72b/0xd50 [ 100.849821][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 100.849835][ T13] ? __switch_to+0x800/0x10f0 [ 100.849852][ T13] ? __pfx_kthread+0x10/0x10 [ 100.849866][ T13] ret_from_fork_asm+0x1a/0x30 [ 100.849887][ T13] [ 100.851469][ T13] FAULT_INJECTION: forcing a failure. [ 100.851469][ T13] name failslab, interval 1, probability 10, space 0, times 4 [ 100.851972][ T24] FAULT_INJECTION: forcing a failure. [ 100.851972][ T24] name failslab, interval 1, probability 10, space 0, times 4 [ 100.852141][ T6853] FAULT_INJECTION: forcing a failure. [ 100.852141][ T6853] name failslab, interval 1, probability 10, space 0, times 4 [ 100.852178][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.852191][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.852197][ T6853] Call Trace: [ 100.852201][ T6853] [ 100.852206][ T6853] dump_stack_lvl+0x100/0x190 [ 100.852220][ T6853] should_fail_ex.cold+0x5/0xa [ 100.852237][ T6853] should_failslab+0xc2/0x120 [ 100.852257][ T6853] __kmalloc_noprof+0xfc/0x820 [ 100.852274][ T6853] ? rcu_is_watching+0x12/0xc0 [ 100.852293][ T6853] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.852320][ T6853] tomoyo_realpath_from_path+0xb6/0x690 [ 100.852348][ T6853] tomoyo_check_open_permission+0x2af/0x3c0 [ 100.852369][ T6853] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 100.852389][ T6853] ? do_fast_syscall_32+0x32/0x70 [ 100.852415][ T6853] ? hook_file_open+0x24f/0x8f0 [ 100.852451][ T6853] ? path_get+0x61/0x80 [ 100.852471][ T6853] tomoyo_file_open+0x6b/0x90 [ 100.852489][ T6853] security_file_open+0xb5/0x1e0 [ 100.852512][ T6853] do_dentry_open+0x588/0x14d0 [ 100.852535][ T6853] vfs_open+0x82/0x3f0 [ 100.852557][ T6853] path_openat+0x2873/0x4280 [ 100.852583][ T6853] ? __pfx_path_openat+0x10/0x10 [ 100.852607][ T6853] do_file_open+0x20e/0x430 [ 100.852622][ T6853] ? __lock_acquire+0x49f/0x1a40 [ 100.852647][ T6853] ? __pfx_do_file_open+0x10/0x10 [ 100.852679][ T6853] ? _raw_spin_unlock+0x28/0x50 [ 100.852696][ T6853] ? alloc_fd+0x471/0x7a0 [ 100.852718][ T6853] do_sys_openat2+0x10f/0x1e0 [ 100.852738][ T6853] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.852761][ T6853] ? kmem_cache_free+0x127/0x6b0 [ 100.852777][ T6853] ? __pfx_path_umount+0x10/0x10 [ 100.852797][ T6853] __ia32_compat_sys_openat+0x12d/0x210 [ 100.852819][ T6853] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.852848][ T6853] ? __pfx___ia32_sys_umount+0x10/0x10 [ 100.852871][ T6853] __do_fast_syscall_32+0xe7/0x970 [ 100.852893][ T6853] do_fast_syscall_32+0x32/0x70 [ 100.852913][ T6853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.852932][ T6853] RIP: 0023:0xf70befec [ 100.852946][ T6853] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.852960][ T6853] RSP: 002b:00000000fff1daa0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 100.852975][ T6853] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000fff1ec10 [ 100.852985][ T6853] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f7486ff4 [ 100.852995][ T6853] RBP: 00000000fff1ec10 R08: 0000000000000000 R09: 0000000000000000 [ 100.853004][ T6853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.853014][ T6853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.853035][ T6853] [ 100.853042][ T6853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.853259][ T6853] FAULT_INJECTION: forcing a failure. [ 100.853259][ T6853] name failslab, interval 1, probability 10, space 0, times 3 [ 100.853280][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.853296][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.853305][ T6853] Call Trace: [ 100.853311][ T6853] [ 100.853316][ T6853] dump_stack_lvl+0x100/0x190 [ 100.853335][ T6853] should_fail_ex.cold+0x5/0xa [ 100.853353][ T6853] should_failslab+0xc2/0x120 [ 100.853373][ T6853] __kmalloc_noprof+0xfc/0x820 [ 100.853393][ T6853] ? tomoyo_encode2+0xfb/0x3c0 [ 100.853420][ T6853] tomoyo_encode2+0xfb/0x3c0 [ 100.853446][ T6853] tomoyo_encode+0x29/0x50 [ 100.853467][ T6853] tomoyo_realpath_from_path+0x18c/0x690 [ 100.853496][ T6853] tomoyo_path_perm+0x276/0x460 [ 100.853515][ T6853] ? tomoyo_path_perm+0x262/0x460 [ 100.853536][ T6853] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 100.853578][ T6853] ? __d_lookup+0x25c/0x4a0 [ 100.853607][ T6853] tomoyo_path_rmdir+0x91/0xe0 [ 100.853624][ T6853] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 100.853641][ T6853] ? lookup_dcache+0x66/0x170 [ 100.853663][ T6853] security_path_rmdir+0x145/0x2b0 [ 100.853683][ T6853] filename_rmdir+0x29d/0x5c0 [ 100.853702][ T6853] ? __pfx_filename_rmdir+0x10/0x10 [ 100.853728][ T6853] ? do_getname+0x191/0x390 [ 100.853750][ T6853] __ia32_sys_unlinkat+0xf5/0x130 [ 100.853770][ T6853] __do_fast_syscall_32+0xe7/0x970 [ 100.853828][ T6853] do_fast_syscall_32+0x32/0x70 [ 100.853856][ T6853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.853875][ T6853] RIP: 0023:0xf70befec [ 100.853887][ T6853] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.853902][ T6853] RSP: 002b:00000000fff1dac8 EFLAGS: 00000292 ORIG_RAX: 000000000000012d [ 100.853917][ T6853] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000fff1ec10 [ 100.853927][ T6853] RDX: 0000000000000200 RSI: 0000000000000065 RDI: 00000000fff1ec10 [ 100.853937][ T6853] RBP: 00000000f72c14fe R08: 0000000000000000 R09: 0000000000000000 [ 100.853947][ T6853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.853956][ T6853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.853977][ T6853] [ 100.853987][ T13] CPU: 3 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 100.854001][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.854008][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 100.854024][ T13] Call Trace: [ 100.854028][ T13] [ 100.854032][ T13] dump_stack_lvl+0x100/0x190 [ 100.854045][ T13] should_fail_ex.cold+0x5/0xa [ 100.854057][ T13] should_failslab+0xc2/0x120 [ 100.854072][ T13] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.854086][ T13] ? fib6_add_1+0x33b/0x1700 [ 100.854100][ T13] fib6_add_1+0x33b/0x1700 [ 100.854115][ T13] fib6_add+0x1c5/0x1d30 [ 100.854130][ T13] ? do_raw_spin_lock+0x128/0x260 [ 100.854142][ T13] ? __pfx_fib6_add+0x10/0x10 [ 100.854153][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.854169][ T13] ip6_ins_rt+0xb5/0x110 [ 100.854182][ T13] ? __pfx_ip6_ins_rt+0x10/0x10 [ 100.854197][ T13] ? nlmsg_notify+0xbf/0x290 [ 100.854208][ T13] ? nlmsg_notify+0xdc/0x290 [ 100.854219][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.854236][ T13] __ipv6_ifa_notify+0xbf1/0xf90 [ 100.854249][ T13] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 100.854259][ T13] ? __cancel_work+0x2b5/0x340 [ 100.854276][ T13] ? __cancel_work+0x245/0x340 [ 100.854293][ T13] ? __pfx___cancel_work+0x10/0x10 [ 100.854310][ T13] ? __lock_acquire+0x49f/0x1a40 [ 100.854328][ T13] ? addrconf_dad_completed+0x195/0xff0 [ 100.854341][ T13] addrconf_dad_completed+0x195/0xff0 [ 100.854357][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 100.854375][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 100.854388][ T13] addrconf_dad_work+0x83c/0x1360 [ 100.854403][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.854419][ T13] ? rcu_is_watching+0x12/0xc0 [ 100.854433][ T13] process_one_work+0xa23/0x1940 [ 100.854454][ T13] ? __pfx_process_one_work+0x10/0x10 [ 100.854473][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 100.854488][ T13] worker_thread+0x5ef/0xe50 [ 100.854511][ T13] ? kthread+0x13a/0x450 [ 100.854525][ T13] ? __pfx_worker_thread+0x10/0x10 [ 100.854540][ T13] kthread+0x370/0x450 [ 100.854553][ T13] ? __pfx_kthread+0x10/0x10 [ 100.854568][ T13] ret_from_fork+0x72b/0xd50 [ 100.854582][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 100.854596][ T13] ? __switch_to+0x800/0x10f0 [ 100.854613][ T13] ? __pfx_kthread+0x10/0x10 [ 100.854628][ T13] ret_from_fork_asm+0x1a/0x30 [ 100.854648][ T13] [ 100.854670][ T13] FAULT_INJECTION: forcing a failure. [ 100.854670][ T13] name failslab, interval 1, probability 10, space 0, times 1 [ 100.854974][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.854989][ T5150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.854996][ T5150] Call Trace: [ 100.855000][ T5150] [ 100.855004][ T5150] dump_stack_lvl+0x100/0x190 [ 100.855019][ T5150] should_fail_ex.cold+0x5/0xa [ 100.855031][ T5150] should_failslab+0xc2/0x120 [ 100.855046][ T5150] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.855060][ T5150] ? do_getname+0x35/0x390 [ 100.855075][ T5150] do_getname+0x35/0x390 [ 100.855090][ T5150] __x64_sys_unlink+0x36/0x70 [ 100.855102][ T5150] do_syscall_64+0x115/0x840 [ 100.855115][ T5150] ? clear_bhb_loop+0x40/0x90 [ 100.855128][ T5150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.855139][ T5150] RIP: 0033:0x7f8e71d15937 [ 100.855149][ T5150] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.855160][ T5150] RSP: 002b:00007ffd2ff4abc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.855172][ T5150] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f8e71d15937 [ 100.855179][ T5150] RDX: 0000000000000000 RSI: 0000000005f5e100 RDI: 0000562d4d6a602e [ 100.855186][ T5150] RBP: 0000000000000000 R08: 000000000601249b R09: 0000000000000001 [ 100.855193][ T5150] R10: 0000000000004a70 R11: 0000000000000202 R12: 0000000000000000 [ 100.855199][ T5150] R13: 0000562d4d6c1100 R14: 0000000000000001 R15: 0000000000000000 [ 100.855213][ T5150] [ 100.855648][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 100.855663][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.855670][ T24] Workqueue: events nsim_fib_event_work [ 100.855685][ T24] Call Trace: [ 100.855689][ T24] [ 100.855694][ T24] dump_stack_lvl+0x100/0x190 [ 100.855707][ T24] should_fail_ex.cold+0x5/0xa [ 100.855719][ T24] should_failslab+0xc2/0x120 [ 100.855734][ T24] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.855746][ T24] ? nsim_fib_event_work+0x156d/0x6310 [ 100.855759][ T24] nsim_fib_event_work+0x156d/0x6310 [ 100.855776][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.855793][ T24] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 100.855808][ T24] ? rcu_is_watching+0x12/0xc0 [ 100.855823][ T24] process_one_work+0xa23/0x1940 [ 100.855845][ T24] ? __pfx_process_one_work+0x10/0x10 [ 100.855864][ T24] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 100.855877][ T24] worker_thread+0x5ef/0xe50 [ 100.855897][ T24] ? kthread+0x13a/0x450 [ 100.855910][ T24] ? __pfx_worker_thread+0x10/0x10 [ 100.855925][ T24] kthread+0x370/0x450 [ 100.855939][ T24] ? __pfx_kthread+0x10/0x10 [ 100.855954][ T24] ret_from_fork+0x72b/0xd50 [ 100.855968][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 100.855982][ T24] ? __switch_to+0x800/0x10f0 [ 100.855998][ T24] ? __pfx_kthread+0x10/0x10 [ 100.856014][ T24] ret_from_fork_asm+0x1a/0x30 [ 100.856035][ T24] [ 101.090102][ T6988] se_dev->se_dev_ptr already set for storage object [ 101.095202][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 101.095227][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.095239][ T13] Workqueue: ipv6_addrconf addrconf_dad_work [ 101.095269][ T13] Call Trace: [ 101.095276][ T13] [ 101.095283][ T13] dump_stack_lvl+0x100/0x190 [ 101.095306][ T13] should_fail_ex.cold+0x5/0xa [ 101.095327][ T13] should_failslab+0xc2/0x120 [ 101.095349][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 101.095372][ T13] ? __alloc_skb+0x140/0x710 [ 101.095399][ T13] __alloc_skb+0x140/0x710 [ 101.095419][ T13] ? __alloc_skb+0x5b7/0x710 [ 101.095434][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 101.095448][ T13] ? __lock_acquire+0x49f/0x1a40 [ 101.095468][ T13] mld_newpack.isra.0+0x18e/0xa20 [ 101.095486][ T13] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 101.095500][ T13] ? lock_acquire+0x1b9/0x370 [ 101.095522][ T13] ? add_grhead+0x299/0x340 [ 101.095535][ T13] add_grhead+0x299/0x340 [ 101.095551][ T13] add_grec+0x1389/0x1930 [ 101.095567][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 101.095582][ T13] ? __ipv6_ifa_notify+0x505/0xf90 [ 101.095595][ T13] ? __pfx_add_grec+0x10/0x10 [ 101.095613][ T13] mld_send_initial_cr+0x156/0x320 [ 101.095629][ T13] ipv6_mc_dad_complete+0xa7/0x1d0 [ 101.095647][ T13] addrconf_dad_completed+0xd91/0xff0 [ 101.095664][ T13] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 101.095682][ T13] ? addrconf_dad_work+0x83c/0x1360 [ 101.095695][ T13] addrconf_dad_work+0x83c/0x1360 [ 101.095710][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 101.095726][ T13] ? rcu_is_watching+0x12/0xc0 [ 101.095741][ T13] process_one_work+0xa23/0x1940 [ 101.095763][ T13] ? __pfx_process_one_work+0x10/0x10 [ 101.095782][ T13] ? __pfx_addrconf_dad_work+0x10/0x10 [ 101.095797][ T13] worker_thread+0x5ef/0xe50 [ 101.095818][ T13] ? kthread+0x13a/0x450 [ 101.095831][ T13] ? __pfx_worker_thread+0x10/0x10 [ 101.095845][ T13] kthread+0x370/0x450 [ 101.095859][ T13] ? __pfx_kthread+0x10/0x10 [ 101.095874][ T13] ret_from_fork+0x72b/0xd50 [ 101.095888][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 101.095902][ T13] ? __switch_to+0x800/0x10f0 [ 101.095919][ T13] ? __pfx_kthread+0x10/0x10 [ 101.095934][ T13] ret_from_fork_asm+0x1a/0x30 [ 101.095960][ T13] [ 101.328208][ T5752] Bluetooth: hci2: command tx timeout [ 104.852395][ T6997] se_dev->se_dev_ptr already set for storage object [ 104.919064][ T7000] netlink: 'syz.5.336': attribute type 4 has an invalid length. [ 105.215405][ T7011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.251909][ T24] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 105.255457][ T24] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 105.270385][ T1163] wlan1: authenticated [ 105.270522][ T7012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.278215][ T1163] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 105.389148][ T1163] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 105.498191][ T1163] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 105.502237][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.506120][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.514066][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.517765][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.520856][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.608651][ T1165] wlan1: association with 08:02:11:00:00:00 timed out [ 105.626922][ T5819] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.752242][ T5819] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.880457][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.883383][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.886021][ T7020] bridge_slave_0: entered allmulticast mode [ 105.889083][ T7020] bridge_slave_0: entered promiscuous mode [ 105.893513][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.896309][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.899160][ T7020] bridge_slave_1: entered allmulticast mode [ 105.902706][ T7020] bridge_slave_1: entered promiscuous mode [ 105.936875][ T5819] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.945829][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.950775][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.967836][ T7020] team0: Port device team_slave_0 added [ 105.973826][ T7020] team0: Port device team_slave_1 added [ 105.986684][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.989966][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.997699][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.001906][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.003985][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.011626][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.023655][ T5819] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.050200][ T7020] hsr_slave_0: entered promiscuous mode [ 106.052500][ T7020] hsr_slave_1: entered promiscuous mode [ 106.054506][ T7020] debugfs: 'hsr0' already exists in 'hsr' [ 106.056230][ T7020] Cannot create hsr debugfs directory [ 106.217601][ T5819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.329836][ T5819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.475081][ T5819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.576365][ T5819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.635978][ T7020] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 106.644385][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.648195][ T7020] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 106.652828][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.656393][ T7020] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 106.664094][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.666899][ T7020] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.671590][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.722152][ T5819] bridge_slave_1: left allmulticast mode [ 106.723949][ T5819] bridge_slave_1: left promiscuous mode [ 106.725842][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.731372][ T5819] bridge_slave_0: left allmulticast mode [ 106.733183][ T5819] bridge_slave_0: left promiscuous mode [ 106.735025][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.742732][ T5819] bridge_slave_1: left allmulticast mode [ 106.744456][ T5819] bridge_slave_1: left promiscuous mode [ 106.746273][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.749088][ T5747] Bluetooth: hci2: command tx timeout [ 106.751893][ T5819] bridge_slave_0: left allmulticast mode [ 106.753650][ T5819] bridge_slave_0: left promiscuous mode [ 106.755352][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.861486][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.867013][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.872914][ T5819] bond0 (unregistering): Released all slaves [ 106.946007][ T5819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.951691][ T5819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.956217][ T5819] bond0 (unregistering): Released all slaves [ 107.020046][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.034556][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.046308][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.048661][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.054390][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.056670][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.304333][ T5819] hsr_slave_0: left promiscuous mode [ 107.306899][ T5819] hsr_slave_1: left promiscuous mode [ 107.314234][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.316733][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.319790][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.322382][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.327064][ T5819] hsr_slave_0: left promiscuous mode [ 107.332994][ T5819] hsr_slave_1: left promiscuous mode [ 107.339478][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.342388][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.345588][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.348505][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.361406][ T5819] veth1_macvtap: left promiscuous mode [ 107.363276][ T5819] veth0_macvtap: left promiscuous mode [ 107.365209][ T5819] veth1_vlan: left promiscuous mode [ 107.367013][ T5819] veth0_vlan: left promiscuous mode [ 107.369327][ T5819] veth1_macvtap: left promiscuous mode [ 107.371291][ T5819] veth0_macvtap: left promiscuous mode [ 107.373291][ T5819] veth1_vlan: left promiscuous mode [ 107.375086][ T5819] veth0_vlan: left promiscuous mode [ 107.545760][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 107.548864][ T5747] Bluetooth: hci1: command tx timeout [ 107.560337][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 107.712423][ T5819] team0 (unregistering): Port device team_slave_1 removed [ 107.719517][ T5819] team0 (unregistering): Port device team_slave_0 removed [ 107.791691][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.940693][ T7020] veth0_vlan: entered promiscuous mode [ 107.947120][ T7020] veth1_vlan: entered promiscuous mode [ 107.962798][ T7020] veth0_macvtap: entered promiscuous mode [ 107.966954][ T7020] veth1_macvtap: entered promiscuous mode [ 107.977904][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.984363][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.992000][ T6713] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.997213][ T6713] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.005078][ T6713] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.007817][ T6713] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.044346][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.047040][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.066359][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.069753][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.828322][ T5747] Bluetooth: hci2: command tx timeout [ 109.628405][ T5747] Bluetooth: hci1: command tx timeout [ 111.708390][ T5747] Bluetooth: hci1: command tx timeout [ 113.788616][ T5747] Bluetooth: hci1: command tx timeout [ 116.348829][ T1162] ------------[ cut here ]------------ [ 116.350565][ T1162] !sta [ 116.350573][ T1162] WARNING: net/mac80211/mlme.c:4898 at ieee80211_mgd_probe_ap_send+0x3dd/0x4b0, CPU#3: kworker/u33:7/1162 [ 116.355250][ T1162] Modules linked in: [ 116.357370][ T1162] CPU: 3 UID: 0 PID: 1162 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 116.360885][ T1162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.364329][ T1162] Workqueue: events_unbound cfg80211_wiphy_work [ 116.366475][ T1162] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 116.369053][ T1162] Code: 00 31 ff 41 89 c5 89 c6 e8 10 91 c1 f6 45 85 ed 0f 85 ad fc ff ff e8 92 96 c1 f6 90 0f 0b 90 e9 9f fc ff ff e8 84 96 c1 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 84 d6 22 91 e8 df 24 31 f7 e9 5f [ 116.376183][ T1162] RSP: 0018:ffffc90006c77b60 EFLAGS: 00010293 [ 116.378602][ T1162] RAX: 0000000000000000 RBX: ffff8880758b0ec0 RCX: ffffc90006c77afc [ 116.381577][ T1162] RDX: ffff888021362540 RSI: ffffffff8b4815dc RDI: ffff888021362a04 [ 116.384514][ T1162] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 116.386873][ T1162] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880758b1920 [ 116.389822][ T1162] R13: ffff8880758b2cc2 R14: 0000000000000001 R15: 0000000000000000 [ 116.392702][ T1162] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 116.395401][ T1162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.397871][ T1162] CR2: 00007f680a967e9c CR3: 000000000e994000 CR4: 0000000000352ef0 [ 116.400968][ T1162] Call Trace: [ 116.402292][ T1162] [ 116.403363][ T1162] ieee80211_mgd_probe_ap+0x35e/0x420 [ 116.405274][ T1162] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 116.407776][ T1162] cfg80211_wiphy_work+0x2b7/0x550 [ 116.409548][ T1162] process_one_work+0xa23/0x1940 [ 116.411417][ T1162] ? __pfx_process_one_work+0x10/0x10 [ 116.413471][ T1162] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 116.415612][ T1162] worker_thread+0x5ef/0xe50 [ 116.417406][ T1162] ? kthread+0x13a/0x450 [ 116.419099][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 116.421054][ T1162] kthread+0x370/0x450 [ 116.422614][ T1162] ? __pfx_kthread+0x10/0x10 [ 116.424382][ T1162] ret_from_fork+0x72b/0xd50 [ 116.426156][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 116.427922][ T1162] ? __switch_to+0x800/0x10f0 [ 116.429416][ T1162] ? __pfx_kthread+0x10/0x10 [ 116.431093][ T1162] ret_from_fork_asm+0x1a/0x30 [ 116.432811][ T1162] [ 116.433998][ T1162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.436388][ T1162] CPU: 3 UID: 0 PID: 1162 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 116.439495][ T1162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.443193][ T1162] Workqueue: events_unbound cfg80211_wiphy_work [ 116.445579][ T1162] Call Trace: [ 116.446620][ T1162] [ 116.447766][ T1162] dump_stack_lvl+0x100/0x190 [ 116.449574][ T1162] vpanic+0x552/0x970 [ 116.451057][ T1162] ? __pfx_vpanic+0x10/0x10 [ 116.452608][ T1162] panic+0xd1/0xe0 [ 116.454037][ T1162] ? __pfx_panic+0x10/0x10 [ 116.455753][ T1162] ? check_panic_on_warn+0x1f/0x90 [ 116.457712][ T1162] check_panic_on_warn.cold+0x19/0x34 [ 116.459742][ T1162] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 116.462014][ T1162] __warn.cold+0x191/0x318 [ 116.463715][ T1162] __report_bug+0x30f/0x440 [ 116.465457][ T1162] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 116.467738][ T1162] ? __pfx___report_bug+0x10/0x10 [ 116.469675][ T1162] ? do_raw_spin_lock+0x128/0x260 [ 116.471283][ T1162] ? find_held_lock+0x2b/0x80 [ 116.472677][ T1162] ? __lock_acquire+0x49f/0x1a40 [ 116.474526][ T1162] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 116.476727][ T1162] report_bug+0xb2/0x220 [ 116.478271][ T1162] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 116.480039][ T1162] handle_bug+0x16a/0x2a0 [ 116.481334][ T1162] exc_invalid_op+0x17/0x50 [ 116.482972][ T1162] asm_exc_invalid_op+0x1a/0x20 [ 116.484833][ T1162] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 116.487262][ T1162] Code: 00 31 ff 41 89 c5 89 c6 e8 10 91 c1 f6 45 85 ed 0f 85 ad fc ff ff e8 92 96 c1 f6 90 0f 0b 90 e9 9f fc ff ff e8 84 96 c1 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 84 d6 22 91 e8 df 24 31 f7 e9 5f [ 116.493323][ T1162] RSP: 0018:ffffc90006c77b60 EFLAGS: 00010293 [ 116.495265][ T1162] RAX: 0000000000000000 RBX: ffff8880758b0ec0 RCX: ffffc90006c77afc [ 116.498092][ T1162] RDX: ffff888021362540 RSI: ffffffff8b4815dc RDI: ffff888021362a04 [ 116.501067][ T1162] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 116.504043][ T1162] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880758b1920 [ 116.507028][ T1162] R13: ffff8880758b2cc2 R14: 0000000000000001 R15: 0000000000000000 [ 116.510053][ T1162] ? ieee80211_mgd_probe_ap_send+0x3dc/0x4b0 [ 116.512357][ T1162] ieee80211_mgd_probe_ap+0x35e/0x420 [ 116.514392][ T1162] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 116.516353][ T1162] cfg80211_wiphy_work+0x2b7/0x550 [ 116.518136][ T1162] process_one_work+0xa23/0x1940 [ 116.519983][ T1162] ? __pfx_process_one_work+0x10/0x10 [ 116.522058][ T1162] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 116.523764][ T1162] worker_thread+0x5ef/0xe50 [ 116.525179][ T1162] ? kthread+0x13a/0x450 [ 116.526812][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 116.528794][ T1162] kthread+0x370/0x450 [ 116.530317][ T1162] ? __pfx_kthread+0x10/0x10 [ 116.532098][ T1162] ret_from_fork+0x72b/0xd50 [ 116.533676][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 116.535642][ T1162] ? __switch_to+0x800/0x10f0 [ 116.537440][ T1162] ? __pfx_kthread+0x10/0x10 [ 116.539011][ T1162] ret_from_fork_asm+0x1a/0x30 [ 116.540847][ T1162] [ 116.542810][ T1162] Kernel Offset: disabled [ 116.544432][ T1162] Rebooting in 86400 seconds..