last executing test programs: 352.900514ms ago: executing program 2 (id=3): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 275.123355ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x1000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') 238.961765ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='dict0\x00', 0x42, 0x1ff) write(r0, &(0x7f00000002c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x100) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='zstd', 0x4) close(r1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='10485760', 0x8) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) close(r3) 195.869897ms ago: executing program 2 (id=5): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) 17.53039ms ago: executing program 2 (id=6): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f0000000700), 0x8, 0xd000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000840), 0x8, 0x30000) pread64(r0, &(0x7f0000000880), 0x8, 0x40000) pread64(r0, &(0x7f00000008c0), 0x8, 0x50000) pread64(r0, &(0x7f0000000900), 0x8, 0x60000) pread64(r0, &(0x7f0000000940), 0x8, 0x70000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f00000009c0), 0x8, 0x90000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) pread64(r0, &(0x7f0000000a80), 0x8, 0xc0000) pread64(r0, &(0x7f0000000ac0), 0x8, 0xd0000) pread64(r0, &(0x7f0000000b00), 0x8, 0xe0000) 17.284842ms ago: executing program 0 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 0s ago: executing program 1 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40014' (ED25519) to the list of known hosts. [ 42.325864][ T5725] cgroup: Unknown subsys name 'net' [ 42.489911][ T5725] cgroup: Unknown subsys name 'cpuset' [ 42.495386][ T5725] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.408836][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.428122][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.432015][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.449460][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.452365][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.462788][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.469612][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.475781][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.476365][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.477753][ T5757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.478867][ T5757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.479575][ T5760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.480421][ T5760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.481017][ T5760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.484686][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.486680][ T5757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.488842][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.489790][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.501050][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.504718][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.507904][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.975804][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.978461][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.981342][ T5742] bridge_slave_0: entered allmulticast mode [ 48.985027][ T5742] bridge_slave_0: entered promiscuous mode [ 49.007388][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.009646][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.011823][ T5742] bridge_slave_1: entered allmulticast mode [ 49.014319][ T5742] bridge_slave_1: entered promiscuous mode [ 49.043540][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.047750][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.105677][ T5742] team0: Port device team_slave_0 added [ 49.109038][ T5742] team0: Port device team_slave_1 added [ 49.146504][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.148731][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.157018][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.173277][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.175642][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.183597][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.305956][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.309302][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.311721][ T5748] bridge_slave_0: entered allmulticast mode [ 49.314479][ T5748] bridge_slave_0: entered promiscuous mode [ 49.352998][ T5742] hsr_slave_0: entered promiscuous mode [ 49.356581][ T5742] hsr_slave_1: entered promiscuous mode [ 49.361380][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.363601][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.366119][ T5748] bridge_slave_1: entered allmulticast mode [ 49.370190][ T5748] bridge_slave_1: entered promiscuous mode [ 49.426894][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.429837][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.432664][ T5746] bridge_slave_0: entered allmulticast mode [ 49.436529][ T5746] bridge_slave_0: entered promiscuous mode [ 49.465166][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.467418][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.469551][ T5747] bridge_slave_0: entered allmulticast mode [ 49.472210][ T5747] bridge_slave_0: entered promiscuous mode [ 49.476155][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.479118][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.482081][ T5746] bridge_slave_1: entered allmulticast mode [ 49.486255][ T5746] bridge_slave_1: entered promiscuous mode [ 49.490916][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.502173][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.505181][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.507801][ T5747] bridge_slave_1: entered allmulticast mode [ 49.511074][ T5747] bridge_slave_1: entered promiscuous mode [ 49.540004][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.566844][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.577089][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.582072][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.587021][ T5748] team0: Port device team_slave_0 added [ 49.603670][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.613156][ T5748] team0: Port device team_slave_1 added [ 49.640763][ T5747] team0: Port device team_slave_0 added [ 49.644132][ T5747] team0: Port device team_slave_1 added [ 49.662359][ T5746] team0: Port device team_slave_0 added [ 49.669885][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.672032][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.679883][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.692984][ T5746] team0: Port device team_slave_1 added [ 49.704597][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.707479][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.717741][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.745489][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.748172][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.757870][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.780309][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.782903][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.793133][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.798470][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.801138][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.810403][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.845036][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.847681][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.857756][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.882690][ T5748] hsr_slave_0: entered promiscuous mode [ 49.885644][ T5748] hsr_slave_1: entered promiscuous mode [ 49.888231][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 49.890450][ T5748] Cannot create hsr debugfs directory [ 49.981753][ T5747] hsr_slave_0: entered promiscuous mode [ 49.984825][ T5747] hsr_slave_1: entered promiscuous mode [ 49.987825][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 49.990112][ T5747] Cannot create hsr debugfs directory [ 49.996316][ T5746] hsr_slave_0: entered promiscuous mode [ 49.999285][ T5746] hsr_slave_1: entered promiscuous mode [ 50.001295][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 50.003070][ T5746] Cannot create hsr debugfs directory [ 50.104527][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.111912][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.153894][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.159632][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.168585][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.173482][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.199422][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.203515][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.366564][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.374028][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.380542][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.387896][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.391695][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.399626][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.407510][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.413883][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.494942][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.503200][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.505900][ T5750] Bluetooth: hci2: command tx timeout [ 50.506209][ T5745] Bluetooth: hci0: command tx timeout [ 50.507394][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.516370][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.522060][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.528080][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.531875][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.538417][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.572598][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.575348][ T5745] Bluetooth: hci3: command tx timeout [ 50.586020][ T5745] Bluetooth: hci1: command tx timeout [ 50.644995][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.648874][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.655989][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.659386][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.664448][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.670354][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.677140][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.680747][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.686334][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.695666][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.698992][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.730616][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.733682][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.769503][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.834406][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.858241][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.861193][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.880496][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.883465][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.921024][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.982751][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.994688][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.997741][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.013878][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.021659][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.023890][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.044157][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.063045][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.066001][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.087495][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.090485][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.348449][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.381255][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.427041][ T5742] veth0_vlan: entered promiscuous mode [ 51.443831][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.455922][ T5742] veth1_vlan: entered promiscuous mode [ 51.460599][ T5748] veth0_vlan: entered promiscuous mode [ 51.479123][ T5748] veth1_vlan: entered promiscuous mode [ 51.514687][ T5742] veth0_macvtap: entered promiscuous mode [ 51.520018][ T5746] veth0_vlan: entered promiscuous mode [ 51.523980][ T5742] veth1_macvtap: entered promiscuous mode [ 51.539037][ T5746] veth1_vlan: entered promiscuous mode [ 51.557634][ T5748] veth0_macvtap: entered promiscuous mode [ 51.563945][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.569364][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.577260][ T5748] veth1_macvtap: entered promiscuous mode [ 51.582746][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.598970][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.601910][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.612049][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.614852][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.650778][ T5746] veth0_macvtap: entered promiscuous mode [ 51.657453][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.669994][ T5746] veth1_macvtap: entered promiscuous mode [ 51.674665][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.713996][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.716574][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.716783][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.720887][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.733323][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.737764][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.743553][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.754630][ T5747] veth0_vlan: entered promiscuous mode [ 51.762770][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.778011][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.780696][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.784132][ T5590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.787350][ T5590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.791106][ T5747] veth1_vlan: entered promiscuous mode [ 51.797734][ T5590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.805862][ T5590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.857543][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.862596][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.863721][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.872204][ T5747] veth0_macvtap: entered promiscuous mode [ 51.883882][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.888408][ T5747] veth1_macvtap: entered promiscuous mode [ 51.892502][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.895985][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.898978][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.904831][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.918739][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.924384][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.928649][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.958459][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.958550][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.970225][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.970367][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.999848][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.003943][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.032223][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.037505][ T5895] ======================================================= [ 52.037505][ T5895] WARNING: The mand mount option has been deprecated and [ 52.037505][ T5895] and is ignored by this kernel. Remove the mand [ 52.037505][ T5895] option from the mount to silence this warning. [ 52.037505][ T5895] ======================================================= [ 52.042038][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.163453][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.170882][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.207786][ T5747] FAULT_INJECTION: forcing a failure. [ 52.207786][ T5747] name failslab, interval 1, probability 10, space 0, times 1 [ 52.208107][ T5899] FAULT_INJECTION: forcing a failure. [ 52.208107][ T5899] name failslab, interval 1, probability 10, space 0, times 1 [ 52.208269][ T5897] FAULT_INJECTION: forcing a failure. [ 52.208269][ T5897] name failslab, interval 1, probability 10, space 0, times 1 [ 52.208296][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 52.208314][ T5897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.208323][ T5897] Call Trace: [ 52.208342][ T5897] [ 52.208349][ T5897] dump_stack_lvl+0x100/0x190 [ 52.208374][ T5897] should_fail_ex.cold+0x5/0xa [ 52.208394][ T5897] should_failslab+0xc2/0x120 [ 52.208416][ T5897] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.208436][ T5897] ? mas_preallocate+0x1105/0x14a0 [ 52.208466][ T5897] mas_preallocate+0x1105/0x14a0 [ 52.208493][ T5897] ? __pfx_mas_preallocate+0x10/0x10 [ 52.208522][ T5897] ? anon_vma_name+0x5a/0x250 [ 52.208550][ T5897] __split_vma+0x33d/0xda0 [ 52.208570][ T5897] ? __pfx___split_vma+0x10/0x10 [ 52.208598][ T5897] vma_modify+0x12ad/0x25c0 [ 52.208622][ T5897] ? __pfx_vma_modify+0x10/0x10 [ 52.208641][ T5900] FAULT_INJECTION: forcing a failure. [ 52.208641][ T5900] name failslab, interval 1, probability 10, space 0, times 1 [ 52.208652][ T5897] vma_modify_flags+0x257/0x3d0 [ 52.208670][ T5897] ? __pfx_vma_modify_flags+0x10/0x10 [ 52.208685][ T5897] ? validate_mm+0x261/0x4e0 [ 52.208709][ T5897] ? rcu_is_watching+0x12/0xc0 [ 52.208727][ T5897] ? percpu_counter_add_batch+0xb9/0x230 [ 52.208758][ T5897] mprotect_fixup+0x27a/0xe30 [ 52.208779][ T5897] ? __pfx_mprotect_fixup+0x10/0x10 [ 52.208808][ T5897] ? __pfx_mas_prev+0x10/0x10 [ 52.208831][ T5897] do_mprotect_pkey+0xa4b/0xef0 [ 52.208854][ T5897] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 52.208878][ T5897] ? ktime_get+0x22c/0x320 [ 52.208913][ T5897] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 52.208938][ T5897] __ia32_sys_mprotect+0x75/0xb0 [ 52.208953][ T5897] ? lockdep_hardirqs_on+0x78/0x100 [ 52.208971][ T5897] __do_fast_syscall_32+0xe7/0x970 [ 52.208995][ T5897] do_fast_syscall_32+0x32/0x70 [ 52.209015][ T5897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.209035][ T5897] RIP: 0023:0xf7f65fec [ 52.209087][ T5897] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 52.209096][ T5897] RSP: 002b:00000000ffb7b0b8 EFLAGS: 00000286 ORIG_RAX: 000000000000007d [ 52.209111][ T5897] RAX: ffffffffffffffda RBX: 00000000f53e6000 RCX: 0000000000020000 [ 52.209121][ T5897] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000021000 [ 52.209130][ T5897] RBP: 00000000f5405b40 R08: 0000000000000000 R09: 0000000000000000 [ 52.209139][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.209149][ T5897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.209170][ T5897] [ 52.209179][ T5900] CPU: 2 UID: 0 PID: 5900 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 52.209201][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.209211][ T5900] Call Trace: [ 52.209217][ T5900] [ 52.209223][ T5900] dump_stack_lvl+0x100/0x190 [ 52.209249][ T5900] should_fail_ex.cold+0x5/0xa [ 52.209272][ T5900] should_failslab+0xc2/0x120 [ 52.209301][ T5900] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 52.209324][ T5900] ? errseq_sample+0x51/0x70 [ 52.209349][ T5900] ? sock_alloc_inode+0x26/0x2c0 [ 52.209380][ T5900] ? __pfx_sock_alloc_inode+0x10/0x10 [ 52.209406][ T5900] sock_alloc_inode+0x26/0x2c0 [ 52.209432][ T5900] ? __pfx_sock_alloc_inode+0x10/0x10 [ 52.209458][ T5900] alloc_inode+0x68/0x250 [ 52.209481][ T5900] sock_alloc+0x44/0x280 [ 52.209504][ T5900] ? security_socket_create+0x7f/0x250 [ 52.209526][ T5900] __sock_create+0xc2/0x860 [ 52.209549][ T5900] __sys_socket+0x14d/0x260 [ 52.209565][ T5900] ? xfd_validate_state+0x129/0x190 [ 52.209586][ T5900] ? __pfx___sys_socket+0x10/0x10 [ 52.209611][ T5900] __ia32_sys_socket+0x72/0xb0 [ 52.209629][ T5900] ? lockdep_hardirqs_on+0x78/0x100 [ 52.209650][ T5900] __do_fast_syscall_32+0xe7/0x970 [ 52.209677][ T5900] do_fast_syscall_32+0x32/0x70 [ 52.209701][ T5900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.209725][ T5900] RIP: 0023:0xf7f34fec [ 52.209745][ T5900] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 52.209752][ T5900] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 52.209768][ T5900] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 52.209778][ T5900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.209789][ T5900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.209799][ T5900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.209808][ T5900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.209831][ T5900] [ 52.209979][ T5900] socket: no more sockets [ 52.212828][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.212851][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.212860][ T5747] Call Trace: [ 52.212866][ T5747] [ 52.212873][ T5747] dump_stack_lvl+0x100/0x190 [ 52.212898][ T5747] should_fail_ex.cold+0x5/0xa [ 52.212918][ T5747] should_failslab+0xc2/0x120 [ 52.212941][ T5747] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.212964][ T5747] ? __kernfs_new_node+0xd2/0xa10 [ 52.212987][ T5747] __kernfs_new_node+0xd2/0xa10 [ 52.213008][ T5747] ? __pfx___kernfs_new_node+0x10/0x10 [ 52.213031][ T5747] ? find_held_lock+0x2b/0x80 [ 52.213077][ T5747] ? kernfs_root+0xee/0x2a0 [ 52.213103][ T5747] ? kernfs_root+0xee/0x2a0 [ 52.213134][ T5747] kernfs_new_node+0x117/0x150 [ 52.213157][ T5747] __kernfs_create_file+0x53/0x350 [ 52.213183][ T5747] sysfs_add_file_mode_ns+0x207/0x3c0 [ 52.213214][ T5747] internal_create_group+0x593/0xfb0 [ 52.213248][ T5747] ? __pfx_internal_create_group+0x10/0x10 [ 52.213279][ T5747] ? kernfs_create_link+0x1bd/0x240 [ 52.213305][ T5747] internal_create_groups+0x9d/0x150 [ 52.213334][ T5747] device_add+0x7c8/0x1970 [ 52.213365][ T5747] ? __pfx_device_add+0x10/0x10 [ 52.213392][ T5747] ? lockdep_init_map_type+0x5c/0x250 [ 52.213410][ T5747] ? __init_waitqueue_head+0xca/0x150 [ 52.213440][ T5747] netdev_register_kobject+0x1a9/0x3d0 [ 52.213465][ T5747] register_netdevice+0x15b6/0x25a0 [ 52.213512][ T5747] ? __pfx_register_netdevice+0x10/0x10 [ 52.213546][ T5747] cfg80211_register_netdevice+0x149/0x310 [ 52.213570][ T5747] ieee80211_if_add+0x1108/0x1a70 [ 52.213596][ T5747] ? __pfx_minstrel_ht_add_debugfs+0x10/0x10 [ 52.213623][ T5747] ieee80211_register_hw+0x3c40/0x4580 [ 52.213660][ T5747] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 52.213683][ T5747] ? __pfx___debug_object_init+0x10/0x10 [ 52.213715][ T5747] ? find_held_lock+0x2b/0x80 [ 52.213737][ T5747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.213765][ T5747] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 52.213784][ T5747] ? __hrtimer_setup+0x208/0x330 [ 52.213806][ T5747] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 52.213847][ T5747] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 52.213880][ T5747] hwsim_new_radio_nl+0xc6b/0x13f0 [ 52.213907][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.213937][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 52.213961][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 52.213989][ T5747] genl_family_rcv_msg_doit+0x214/0x300 [ 52.214014][ T5747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 52.214036][ T5747] ? genl_get_cmd+0x3e7/0x760 [ 52.214062][ T5747] ? bpf_lsm_capable+0x9/0x10 [ 52.214080][ T5747] ? security_capable+0x80/0x260 [ 52.214097][ T5747] ? ns_capable+0xd2/0xf0 [ 52.214116][ T5747] genl_rcv_msg+0x560/0x800 [ 52.214141][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.214164][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.214197][ T5747] netlink_rcv_skb+0x159/0x420 [ 52.214214][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.214250][ T5747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.214279][ T5747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 52.214301][ T5747] genl_rcv+0x28/0x40 [ 52.214320][ T5747] netlink_unicast+0x585/0x850 [ 52.214343][ T5747] ? __pfx_netlink_unicast+0x10/0x10 [ 52.214370][ T5747] netlink_sendmsg+0x8b0/0xda0 [ 52.214393][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.214416][ T5747] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.214445][ T5747] __sys_sendto+0x48b/0x4e0 [ 52.214468][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.214488][ T5747] ? __pfx___sys_sendto+0x10/0x10 [ 52.214537][ T5747] __ia32_compat_sys_socketcall+0x59a/0x770 [ 52.214570][ T5747] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.214602][ T5747] ? fput_close_sync+0x11d/0x250 [ 52.214636][ T5747] do_int80_emulation+0x14b/0x720 [ 52.214663][ T5747] asm_int80_emulation+0x1a/0x20 [ 52.214680][ T5747] RIP: 0023:0xf71e736b [ 52.214696][ T5747] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.214711][ T5747] RSP: 002b:00000000ff801a3c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 52.214728][ T5747] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff801ae4 [ 52.214738][ T5747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.214748][ T5747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.214757][ T5747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.214767][ T5747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.214791][ T5747] [ 52.217450][ T5900] FAULT_INJECTION: forcing a failure. [ 52.217450][ T5900] name failslab, interval 1, probability 10, space 0, times 99 [ 52.217502][ T5747] FAULT_INJECTION: forcing a failure. [ 52.217502][ T5747] name failslab, interval 1, probability 10, space 0, times 99 [ 52.217536][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.217555][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.217564][ T5747] Call Trace: [ 52.217570][ T5747] [ 52.217576][ T5747] dump_stack_lvl+0x100/0x190 [ 52.217599][ T5747] should_fail_ex.cold+0x5/0xa [ 52.217619][ T5747] should_failslab+0xc2/0x120 [ 52.217644][ T5747] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.217668][ T5747] ? __alloc_skb+0x140/0x710 [ 52.217698][ T5747] __alloc_skb+0x140/0x710 [ 52.217718][ T5747] ? __alloc_skb+0x5b7/0x710 [ 52.217740][ T5747] ? __pfx___alloc_skb+0x10/0x10 [ 52.217765][ T5747] ? __asan_memcpy+0x3c/0x60 [ 52.217786][ T5747] alloc_uevent_skb+0x7d/0x210 [ 52.217807][ T5747] kobject_uevent_env+0x122c/0x18b0 [ 52.217830][ T5747] ? __dev_fwnode+0x7f/0xa0 [ 52.217861][ T5747] device_add+0x300/0x1970 [ 52.217891][ T5747] ? __pfx_device_add+0x10/0x10 [ 52.217918][ T5747] ? lockdep_init_map_type+0x5c/0x250 [ 52.217936][ T5747] ? __init_waitqueue_head+0xca/0x150 [ 52.217960][ T5747] netdev_register_kobject+0x1a9/0x3d0 [ 52.217984][ T5747] register_netdevice+0x15b6/0x25a0 [ 52.218016][ T5747] ? __pfx_register_netdevice+0x10/0x10 [ 52.218050][ T5747] cfg80211_register_netdevice+0x149/0x310 [ 52.218073][ T5747] ieee80211_if_add+0x1108/0x1a70 [ 52.218098][ T5747] ? __pfx_minstrel_ht_add_debugfs+0x10/0x10 [ 52.218123][ T5747] ieee80211_register_hw+0x3c40/0x4580 [ 52.218160][ T5747] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 52.218182][ T5747] ? __pfx___debug_object_init+0x10/0x10 [ 52.218212][ T5747] ? find_held_lock+0x2b/0x80 [ 52.218235][ T5747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.218261][ T5747] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 52.218282][ T5747] ? __hrtimer_setup+0x208/0x330 [ 52.218305][ T5747] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 52.218346][ T5747] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 52.218378][ T5747] hwsim_new_radio_nl+0xc6b/0x13f0 [ 52.218404][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.218442][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 52.218495][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 52.218524][ T5747] genl_family_rcv_msg_doit+0x214/0x300 [ 52.218547][ T5747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 52.218569][ T5747] ? genl_get_cmd+0x3e7/0x760 [ 52.218596][ T5747] ? bpf_lsm_capable+0x9/0x10 [ 52.218615][ T5747] ? security_capable+0x80/0x260 [ 52.218636][ T5747] ? ns_capable+0xd2/0xf0 [ 52.218657][ T5747] genl_rcv_msg+0x560/0x800 [ 52.218683][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.218696][ T92] FAULT_INJECTION: forcing a failure. [ 52.218696][ T92] name failslab, interval 1, probability 10, space 0, times 98 [ 52.218706][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.218739][ T5747] netlink_rcv_skb+0x159/0x420 [ 52.218758][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.218781][ T5747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.218811][ T5747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 52.218833][ T5747] genl_rcv+0x28/0x40 [ 52.218851][ T5747] netlink_unicast+0x585/0x850 [ 52.218874][ T5747] ? __pfx_netlink_unicast+0x10/0x10 [ 52.218901][ T5747] netlink_sendmsg+0x8b0/0xda0 [ 52.218924][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.218947][ T5747] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.218970][ T5747] __sys_sendto+0x48b/0x4e0 [ 52.218992][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.219012][ T5747] ? __pfx___sys_sendto+0x10/0x10 [ 52.219061][ T5747] __ia32_compat_sys_socketcall+0x59a/0x770 [ 52.219094][ T5747] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.219128][ T5747] ? fput_close_sync+0x11d/0x250 [ 52.219162][ T5747] do_int80_emulation+0x14b/0x720 [ 52.219185][ T5898] [ 52.219186][ T5747] asm_int80_emulation+0x1a/0x20 [ 52.219193][ T5898] ====================================================== [ 52.219199][ T5898] WARNING: possible circular locking dependency detected [ 52.219204][ T5747] RIP: 0023:0xf71e736b [ 52.219207][ T5898] syzkaller #0 Not tainted [ 52.219217][ T5898] ------------------------------------------------------ [ 52.219216][ T5747] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.219223][ T5898] syz.2.5/5898 is trying to acquire lock: [ 52.219232][ T5898] ffffffff8ed80040 [ 52.219232][ T5747] RSP: 002b:00000000ff801a3c EFLAGS: 00000246 [ 52.219240][ T5898] ( [ 52.219241][ T5747] ORIG_RAX: 0000000000000066 [ 52.219246][ T5898] pcpu_alloc_mutex [ 52.219248][ T5747] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff801ae4 [ 52.219252][ T5898] ){+.+.}-{4:4} [ 52.219259][ T5747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.219261][ T5898] , at: pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.219270][ T5747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.219279][ T5747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.219284][ T5898] [ 52.219284][ T5898] but task is already holding lock: [ 52.219289][ T5747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.219290][ T5898] ffff888028650588 (&q->elevator_lock [ 52.219304][ T5747] [ 52.219309][ T5898] ){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 52.219340][ T5898] [ 52.219340][ T5898] which lock already depends on the new lock. [ 52.219340][ T5898] [ 52.219346][ T5898] [ 52.219346][ T5898] the existing dependency chain (in reverse order) is: [ 52.219352][ T5898] [ 52.219352][ T5898] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 52.219376][ T5898] lock_acquire+0x1b9/0x370 [ 52.219402][ T5898] __mutex_lock+0x1a4/0x1bd0 [ 52.219422][ T5898] elevator_change+0x1bc/0x530 [ 52.219445][ T5898] elv_iosched_store+0x3be/0x460 [ 52.219478][ T5898] queue_attr_store+0x25f/0x2f0 [ 52.219500][ T5898] sysfs_kf_write+0xf2/0x150 [ 52.219523][ T5898] kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.219542][ T5898] vfs_write+0x6ac/0x1050 [ 52.219556][ T5898] ksys_write+0x12a/0x250 [ 52.219570][ T5898] __do_fast_syscall_32+0xe7/0x970 [ 52.219592][ T5898] do_fast_syscall_32+0x32/0x70 [ 52.219613][ T5898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.219635][ T5898] [ 52.219635][ T5898] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 52.219664][ T5898] lock_acquire+0x1b9/0x370 [ 52.219688][ T5898] blk_alloc_queue+0x610/0x790 [ 52.219714][ T5898] blk_mq_alloc_queue+0x174/0x290 [ 52.219757][ T5898] __blk_mq_alloc_disk+0x29/0x120 [ 52.219776][ T5898] null_add_dev+0xdf8/0x1df0 [ 52.219795][ T5898] null_init+0x3a4/0x480 [ 52.219817][ T5898] do_one_initcall+0x11d/0x700 [ 52.219837][ T5898] kernel_init_freeable+0x6ea/0x7b0 [ 52.219857][ T5898] kernel_init+0x1f/0x1e0 [ 52.219879][ T5898] ret_from_fork+0x72b/0xd50 [ 52.219899][ T5898] ret_from_fork_asm+0x1a/0x30 [ 52.219918][ T5898] [ 52.219918][ T5898] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 52.219944][ T5898] lock_acquire+0x1b9/0x370 [ 52.219967][ T5898] fs_reclaim_acquire+0xc4/0x100 [ 52.219988][ T5898] prepare_alloc_pages+0x166/0x5f0 [ 52.220011][ T5898] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 52.220030][ T5898] __alloc_pages_noprof+0xb/0x110 [ 52.220048][ T5898] pcpu_populate_chunk+0x118/0x990 [ 52.220065][ T5898] pcpu_alloc_noprof+0x881/0x1ca0 [ 52.220082][ T5898] iommu_dma_init_fq+0x1da/0x7e0 [ 52.220102][ T5898] iommu_setup_dma_ops+0x11df/0x1620 [ 52.220122][ T5898] bus_iommu_probe+0x264/0x550 [ 52.220143][ T5898] iommu_device_register+0x1af/0x280 [ 52.220166][ T5898] intel_iommu_init+0x2020/0x2990 [ 52.220189][ T5898] pci_iommu_init+0x3c/0x80 [ 52.220208][ T5898] do_one_initcall+0x11d/0x700 [ 52.220229][ T5898] kernel_init_freeable+0x6ea/0x7b0 [ 52.220250][ T5898] kernel_init+0x1f/0x1e0 [ 52.220273][ T5898] ret_from_fork+0x72b/0xd50 [ 52.220292][ T5898] ret_from_fork_asm+0x1a/0x30 [ 52.220314][ T5898] [ 52.220314][ T5898] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 52.220339][ T5898] check_prev_add+0xeb/0xe60 [ 52.220364][ T5898] __lock_acquire+0x136c/0x1a40 [ 52.220388][ T5898] lock_acquire+0x1b9/0x370 [ 52.220411][ T5898] __mutex_lock+0x1a4/0x1bd0 [ 52.220431][ T5898] pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.220448][ T5898] __percpu_counter_init_many+0x42/0x3b0 [ 52.220482][ T5898] blkg_rwstat_init+0x2c/0xd0 [ 52.220499][ T5898] bfq_pd_alloc+0xf1/0x620 [ 52.220521][ T5898] blkcg_activate_policy+0x7bb/0xe60 [ 52.220547][ T5898] bfq_create_group_hierarchy+0x61/0x170 [ 52.220572][ T5898] bfq_init_queue+0xc02/0x13c0 [ 52.220594][ T5898] blk_mq_init_sched+0x2cf/0x6c0 [ 52.220611][ T5898] elevator_switch+0x1e3/0x7e0 [ 52.220634][ T5898] elevator_change+0x352/0x530 [ 52.220656][ T5898] elv_iosched_store+0x3be/0x460 [ 52.220679][ T5898] queue_attr_store+0x25f/0x2f0 [ 52.220700][ T5898] sysfs_kf_write+0xf2/0x150 [ 52.220719][ T5898] kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.220738][ T5898] vfs_write+0x6ac/0x1050 [ 52.220752][ T5898] ksys_write+0x12a/0x250 [ 52.220766][ T5898] __do_fast_syscall_32+0xe7/0x970 [ 52.220787][ T5898] do_fast_syscall_32+0x32/0x70 [ 52.220809][ T5898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.220823][ T5747] ieee80211 phy10: Failed to add default virtual iface [ 52.220831][ T5898] [ 52.220831][ T5898] other info that might help us debug this: [ 52.220831][ T5898] [ 52.220836][ T5898] Chain exists of: [ 52.220836][ T5898] pcpu_alloc_mutex --> &q->q_usage_counter(io)#66 --> &q->elevator_lock [ 52.220836][ T5898] [ 52.220870][ T5898] Possible unsafe locking scenario: [ 52.220870][ T5898] [ 52.220876][ T5898] CPU0 CPU1 [ 52.220881][ T5898] ---- ---- [ 52.220886][ T5898] lock(&q->elevator_lock); [ 52.220891][ T5747] FAULT_INJECTION: forcing a failure. [ 52.220891][ T5747] name failslab, interval 1, probability 10, space 0, times 96 [ 52.220899][ T5898] lock(&q->q_usage_counter(io)#66); [ 52.220911][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.220918][ T5898] lock(&q->elevator_lock); [ 52.220931][ T5898] lock( [ 52.220929][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.220934][ T5898] pcpu_alloc_mutex); [ 52.220940][ T5747] Call Trace: [ 52.220944][ T5898] [ 52.220944][ T5898] *** DEADLOCK *** [ 52.220944][ T5898] [ 52.220946][ T5747] [ 52.220948][ T5898] 8 locks held by syz.2.5/5898: [ 52.220958][ T5898] #0: [ 52.220952][ T5747] dump_stack_lvl+0x100/0x190 [ 52.220963][ T5898] ffff88802a6382b0 (&f->f_pos_lock [ 52.220970][ T5747] should_fail_ex.cold+0x5/0xa [ 52.220978][ T5898] ){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 52.220987][ T5747] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 52.221003][ T5898] #1: ffff88804cd7c450 (sb_writers [ 52.221009][ T5747] should_failslab+0xc2/0x120 [ 52.221024][ T5898] #7){.+.+}-{0:0} [ 52.221032][ T5747] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 52.221036][ T5898] , at: ksys_write+0x12a/0x250 [ 52.221082][ T5898] #2: ffff888012fbd880 [ 52.221083][ T5747] ? __d_lookup+0x25c/0x4a0 [ 52.221096][ T5898] (&of->mutex){+.+.}-{4:4} [ 52.221106][ T5747] ? lock_release+0x24d/0x310 [ 52.221113][ T5898] , at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 52.221133][ T5898] #3: [ 52.221131][ T5747] ? __d_alloc+0x35/0xa50 [ 52.221138][ T5898] ffff888028c304b8 (kn->active#64 [ 52.221151][ T5747] __d_alloc+0x35/0xa50 [ 52.221158][ T5898] ){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 52.221170][ T5747] d_alloc+0x4a/0x1e0 [ 52.221184][ T5898] #4: ffff88802870f1f8 ( [ 52.221187][ T5747] lookup_one_qstr_excl+0x171/0x250 [ 52.221197][ T5898] &set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x2a0/0x460 [ 52.221211][ T5747] start_dirop+0x59/0xb0 [ 52.221234][ T5898] #5: ffff888028650060 [ 52.221237][ T5747] simple_start_creating+0xf9/0x110 [ 52.221244][ T5898] ( [ 52.221248][ T5898] &q->q_usage_counter(io)#66){++++}-{0:0} [ 52.221255][ T5747] ? __pfx_simple_start_creating+0x10/0x10 [ 52.221267][ T5898] , at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 52.221284][ T5747] ? mntput+0x70/0xa0 [ 52.221295][ T5898] #6: ffff888028650098 (&q->q_usage_counter(queue)#49 [ 52.221308][ T5747] ? simple_pin_fs+0xa3/0x190 [ 52.221321][ T5898] ){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 52.221331][ T5747] debugfs_start_creating.part.0+0x82/0x170 [ 52.221358][ T5898] #7: ffff888028650588 [ 52.221358][ T5747] __debugfs_create_file+0xb3/0x4f0 [ 52.221368][ T5898] ( [ 52.221371][ T5898] &q->elevator_lock){+.+.}-{4:4} [ 52.221384][ T5747] debugfs_create_file_full+0x41/0x60 [ 52.221385][ T5898] , at: elevator_change+0x1bc/0x530 [ 52.221408][ T5898] [ 52.221408][ T5898] stack backtrace: [ 52.221410][ T5747] mac80211_hwsim_new_radio+0x2cc7/0x64c0 [ 52.221447][ T5747] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 52.221473][ T5747] hwsim_new_radio_nl+0xc6b/0x13f0 [ 52.221496][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.221521][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 52.221545][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 52.221569][ T5747] genl_family_rcv_msg_doit+0x214/0x300 [ 52.221590][ T5747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 52.221610][ T5747] ? genl_get_cmd+0x3e7/0x760 [ 52.221630][ T5747] ? bpf_lsm_capable+0x9/0x10 [ 52.221665][ T5747] ? security_capable+0x80/0x260 [ 52.221682][ T5747] ? ns_capable+0xd2/0xf0 [ 52.221699][ T5747] genl_rcv_msg+0x560/0x800 [ 52.221720][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.221741][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.221767][ T5747] netlink_rcv_skb+0x159/0x420 [ 52.221785][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.221805][ T5747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.221827][ T5747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 52.221844][ T5747] genl_rcv+0x28/0x40 [ 52.221862][ T5747] netlink_unicast+0x585/0x850 [ 52.221880][ T5747] ? __pfx_netlink_unicast+0x10/0x10 [ 52.221901][ T5747] netlink_sendmsg+0x8b0/0xda0 [ 52.221920][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.221938][ T5747] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.221957][ T5747] __sys_sendto+0x48b/0x4e0 [ 52.221977][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.221994][ T5747] ? __pfx___sys_sendto+0x10/0x10 [ 52.222024][ T5747] __ia32_compat_sys_socketcall+0x59a/0x770 [ 52.222053][ T5747] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.222082][ T5747] ? fput_close_sync+0x11d/0x250 [ 52.222107][ T5747] do_int80_emulation+0x14b/0x720 [ 52.222130][ T5747] asm_int80_emulation+0x1a/0x20 [ 52.222146][ T5747] RIP: 0023:0xf71e736b [ 52.222158][ T5747] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.222174][ T5747] RSP: 002b:00000000ff801a3c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 52.222189][ T5747] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff801ae4 [ 52.222200][ T5747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.222209][ T5747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.222218][ T5747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.222228][ T5747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.222242][ T5747] [ 52.222252][ T5898] CPU: 3 UID: 0 PID: 5898 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 52.222266][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.222273][ T5898] Call Trace: [ 52.222277][ T5898] [ 52.222282][ T5898] dump_stack_lvl+0x100/0x190 [ 52.222293][ T5747] FAULT_INJECTION: forcing a failure. [ 52.222293][ T5747] name failslab, interval 1, probability 10, space 0, times 95 [ 52.222294][ T5898] print_circular_bug.cold+0x178/0x1c7 [ 52.222312][ T5898] check_noncircular+0x146/0x160 [ 52.222331][ T5898] check_prev_add+0xeb/0xe60 [ 52.222349][ T5898] ? kernel_text_address+0x8d/0x100 [ 52.222371][ T5898] ? __kernel_text_address+0xd/0x30 [ 52.222393][ T5898] __lock_acquire+0x136c/0x1a40 [ 52.222423][ T5898] lock_acquire+0x1b9/0x370 [ 52.222442][ T5898] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.222453][ T5898] ? __pfx___might_resched+0x10/0x10 [ 52.222478][ T5898] __mutex_lock+0x1a4/0x1bd0 [ 52.222492][ T5898] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.222503][ T5898] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.222514][ T5898] ? bfq_init_queue+0xc02/0x13c0 [ 52.222527][ T5898] ? blk_mq_init_sched+0x2cf/0x6c0 [ 52.222537][ T5898] ? elevator_switch+0x1e3/0x7e0 [ 52.222551][ T5898] ? elevator_change+0x352/0x530 [ 52.222565][ T5898] ? elv_iosched_store+0x3be/0x460 [ 52.222579][ T5898] ? queue_attr_store+0x25f/0x2f0 [ 52.222591][ T5898] ? sysfs_kf_write+0xf2/0x150 [ 52.222603][ T5898] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.222614][ T5898] ? __pfx___mutex_lock+0x10/0x10 [ 52.222626][ T5898] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.222635][ T12] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 52.222643][ T5898] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.222653][ T5898] pcpu_alloc_noprof+0xe87/0x1ca0 [ 52.222665][ T5898] ? kasan_save_track+0x14/0x30 [ 52.222678][ T5898] __percpu_counter_init_many+0x42/0x3b0 [ 52.222695][ T5898] blkg_rwstat_init+0x2c/0xd0 [ 52.222705][ T5898] bfq_pd_alloc+0xf1/0x620 [ 52.222718][ T5898] ? __pfx_bfq_pd_alloc+0x10/0x10 [ 52.222731][ T5898] blkcg_activate_policy+0x7bb/0xe60 [ 52.222748][ T5898] bfq_create_group_hierarchy+0x61/0x170 [ 52.222766][ T5898] bfq_init_queue+0xc02/0x13c0 [ 52.222787][ T5898] blk_mq_init_sched+0x2cf/0x6c0 [ 52.222803][ T5898] elevator_switch+0x1e3/0x7e0 [ 52.222824][ T5898] elevator_change+0x352/0x530 [ 52.222848][ T5898] elv_iosched_store+0x3be/0x460 [ 52.222872][ T5898] ? __pfx_elv_iosched_store+0x10/0x10 [ 52.222899][ T5898] ? lock_acquire+0x1b9/0x370 [ 52.222925][ T5898] ? __pfx_elv_iosched_store+0x10/0x10 [ 52.222950][ T5898] queue_attr_store+0x25f/0x2f0 [ 52.222971][ T5898] ? __pfx_queue_attr_store+0x10/0x10 [ 52.222991][ T5898] ? __lock_acquire+0x49f/0x1a40 [ 52.223017][ T5898] ? __lock_acquire+0x49f/0x1a40 [ 52.223046][ T5898] ? find_held_lock+0x2b/0x80 [ 52.223068][ T5898] ? sysfs_file_kobj+0xe4/0x290 [ 52.223088][ T5898] ? sysfs_file_kobj+0xe4/0x290 [ 52.223110][ T5898] ? __pfx_queue_attr_store+0x10/0x10 [ 52.223132][ T5898] sysfs_kf_write+0xf2/0x150 [ 52.223156][ T5898] kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.223175][ T5898] ? __pfx_sysfs_kf_write+0x10/0x10 [ 52.223198][ T5898] vfs_write+0x6ac/0x1050 [ 52.223214][ T5898] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 52.223235][ T5898] ? __pfx_vfs_write+0x10/0x10 [ 52.223249][ T5898] ? find_held_lock+0x2b/0x80 [ 52.223276][ T5898] ksys_write+0x12a/0x250 [ 52.223291][ T5898] ? __pfx_ksys_write+0x10/0x10 [ 52.223309][ T5898] __do_fast_syscall_32+0xe7/0x970 [ 52.223333][ T5898] do_fast_syscall_32+0x32/0x70 [ 52.223358][ T5898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.223380][ T5898] RIP: 0023:0xf7f65fec [ 52.223401][ T5898] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 52.223409][ T5898] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 52.223427][ T5898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 52.223439][ T5898] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.223450][ T5898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.223468][ T5898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.223479][ T5898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.223497][ T5898] [ 52.223507][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.223527][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.223537][ T5747] Call Trace: [ 52.223542][ T5747] [ 52.223548][ T5747] dump_stack_lvl+0x100/0x190 [ 52.223579][ T5747] should_fail_ex.cold+0x5/0xa [ 52.223595][ T5747] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 52.223617][ T5747] should_failslab+0xc2/0x120 [ 52.223640][ T5747] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 52.223660][ T5747] ? start_dirop+0x79/0xb0 [ 52.223685][ T5747] ? alloc_inode+0x68/0x250 [ 52.223706][ T5747] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 52.223709][ T5898] FAULT_INJECTION: forcing a failure. [ 52.223709][ T5898] name failslab, interval 1, probability 10, space 0, times 94 [ 52.223730][ T5747] alloc_inode+0x68/0x250 [ 52.223751][ T5747] new_inode+0x22/0x1c0 [ 52.223773][ T5747] __debugfs_create_file+0x105/0x4f0 [ 52.223797][ T5747] debugfs_create_file_full+0x41/0x60 [ 52.223822][ T5747] mac80211_hwsim_new_radio+0x2d09/0x64c0 [ 52.223851][ T5747] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 52.223877][ T5747] hwsim_new_radio_nl+0xc6b/0x13f0 [ 52.223899][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.223924][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 52.223946][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 52.223970][ T5747] genl_family_rcv_msg_doit+0x214/0x300 [ 52.223992][ T5747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 52.224012][ T5747] ? genl_get_cmd+0x3e7/0x760 [ 52.224033][ T5747] ? bpf_lsm_capable+0x9/0x10 [ 52.224051][ T5747] ? security_capable+0x80/0x260 [ 52.224068][ T5747] ? ns_capable+0xd2/0xf0 [ 52.224085][ T5747] genl_rcv_msg+0x560/0x800 [ 52.224106][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.224127][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.224152][ T5747] netlink_rcv_skb+0x159/0x420 [ 52.224170][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.224191][ T5747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.224213][ T5747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 52.224231][ T5747] genl_rcv+0x28/0x40 [ 52.224248][ T5747] netlink_unicast+0x585/0x850 [ 52.224266][ T5747] ? __pfx_netlink_unicast+0x10/0x10 [ 52.224286][ T5747] netlink_sendmsg+0x8b0/0xda0 [ 52.224304][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.224323][ T5747] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.224343][ T5747] __sys_sendto+0x48b/0x4e0 [ 52.224362][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.224380][ T5747] ? __pfx___sys_sendto+0x10/0x10 [ 52.224410][ T5747] __ia32_compat_sys_socketcall+0x59a/0x770 [ 52.224447][ T5747] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.224476][ T5747] ? fput_close_sync+0x11d/0x250 [ 52.224502][ T5747] do_int80_emulation+0x14b/0x720 [ 52.224525][ T5747] asm_int80_emulation+0x1a/0x20 [ 52.224541][ T5747] RIP: 0023:0xf71e736b [ 52.224553][ T5747] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.224569][ T5747] RSP: 002b:00000000ff801a3c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 52.224584][ T5747] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff801ae4 [ 52.224595][ T5747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.224604][ T5747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.224614][ T5747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.224623][ T5747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.224637][ T5747] [ 52.224643][ T5747] debugfs: out of free dentries, can not create file 'group' [ 52.224648][ T5898] CPU: 3 UID: 0 PID: 5898 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 52.224671][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.224681][ T5898] Call Trace: [ 52.224687][ T5898] [ 52.224694][ T5898] dump_stack_lvl+0x100/0x190 [ 52.224714][ T5898] should_fail_ex.cold+0x5/0xa [ 52.224730][ T5898] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 52.224750][ T5747] FAULT_INJECTION: forcing a failure. [ 52.224750][ T5747] name failslab, interval 1, probability 10, space 0, times 93 [ 52.224753][ T5898] should_failslab+0xc2/0x120 [ 52.224777][ T5898] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.224798][ T5898] ? __kernfs_new_node+0xd2/0xa10 [ 52.224816][ T5898] __kernfs_new_node+0xd2/0xa10 [ 52.224834][ T5898] ? __pfx___kernfs_new_node+0x10/0x10 [ 52.224851][ T5898] ? kernfs_add_one+0x214/0xaa0 [ 52.224867][ T5898] ? rcu_is_watching+0x12/0xc0 [ 52.224888][ T5898] ? kernfs_root+0xee/0x2a0 [ 52.224911][ T5898] ? rcu_is_watching+0x12/0xc0 [ 52.224928][ T5898] ? kernfs_root+0xee/0x2a0 [ 52.224950][ T5898] ? lock_release+0x24d/0x310 [ 52.224977][ T5898] kernfs_new_node+0x117/0x150 [ 52.224995][ T5898] __kernfs_create_file+0x53/0x350 [ 52.225018][ T5898] sysfs_add_file_mode_ns+0x207/0x3c0 [ 52.225041][ T5898] sysfs_create_file_ns+0x145/0x1e0 [ 52.225103][ T5898] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 52.225128][ T5898] ? __mutex_unlock_slowpath+0x35d/0x930 [ 52.225147][ T5898] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.225169][ T5898] elevator_change_done+0x2ec/0x650 [ 52.225193][ T5898] ? __pfx_elevator_change_done+0x10/0x10 [ 52.225217][ T5898] ? rcu_is_watching+0x12/0xc0 [ 52.225237][ T5898] ? elevator_change+0x366/0x530 [ 52.225260][ T5898] ? lock_release+0x24d/0x310 [ 52.225287][ T5898] elevator_change+0x2d7/0x530 [ 52.225312][ T5898] elv_iosched_store+0x3be/0x460 [ 52.225337][ T5898] ? __pfx_elv_iosched_store+0x10/0x10 [ 52.225365][ T5898] ? lock_acquire+0x1b9/0x370 [ 52.225392][ T5898] ? __pfx_elv_iosched_store+0x10/0x10 [ 52.225416][ T5898] queue_attr_store+0x25f/0x2f0 [ 52.225438][ T5898] ? __pfx_queue_attr_store+0x10/0x10 [ 52.225466][ T5898] ? __lock_acquire+0x49f/0x1a40 [ 52.225494][ T5898] ? __lock_acquire+0x49f/0x1a40 [ 52.225524][ T5898] ? find_held_lock+0x2b/0x80 [ 52.225574][ T5898] ? sysfs_file_kobj+0xe4/0x290 [ 52.225598][ T5898] ? sysfs_file_kobj+0xe4/0x290 [ 52.225621][ T5898] ? __pfx_queue_attr_store+0x10/0x10 [ 52.225642][ T5898] sysfs_kf_write+0xf2/0x150 [ 52.225666][ T5898] kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.225683][ T5898] ? __pfx_sysfs_kf_write+0x10/0x10 [ 52.225706][ T5898] vfs_write+0x6ac/0x1050 [ 52.225721][ T5898] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 52.225742][ T5898] ? __pfx_vfs_write+0x10/0x10 [ 52.225756][ T5898] ? find_held_lock+0x2b/0x80 [ 52.225782][ T5898] ksys_write+0x12a/0x250 [ 52.225796][ T5898] ? __pfx_ksys_write+0x10/0x10 [ 52.225815][ T5898] __do_fast_syscall_32+0xe7/0x970 [ 52.225838][ T5898] do_fast_syscall_32+0x32/0x70 [ 52.225860][ T5898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.225878][ T5898] RIP: 0023:0xf7f65fec [ 52.225895][ T5898] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 52.225902][ T5898] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 52.225917][ T5898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 52.225928][ T5898] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.225938][ T5898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.225948][ T5898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.225957][ T5898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.225971][ T5898] [ 52.225981][ T92] CPU: 1 UID: 0 PID: 92 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 52.226001][ T92] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.226010][ T92] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.226035][ T92] Call Trace: [ 52.226041][ T92] [ 52.226046][ T92] dump_stack_lvl+0x100/0x190 [ 52.226063][ T92] should_fail_ex.cold+0x5/0xa [ 52.226078][ T92] should_failslab+0xc2/0x120 [ 52.226098][ T92] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.226117][ T92] ? __alloc_skb+0x140/0x710 [ 52.226139][ T92] __alloc_skb+0x140/0x710 [ 52.226156][ T92] ? __alloc_skb+0x5b7/0x710 [ 52.226174][ T92] ? __pfx___alloc_skb+0x10/0x10 [ 52.226193][ T92] ? kfree_skbmem+0x19f/0x210 [ 52.226209][ T92] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.226233][ T92] process_one_work+0xa23/0x1940 [ 52.226264][ T92] ? __pfx_process_one_work+0x10/0x10 [ 52.226288][ T92] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.226308][ T92] worker_thread+0x5ef/0xe50 [ 52.226333][ T92] ? kthread+0x13a/0x450 [ 52.226352][ T92] ? __pfx_worker_thread+0x10/0x10 [ 52.226372][ T92] kthread+0x370/0x450 [ 52.226391][ T92] ? __pfx_kthread+0x10/0x10 [ 52.226410][ T92] ret_from_fork+0x72b/0xd50 [ 52.226429][ T92] ? __pfx_ret_from_fork+0x10/0x10 [ 52.226447][ T92] ? __switch_to+0x800/0x10f0 [ 52.226471][ T92] ? __pfx_kthread+0x10/0x10 [ 52.226490][ T92] ret_from_fork_asm+0x1a/0x30 [ 52.226515][ T92] [ 52.226524][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.226544][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.226554][ T5747] Call Trace: [ 52.226560][ T5747] [ 52.226565][ T5747] dump_stack_lvl+0x100/0x190 [ 52.226583][ T5747] should_fail_ex.cold+0x5/0xa [ 52.226598][ T5747] ? kmem_cache_alloc_lru_noprof+0x67/0x6a0 [ 52.226620][ T5747] should_failslab+0xc2/0x120 [ 52.226644][ T5747] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 52.226665][ T5747] ? start_dirop+0x79/0xb0 [ 52.226690][ T5747] ? alloc_inode+0x68/0x250 [ 52.226711][ T5747] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 52.226736][ T5747] alloc_inode+0x68/0x250 [ 52.226757][ T5747] new_inode+0x22/0x1c0 [ 52.226779][ T5747] __debugfs_create_file+0x105/0x4f0 [ 52.226804][ T5747] debugfs_create_file_full+0x41/0x60 [ 52.226829][ T5747] mac80211_hwsim_new_radio+0x2e12/0x64c0 [ 52.226858][ T5747] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 52.226883][ T5747] hwsim_new_radio_nl+0xc6b/0x13f0 [ 52.226907][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.226931][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 52.226953][ T5747] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 52.226991][ T5747] genl_family_rcv_msg_doit+0x214/0x300 [ 52.227012][ T5747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 52.227033][ T5747] ? genl_get_cmd+0x3e7/0x760 [ 52.227054][ T5747] ? bpf_lsm_capable+0x9/0x10 [ 52.227072][ T5747] ? security_capable+0x80/0x260 [ 52.227089][ T5747] ? ns_capable+0xd2/0xf0 [ 52.227106][ T5747] genl_rcv_msg+0x560/0x800 [ 52.227127][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.227146][ T5747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 52.227172][ T5747] netlink_rcv_skb+0x159/0x420 [ 52.227189][ T5747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.227210][ T5747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.227231][ T5747] ? netlink_deliver_tap+0x1ae/0xcc0 [ 52.227249][ T5747] genl_rcv+0x28/0x40 [ 52.227266][ T5747] netlink_unicast+0x585/0x850 [ 52.227285][ T5747] ? __pfx_netlink_unicast+0x10/0x10 [ 52.227305][ T5747] netlink_sendmsg+0x8b0/0xda0 [ 52.227344][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.227364][ T5747] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.227383][ T5747] __sys_sendto+0x48b/0x4e0 [ 52.227403][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.227426][ T5747] ? __pfx___sys_sendto+0x10/0x10 [ 52.227456][ T5747] __ia32_compat_sys_socketcall+0x59a/0x770 [ 52.227485][ T5747] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 52.227513][ T5747] ? fput_close_sync+0x11d/0x250 [ 52.227537][ T5747] do_int80_emulation+0x14b/0x720 [ 52.227559][ T5747] asm_int80_emulation+0x1a/0x20 [ 52.227575][ T5747] RIP: 0023:0xf71e736b [ 52.227587][ T5747] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.227602][ T5747] RSP: 002b:00000000ff801a3c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 52.227617][ T5747] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff801ae4 [ 52.227627][ T5747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.227636][ T5747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.227646][ T5747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.227655][ T5747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.227670][ T5747] [ 52.227710][ T5747] debugfs: out of free dentries, can not create file 'simulate_incumbent_signal_interference' [ 52.229935][ T5900] CPU: 2 UID: 0 PID: 5900 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 52.229960][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.229970][ T5900] Call Trace: [ 52.229977][ T5900] [ 52.229983][ T5900] dump_stack_lvl+0x100/0x190 [ 52.230005][ T5900] should_fail_ex.cold+0x5/0xa [ 52.230024][ T5900] should_failslab+0xc2/0x120 [ 52.230048][ T5900] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.230068][ T5900] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.230093][ T5900] ? security_file_alloc+0x34/0x2c0 [ 52.230117][ T5900] security_file_alloc+0x34/0x2c0 [ 52.230139][ T5900] init_file+0x95/0x480 [ 52.230159][ T5900] alloc_empty_file+0x79/0x1c0 [ 52.230182][ T5900] alloc_file_pseudo+0x183/0x290 [ 52.230208][ T5900] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 52.230230][ T5900] ? alloc_fd+0x471/0x7a0 [ 52.230248][ T5900] sock_alloc_file+0x50/0x210 [ 52.230271][ T5900] __sys_socket+0x1c0/0x260 [ 52.230289][ T5900] ? xfd_validate_state+0x129/0x190 [ 52.230309][ T5900] ? __pfx___sys_socket+0x10/0x10 [ 52.230328][ T5900] __ia32_sys_socket+0x72/0xb0 [ 52.230346][ T5900] ? lockdep_hardirqs_on+0x78/0x100 [ 52.230364][ T5900] __do_fast_syscall_32+0xe7/0x970 [ 52.230387][ T5900] do_fast_syscall_32+0x32/0x70 [ 52.230409][ T5900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.230429][ T5900] RIP: 0023:0xf7f34fec [ 52.230447][ T5900] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 52.230454][ T5900] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 52.230472][ T5900] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 52.230484][ T5900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.230494][ T5900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.230507][ T5900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.230518][ T5900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.230536][ T5900] [ 52.230654][ T24] FAULT_INJECTION: forcing a failure. [ 52.230654][ T24] name failslab, interval 1, probability 10, space 0, times 86 [ 52.231690][ T5747] FAULT_INJECTION: forcing a failure. [ 52.231690][ T5747] name failslab, interval 1, probability 10, space 0, times 85 [ 52.232638][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.232655][ T110] FAULT_INJECTION: forcing a failure. [ 52.232655][ T110] name failslab, interval 1, probability 10, space 0, times 84 [ 52.232672][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.232682][ T24] Workqueue: mld mld_dad_work [ 52.232707][ T24] Call Trace: [ 52.232712][ T24] [ 52.232717][ T24] dump_stack_lvl+0x100/0x190 [ 52.232736][ T24] should_fail_ex.cold+0x5/0xa [ 52.232748][ T24] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 52.232770][ T24] should_failslab+0xc2/0x120 [ 52.232790][ T24] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.232810][ T24] ? __alloc_skb+0x5b7/0x710 [ 52.232830][ T24] ? __alloc_skb+0x140/0x710 [ 52.232850][ T24] __alloc_skb+0x140/0x710 [ 52.232869][ T24] ? __alloc_skb+0x5b7/0x710 [ 52.232887][ T24] ? __pfx___alloc_skb+0x10/0x10 [ 52.232906][ T24] ? __pfx_ip6_finish_output+0x10/0x10 [ 52.232947][ T24] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.232968][ T24] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.232990][ T24] mld_newpack.isra.0+0x18e/0xa20 [ 52.233010][ T24] ? do_raw_spin_lock+0x128/0x260 [ 52.233029][ T24] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.233045][ T24] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 52.233086][ T24] ? rcu_is_watching+0x12/0xc0 [ 52.233106][ T24] ? lock_acquire+0x301/0x370 [ 52.233128][ T24] ? rcu_is_watching+0x12/0xc0 [ 52.233148][ T24] ? add_grhead+0x299/0x340 [ 52.233168][ T24] add_grhead+0x299/0x340 [ 52.233188][ T24] add_grec+0x1389/0x1930 [ 52.233210][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 52.233231][ T24] ? __pfx_add_grec+0x10/0x10 [ 52.233250][ T24] ? mld_in_v1_mode+0x2b2/0x3a0 [ 52.233269][ T24] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 52.233289][ T24] mld_send_initial_cr+0x156/0x320 [ 52.233311][ T24] mld_dad_work+0x32/0x1f0 [ 52.233333][ T24] process_one_work+0xa23/0x1940 [ 52.233360][ T24] ? __pfx_process_one_work+0x10/0x10 [ 52.233384][ T24] ? __pfx_mld_dad_work+0x10/0x10 [ 52.233406][ T24] worker_thread+0x5ef/0xe50 [ 52.233431][ T24] ? kthread+0x13a/0x450 [ 52.233449][ T24] ? __pfx_worker_thread+0x10/0x10 [ 52.233470][ T24] kthread+0x370/0x450 [ 52.233490][ T24] ? __pfx_kthread+0x10/0x10 [ 52.233510][ T24] ret_from_fork+0x72b/0xd50 [ 52.233529][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 52.233548][ T24] ? __switch_to+0x800/0x10f0 [ 52.233571][ T24] ? __pfx_kthread+0x10/0x10 [ 52.233592][ T24] ret_from_fork_asm+0x1a/0x30 [ 52.233617][ T24] [ 52.234740][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.234760][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.234769][ T5747] Call Trace: [ 52.234775][ T5747] [ 52.234780][ T5747] dump_stack_lvl+0x100/0x190 [ 52.234799][ T5747] should_fail_ex.cold+0x5/0xa [ 52.234814][ T5747] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 52.234832][ T5747] should_failslab+0xc2/0x120 [ 52.234854][ T5747] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.234870][ T5747] ? rcu_is_watching+0x12/0xc0 [ 52.234890][ T5747] ? __request_module+0x2b7/0x6a0 [ 52.234909][ T5747] __request_module+0x2b7/0x6a0 [ 52.234926][ T5747] ? __pfx___request_module+0x10/0x10 [ 52.234946][ T5747] ? rcu_is_watching+0x12/0xc0 [ 52.234965][ T5747] ? apparmor_capable+0x1d7/0x4d0 [ 52.234985][ T5747] ? dev_load+0x1c5/0x240 [ 52.235008][ T5747] dev_load+0x22b/0x240 [ 52.235029][ T5747] dev_ioctl+0x493/0x1070 [ 52.235051][ T5747] sock_do_ioctl+0x1a0/0x280 [ 52.235093][ T5747] ? __pfx_sock_do_ioctl+0x10/0x10 [ 52.235121][ T5747] ? do_vfs_ioctl+0x226/0x13e0 [ 52.235143][ T5747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.235167][ T5747] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 52.235186][ T5747] ? unix_ioctl+0x9c/0x570 [ 52.235202][ T5747] compat_sock_ioctl+0x568/0x760 [ 52.235222][ T5747] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 52.235239][ T5747] ? hook_file_ioctl_common+0x140/0x440 [ 52.235266][ T5747] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 52.235284][ T5747] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 52.235310][ T5747] __do_fast_syscall_32+0xe7/0x970 [ 52.235333][ T5747] do_fast_syscall_32+0x32/0x70 [ 52.235355][ T5747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.235375][ T5747] RIP: 0023:0xf7fe6fec [ 52.235392][ T5747] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 52.235400][ T5747] RSP: 002b:00000000ff801a84 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 52.235416][ T5747] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008933 [ 52.235432][ T5747] RDX: 00000000ff801abc RSI: 00000000f7476ff4 RDI: 00000000ff801abc [ 52.235441][ T5747] RBP: 00000000ff801bdc R08: 0000000000000000 R09: 0000000000000000 [ 52.235451][ T5747] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 52.235461][ T5747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.235476][ T5747] [ 52.235789][ T60] FAULT_INJECTION: forcing a failure. [ 52.235789][ T60] name failslab, interval 1, probability 10, space 0, times 82 [ 52.236764][ C1] FAULT_INJECTION: forcing a failure. [ 52.236764][ C1] name failslab, interval 1, probability 10, space 0, times 82 [ 52.238708][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 52.238728][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.238738][ T60] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.238765][ T60] Call Trace: [ 52.238771][ T60] [ 52.238777][ T60] dump_stack_lvl+0x100/0x190 [ 52.238796][ T60] should_fail_ex.cold+0x5/0xa [ 52.238813][ T60] should_failslab+0xc2/0x120 [ 52.238836][ T60] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.238857][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.238880][ T60] ? __alloc_skb+0x140/0x710 [ 52.238902][ T60] __alloc_skb+0x140/0x710 [ 52.238921][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.238940][ T60] ? __pfx___alloc_skb+0x10/0x10 [ 52.238962][ T60] ? kfree_skbmem+0x19f/0x210 [ 52.238980][ T60] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.239007][ T60] process_one_work+0xa23/0x1940 [ 52.239036][ T60] ? __pfx_process_one_work+0x10/0x10 [ 52.239061][ T60] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.239085][ T60] worker_thread+0x5ef/0xe50 [ 52.239110][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.239134][ T60] ? kthread+0x13a/0x450 [ 52.239156][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.239178][ T60] kthread+0x370/0x450 [ 52.239199][ T60] ? __pfx_kthread+0x10/0x10 [ 52.239221][ T60] ret_from_fork+0x72b/0xd50 [ 52.239242][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 52.239262][ T60] ? __switch_to+0x800/0x10f0 [ 52.239288][ T60] ? __pfx_kthread+0x10/0x10 [ 52.239310][ T60] ret_from_fork_asm+0x1a/0x30 [ 52.239337][ T60] [ 52.239543][ T36] FAULT_INJECTION: forcing a failure. [ 52.239543][ T36] name failslab, interval 1, probability 10, space 0, times 80 [ 52.240756][ C1] CPU: 1 UID: 0 PID: 110 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 52.240777][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.240786][ C1] Call Trace: [ 52.240791][ C1] [ 52.240819][ C1] dump_stack_lvl+0x100/0x190 [ 52.240838][ C1] should_fail_ex.cold+0x5/0xa [ 52.240855][ C1] should_failslab+0xc2/0x120 [ 52.240877][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.240897][ C1] ? __alloc_skb+0x5b7/0x710 [ 52.240917][ C1] ? __alloc_skb+0x140/0x710 [ 52.240938][ C1] __alloc_skb+0x140/0x710 [ 52.240957][ C1] ? __alloc_skb+0x5b7/0x710 [ 52.240976][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 52.240996][ C1] ? do_raw_spin_lock+0x128/0x260 [ 52.241015][ C1] skb_copy+0x1ca/0x3a0 [ 52.241036][ C1] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 52.241084][ C1] ? lock_release+0x24d/0x310 [ 52.241108][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 52.241129][ C1] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 52.241153][ C1] ? call_timer_fn+0x20b/0x610 [ 52.241174][ C1] ? lock_release+0x24d/0x310 [ 52.241199][ C1] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 52.241221][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 52.241243][ C1] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 52.241271][ C1] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 52.241294][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.241312][ C1] __iterate_interfaces+0x2e6/0x650 [ 52.241332][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 52.241355][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 52.241377][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 52.241399][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 52.241416][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 52.241434][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 52.241456][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 52.241476][ C1] handle_softirqs+0x1ea/0x9b0 [ 52.241496][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 52.241513][ C1] ? _raw_spin_unlock+0x28/0x50 [ 52.241530][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 52.241549][ C1] __irq_exit_rcu+0x162/0x210 [ 52.241566][ C1] irq_exit_rcu+0x9/0x30 [ 52.241583][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 52.241602][ C1] [ 52.241607][ C1] [ 52.241613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 52.241631][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 52.241653][ C1] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 52.241668][ C1] RSP: 0000:ffffc9000108eb88 EFLAGS: 00000293 [ 52.241682][ C1] RAX: ffffffff8f9af798 RBX: ffffffff8f9af740 RCX: ffffffff81e7f251 [ 52.241693][ C1] RDX: ffff8880229f0000 RSI: ffffffff81e7f25f RDI: ffff8880229f0000 [ 52.241705][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 52.241714][ C1] R10: 0000000000000000 R11: 5f646c756f687320 R12: 0000000000000a6a [ 52.241725][ C1] R13: ffffffff8f9af798 R14: ffffc9000108ec08 R15: dffffc0000000000 [ 52.241738][ C1] ? console_flush_one_record+0xab1/0xe50 [ 52.241757][ C1] ? console_flush_one_record+0xabf/0xe50 [ 52.241777][ C1] ? console_flush_one_record+0xabf/0xe50 [ 52.241797][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 52.241819][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 52.241840][ C1] console_unlock+0x103/0x260 [ 52.241856][ C1] ? __pfx_console_unlock+0x10/0x10 [ 52.241874][ C1] ? rcu_is_cpu_rrupt_from_idle+0x240/0x270 [ 52.241895][ C1] ? lock_acquire+0x301/0x370 [ 52.241917][ C1] ? rcu_is_watching+0x12/0xc0 [ 52.241938][ C1] vprintk_emit+0x407/0x6b0 [ 52.241957][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 52.241979][ C1] _printk+0xcf/0x110 [ 52.241995][ C1] ? __pfx__printk+0x10/0x10 [ 52.242012][ C1] ? __pfx____ratelimit+0x10/0x10 [ 52.242032][ C1] should_fail_ex+0x4e4/0x640 [ 52.242057][ C1] ? get_mem_cgroup_from_objcg+0x13f/0x620 [ 52.242074][ C1] should_failslab+0xc2/0x120 [ 52.242095][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.242115][ C1] ? zswap_store+0xc6d/0x2e70 [ 52.242132][ C1] zswap_store+0xc6d/0x2e70 [ 52.242151][ C1] ? __pfx_zswap_store+0x10/0x10 [ 52.242166][ C1] ? folio_free_swap+0x60d/0x9f0 [ 52.242188][ C1] ? do_raw_spin_lock+0x128/0x260 [ 52.242205][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.242223][ C1] ? swap_writeout+0xdd8/0x1b20 [ 52.242238][ C1] ? rcu_is_watching+0x12/0xc0 [ 52.242260][ C1] ? swap_writeout+0xdd8/0x1b20 [ 52.242275][ C1] ? lock_release+0x24d/0x310 [ 52.242300][ C1] swap_writeout+0xde0/0x1b20 [ 52.242318][ C1] shrink_folio_list+0x51c5/0x60a0 [ 52.242347][ C1] ? rcu_is_watching+0x12/0xc0 [ 52.242366][ C1] ? __pfx_shrink_folio_list+0x10/0x10 [ 52.242390][ C1] ? isolate_folios+0x116b/0x3520 [ 52.242412][ C1] ? isolate_folios+0x1383/0x3520 [ 52.242450][ C1] ? evict_folios+0x22c/0x17b0 [ 52.242473][ C1] ? evict_folios+0x257/0x17b0 [ 52.242496][ C1] ? rcu_is_watching+0x12/0xc0 [ 52.242515][ C1] ? evict_folios+0x257/0x17b0 [ 52.242538][ C1] ? lock_release+0x24d/0x310 [ 52.242563][ C1] evict_folios+0x31d/0x17b0 [ 52.242590][ C1] ? __pfx_evict_folios+0x10/0x10 [ 52.242617][ C1] ? __zone_watermark_ok+0x281/0x500 [ 52.242634][ C1] ? zone_watermark_ok+0x30/0x80 [ 52.242653][ C1] ? __pfx___might_resched+0x10/0x10 [ 52.242679][ C1] try_to_shrink_lruvec+0x249/0x6b0 [ 52.242705][ C1] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 52.242733][ C1] shrink_one+0x307/0x850 [ 52.242756][ C1] ? shrink_node+0x2701/0x3e90 [ 52.242773][ C1] ? shrink_node+0x2701/0x3e90 [ 52.242790][ C1] shrink_node+0x2721/0x3e90 [ 52.242807][ C1] ? shrink_node+0x246f/0x3e90 [ 52.242825][ C1] ? __pfx_shrink_node+0x10/0x10 [ 52.242842][ C1] ? find_held_lock+0x2b/0x80 [ 52.242866][ C1] ? balance_pgdat+0xb20/0x1f00 [ 52.242881][ C1] balance_pgdat+0xb20/0x1f00 [ 52.242898][ C1] ? do_raw_spin_lock+0x128/0x260 [ 52.242917][ C1] ? __pfx_balance_pgdat+0x10/0x10 [ 52.242933][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 52.242952][ C1] ? debug_object_free+0x295/0x550 [ 52.242978][ C1] ? __lock_acquire+0x49f/0x1a40 [ 52.243008][ C1] ? rcu_is_watching+0x12/0xc0 [ 52.243028][ C1] kswapd+0x556/0xb50 [ 52.243045][ C1] ? __pfx_kswapd+0x10/0x10 [ 52.243060][ C1] ? rcu_is_cpu_rrupt_from_idle+0x240/0x270 [ 52.243080][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 52.243120][ C1] ? __kthread_parkme+0x18c/0x230 [ 52.243139][ C1] ? kthread+0x13a/0x450 [ 52.243159][ C1] ? __pfx_kswapd+0x10/0x10 [ 52.243175][ C1] kthread+0x370/0x450 [ 52.243195][ C1] ? __pfx_kthread+0x10/0x10 [ 52.243216][ C1] ret_from_fork+0x72b/0xd50 [ 52.243235][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 52.243258][ C1] ? __switch_to+0x800/0x10f0 [ 52.243282][ C1] ? __pfx_kthread+0x10/0x10 [ 52.243303][ C1] ret_from_fork_asm+0x1a/0x30 [ 52.243328][ C1] [ 52.243687][ T92] FAULT_INJECTION: forcing a failure. [ 52.243687][ T92] name failslab, interval 1, probability 10, space 0, times 77 [ 52.243865][ C2] FAULT_INJECTION: forcing a failure. [ 52.243865][ C2] name failslab, interval 1, probability 10, space 0, times 77 [ 52.243890][ C2] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.243910][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.243928][ C2] Workqueue: mld mld_dad_work [ 52.243954][ C2] Call Trace: [ 52.243959][ C2] [ 52.243967][ C2] dump_stack_lvl+0x100/0x190 [ 52.243984][ C2] should_fail_ex.cold+0x5/0xa [ 52.244002][ C2] should_failslab+0xc2/0x120 [ 52.244024][ C2] __kmalloc_noprof+0xfc/0x820 [ 52.244044][ C2] ? cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 52.244069][ C2] ? ieee80211_bss_info_update+0x310/0xab0 [ 52.244095][ C2] ? ieee80211_scan_rx+0x4e6/0xb60 [ 52.244118][ C2] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.244148][ C2] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 52.244174][ C2] ? mld_dad_work+0x32/0x1f0 [ 52.244197][ C2] ? worker_thread+0x5ef/0xe50 [ 52.244220][ C2] ? kthread+0x370/0x450 [ 52.244240][ C2] ? ret_from_fork+0x72b/0xd50 [ 52.244260][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 52.244285][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.244303][ C2] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 52.244330][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.244350][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244369][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.244398][ C2] ? __asan_memcpy+0x3c/0x60 [ 52.244417][ C2] ieee80211_inform_bss+0x159/0x1170 [ 52.244442][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 52.244468][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 52.244493][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 52.244518][ C2] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 52.244540][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244561][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 52.244591][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244610][ C2] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 52.244635][ C2] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 52.244661][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244682][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 52.244705][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 52.244731][ C2] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 52.244757][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 52.244780][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244799][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244817][ C2] ? unwind_next_frame+0x3be/0x2090 [ 52.244842][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.244860][ C2] ? unwind_next_frame+0x3be/0x2090 [ 52.244885][ C2] ? unwind_next_frame+0x3c8/0x2090 [ 52.244889][ T60] FAULT_INJECTION: forcing a failure. [ 52.244889][ T60] name failslab, interval 1, probability 10, space 0, times 77 [ 52.244908][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 52.244940][ C2] ? __pfx_ieee80211_invoke_rx_handlers+0x10/0x10 [ 52.244972][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 52.244998][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 52.245024][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 52.245083][ C2] ? sta_info_get_by_addrs+0x160/0x2b0 [ 52.245104][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 52.245126][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 52.245152][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 52.245169][ C2] ? sched_clock_cpu+0x6c/0x570 [ 52.245194][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 52.245212][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.245233][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 52.245258][ C2] ieee80211_rx_list+0xf19/0x2160 [ 52.245279][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 52.245294][ C2] ? lock_acquire+0x301/0x370 [ 52.245318][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.245340][ C2] ieee80211_rx_napi+0xdc/0x400 [ 52.245355][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 52.245373][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.245393][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 52.245418][ C2] tasklet_action_common+0x2de/0x3d0 [ 52.245440][ C2] handle_softirqs+0x1ea/0x9b0 [ 52.245458][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 52.245477][ C2] ? irqtime_account_delta+0x9a/0x110 [ 52.245500][ C2] ? __alloc_skb+0x5b7/0x710 [ 52.245521][ C2] do_softirq+0xac/0xe0 [ 52.245539][ C2] [ 52.245544][ C2] [ 52.245550][ C2] __local_bh_enable_ip+0xf8/0x120 [ 52.245569][ C2] __alloc_skb+0x5db/0x710 [ 52.245588][ C2] ? __alloc_skb+0x5b7/0x710 [ 52.245609][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 52.245629][ C2] ? __pfx_ip6_finish_output+0x10/0x10 [ 52.245651][ C2] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.245674][ C2] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.245698][ C2] mld_newpack.isra.0+0x18e/0xa20 [ 52.245719][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.245738][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.245755][ C2] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 52.245777][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.245797][ C2] ? lock_acquire+0x301/0x370 [ 52.245822][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.245841][ C2] ? add_grhead+0x299/0x340 [ 52.245863][ C2] add_grhead+0x299/0x340 [ 52.245885][ C2] add_grec+0x1389/0x1930 [ 52.245906][ C2] ? __pfx___mutex_lock+0x10/0x10 [ 52.245934][ C2] ? __pfx_add_grec+0x10/0x10 [ 52.245955][ C2] ? mld_in_v1_mode+0x2b2/0x3a0 [ 52.245974][ C2] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 52.245996][ C2] mld_send_initial_cr+0x156/0x320 [ 52.246020][ C2] mld_dad_work+0x32/0x1f0 [ 52.246041][ C2] process_one_work+0xa23/0x1940 [ 52.246068][ C2] ? __pfx_process_one_work+0x10/0x10 [ 52.246095][ C2] ? __pfx_mld_dad_work+0x10/0x10 [ 52.246119][ C2] worker_thread+0x5ef/0xe50 [ 52.246145][ C2] ? kthread+0x13a/0x450 [ 52.246165][ C2] ? __pfx_worker_thread+0x10/0x10 [ 52.246188][ C2] kthread+0x370/0x450 [ 52.246209][ C2] ? __pfx_kthread+0x10/0x10 [ 52.246230][ C2] ret_from_fork+0x72b/0xd50 [ 52.246251][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 52.246270][ C2] ? __switch_to+0x800/0x10f0 [ 52.246296][ C2] ? __pfx_kthread+0x10/0x10 [ 52.246319][ C2] ret_from_fork_asm+0x1a/0x30 [ 52.246344][ C2] [ 52.246622][ T24] FAULT_INJECTION: forcing a failure. [ 52.246622][ T24] name failslab, interval 1, probability 10, space 0, times 75 [ 52.246641][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.246659][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.246669][ T24] Workqueue: mld mld_dad_work [ 52.246690][ T24] Call Trace: [ 52.246695][ T24] [ 52.246700][ T24] dump_stack_lvl+0x100/0x190 [ 52.246718][ T24] should_fail_ex.cold+0x5/0xa [ 52.246732][ T24] should_failslab+0xc2/0x120 [ 52.246753][ T24] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.246772][ T24] ? __alloc_skb+0x5b7/0x710 [ 52.246793][ T24] ? __alloc_skb+0x140/0x710 [ 52.246815][ T24] __alloc_skb+0x140/0x710 [ 52.246835][ T24] ? __alloc_skb+0x5b7/0x710 [ 52.246853][ T24] ? __pfx___alloc_skb+0x10/0x10 [ 52.246875][ T24] __pskb_copy_fclone+0xf2/0xe30 [ 52.246897][ T24] ? hsr_get_seq_block+0xf8/0x510 [ 52.246925][ T24] hsr_create_tagged_frame+0x141/0xf00 [ 52.246941][ T24] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.246966][ T24] ? hsr_check_duplicate.isra.0+0xd2/0x120 [ 52.246997][ T24] ? hsr_drop_frame+0x1f3/0xb80 [ 52.247014][ T24] hsr_forward_skb+0x1396/0x28d0 [ 52.247031][ T24] ? __pfx_hsr_drop_frame+0x10/0x10 [ 52.247047][ T24] ? __pfx_hsr_forward_skb+0x10/0x10 [ 52.247067][ T24] hsr_dev_xmit+0x213/0x400 [ 52.247090][ T24] dev_hard_start_xmit+0x121/0x760 [ 52.247109][ T24] ? netdev_core_pick_tx+0x20c/0x300 [ 52.247127][ T24] __dev_queue_xmit+0x1bbf/0x4970 [ 52.247147][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 52.247166][ T24] ? ip6mr_fib_lookup+0x133/0x1a0 [ 52.247183][ T24] ? __pfx_ip6mr_fib_lookup+0x10/0x10 [ 52.247203][ T24] ? ip6t_do_table+0xbed/0x1c90 [ 52.247224][ T24] ? ip6t_do_table+0xc1d/0x1c90 [ 52.247242][ T24] ? rcu_is_watching+0x12/0xc0 [ 52.247262][ T24] ? __asan_memcpy+0x3c/0x60 [ 52.247278][ T24] ? eth_header+0x120/0x1f0 [ 52.247294][ T24] neigh_connected_output+0x3b7/0x5d0 [ 52.247315][ T24] ip6_finish_output2+0xb0f/0x1ce0 [ 52.247339][ T24] __ip6_finish_output+0x357/0xdf0 [ 52.247360][ T24] ip6_output+0x2aa/0xa60 [ 52.247379][ T24] ? __pfx_ip6_output+0x10/0x10 [ 52.247400][ T24] ? __pfx_ip6_finish_output+0x10/0x10 [ 52.247418][ T24] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.247440][ T24] ? rcu_is_watching+0x12/0xc0 [ 52.247456][ T24] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.247477][ T24] ? lock_release+0x24d/0x310 [ 52.247501][ T24] ? __pfx_ip6_output+0x10/0x10 [ 52.247518][ T24] NF_HOOK.constprop.0+0x115/0x5a0 [ 52.247540][ T24] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 52.247561][ T24] ? icmp6_dst_alloc+0x33c/0x4f0 [ 52.247582][ T24] ? __pfx_dst_output+0x10/0x10 [ 52.247603][ T24] mld_sendpack+0x8f7/0xec0 [ 52.247625][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 52.247647][ T24] ? mld_in_v1_mode+0x2b2/0x3a0 [ 52.247666][ T24] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 52.247685][ T24] mld_send_initial_cr+0x219/0x320 [ 52.247707][ T24] mld_dad_work+0x32/0x1f0 [ 52.247729][ T24] process_one_work+0xa23/0x1940 [ 52.247754][ T24] ? __pfx_process_one_work+0x10/0x10 [ 52.247779][ T24] ? __pfx_mld_dad_work+0x10/0x10 [ 52.247801][ T24] worker_thread+0x5ef/0xe50 [ 52.247826][ T24] ? kthread+0x13a/0x450 [ 52.247845][ T24] ? __pfx_worker_thread+0x10/0x10 [ 52.247866][ T24] kthread+0x370/0x450 [ 52.247884][ T24] ? __pfx_kthread+0x10/0x10 [ 52.247905][ T24] ret_from_fork+0x72b/0xd50 [ 52.247929][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 52.247947][ T24] ? __switch_to+0x800/0x10f0 [ 52.247970][ T24] ? __pfx_kthread+0x10/0x10 [ 52.247991][ T24] ret_from_fork_asm+0x1a/0x30 [ 52.248016][ T24] [ 52.248026][ T92] CPU: 1 UID: 0 PID: 92 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 52.248045][ T92] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.248055][ T92] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.248078][ T92] Call Trace: [ 52.248083][ T92] [ 52.248089][ T92] dump_stack_lvl+0x100/0x190 [ 52.248105][ T92] should_fail_ex.cold+0x5/0xa [ 52.248120][ T92] should_failslab+0xc2/0x120 [ 52.248139][ T92] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.248158][ T92] ? __alloc_skb+0x5b7/0x710 [ 52.248176][ T92] ? __alloc_skb+0x140/0x710 [ 52.248195][ T92] __alloc_skb+0x140/0x710 [ 52.248212][ T92] ? __alloc_skb+0x5b7/0x710 [ 52.248230][ T92] ? __pfx___alloc_skb+0x10/0x10 [ 52.248248][ T92] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.248270][ T92] ? __pfx___might_resched+0x10/0x10 [ 52.248293][ T92] ? lock_release+0x24d/0x310 [ 52.248317][ T92] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.248341][ T92] process_one_work+0xa23/0x1940 [ 52.248366][ T92] ? __pfx_process_one_work+0x10/0x10 [ 52.248390][ T92] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.248411][ T92] worker_thread+0x5ef/0xe50 [ 52.248434][ T92] ? kthread+0x13a/0x450 [ 52.248453][ T92] ? __pfx_worker_thread+0x10/0x10 [ 52.248474][ T92] kthread+0x370/0x450 [ 52.248493][ T92] ? __pfx_kthread+0x10/0x10 [ 52.248512][ T92] ret_from_fork+0x72b/0xd50 [ 52.248530][ T92] ? __pfx_ret_from_fork+0x10/0x10 [ 52.248549][ T92] ? __switch_to+0x800/0x10f0 [ 52.248569][ T92] ? __pfx_kthread+0x10/0x10 [ 52.248582][ T92] ret_from_fork_asm+0x1a/0x30 [ 52.248598][ T92] [ 52.248603][ T92] FAULT_INJECTION: forcing a failure. [ 52.248603][ T92] name failslab, interval 1, probability 10, space 0, times 72 [ 52.248837][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 52.248858][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.248868][ T60] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.248893][ T60] Call Trace: [ 52.248898][ T60] [ 52.248904][ T60] dump_stack_lvl+0x100/0x190 [ 52.248912][ T12] FAULT_INJECTION: forcing a failure. [ 52.248912][ T12] name failslab, interval 1, probability 10, space 0, times 71 [ 52.248922][ T60] should_fail_ex.cold+0x5/0xa [ 52.248939][ T60] should_failslab+0xc2/0x120 [ 52.248962][ T60] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.248982][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.249002][ T60] ? __alloc_skb+0x140/0x710 [ 52.249024][ T60] __alloc_skb+0x140/0x710 [ 52.249070][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.249091][ T60] ? __pfx___alloc_skb+0x10/0x10 [ 52.249112][ T60] ? kfree_skbmem+0x19f/0x210 [ 52.249130][ T60] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.249157][ T60] process_one_work+0xa23/0x1940 [ 52.249185][ T60] ? __pfx_process_one_work+0x10/0x10 [ 52.249212][ T60] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.249236][ T60] worker_thread+0x5ef/0xe50 [ 52.249261][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.249285][ T60] ? kthread+0x13a/0x450 [ 52.249306][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.249328][ T60] kthread+0x370/0x450 [ 52.249349][ T60] ? __pfx_kthread+0x10/0x10 [ 52.249371][ T60] ret_from_fork+0x72b/0xd50 [ 52.249392][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 52.249412][ T60] ? __switch_to+0x800/0x10f0 [ 52.249455][ T60] ? __pfx_kthread+0x10/0x10 [ 52.249477][ T60] ret_from_fork_asm+0x1a/0x30 [ 52.249508][ T60] [ 52.249548][ T60] FAULT_INJECTION: forcing a failure. [ 52.249548][ T60] name failslab, interval 1, probability 10, space 0, times 70 [ 52.249568][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 52.249586][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.249597][ T60] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.249619][ T60] Call Trace: [ 52.249624][ T60] [ 52.249630][ T60] dump_stack_lvl+0x100/0x190 [ 52.249647][ T60] should_fail_ex.cold+0x5/0xa [ 52.249664][ T60] should_failslab+0xc2/0x120 [ 52.249686][ T60] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.249707][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.249727][ T60] ? __alloc_skb+0x140/0x710 [ 52.249749][ T60] __alloc_skb+0x140/0x710 [ 52.249769][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.249789][ T60] ? __pfx___alloc_skb+0x10/0x10 [ 52.249811][ T60] ? kfree_skbmem+0x19f/0x210 [ 52.249828][ T60] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.249855][ T60] process_one_work+0xa23/0x1940 [ 52.249882][ T60] ? __pfx_process_one_work+0x10/0x10 [ 52.249909][ T60] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.249931][ T60] worker_thread+0x5ef/0xe50 [ 52.249957][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.249981][ T60] ? kthread+0x13a/0x450 [ 52.250002][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.250025][ T60] kthread+0x370/0x450 [ 52.250046][ T60] ? __pfx_kthread+0x10/0x10 [ 52.250068][ T60] ret_from_fork+0x72b/0xd50 [ 52.250087][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 52.250107][ T60] ? __switch_to+0x800/0x10f0 [ 52.250132][ T60] ? __pfx_kthread+0x10/0x10 [ 52.250154][ T60] ret_from_fork_asm+0x1a/0x30 [ 52.250180][ T60] [ 52.250188][ T92] CPU: 1 UID: 0 PID: 92 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 52.250205][ T92] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.250214][ T92] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.250234][ T92] Call Trace: [ 52.250239][ T92] [ 52.250244][ T92] dump_stack_lvl+0x100/0x190 [ 52.250268][ T92] should_fail_ex.cold+0x5/0xa [ 52.250284][ T92] should_failslab+0xc2/0x120 [ 52.250306][ T92] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.250327][ T92] ? __alloc_skb+0x5b7/0x710 [ 52.250346][ T92] ? __alloc_skb+0x140/0x710 [ 52.250368][ T92] __alloc_skb+0x140/0x710 [ 52.250387][ T92] ? __alloc_skb+0x5b7/0x710 [ 52.250404][ T92] ? __pfx___alloc_skb+0x10/0x10 [ 52.250421][ T92] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.250437][ T92] ? __pfx___might_resched+0x10/0x10 [ 52.250457][ T92] ? lock_release+0x24d/0x310 [ 52.250479][ T92] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.250503][ T92] process_one_work+0xa23/0x1940 [ 52.250527][ T92] ? __pfx_process_one_work+0x10/0x10 [ 52.250550][ T92] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.250572][ T92] worker_thread+0x5ef/0xe50 [ 52.250595][ T92] ? kthread+0x13a/0x450 [ 52.250612][ T92] ? __pfx_worker_thread+0x10/0x10 [ 52.250633][ T92] kthread+0x370/0x450 [ 52.250650][ T92] ? __pfx_kthread+0x10/0x10 [ 52.250670][ T92] ret_from_fork+0x72b/0xd50 [ 52.250687][ T92] ? __pfx_ret_from_fork+0x10/0x10 [ 52.250705][ T92] ? __switch_to+0x800/0x10f0 [ 52.250727][ T92] ? __pfx_kthread+0x10/0x10 [ 52.250747][ T92] ret_from_fork_asm+0x1a/0x30 [ 52.250771][ T92] [ 52.250779][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.250799][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.250810][ T36] Workqueue: events_unbound call_usermodehelper_exec_work [ 52.250837][ T36] Call Trace: [ 52.250842][ T36] [ 52.250848][ T36] dump_stack_lvl+0x100/0x190 [ 52.250865][ T36] should_fail_ex.cold+0x5/0xa [ 52.250880][ T36] ? __kmalloc_noprof+0xd6/0x820 [ 52.250900][ T36] should_failslab+0xc2/0x120 [ 52.250923][ T36] __kmalloc_noprof+0xfc/0x820 [ 52.250942][ T36] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.250964][ T36] ? lsm_blob_alloc+0x68/0x90 [ 52.250992][ T36] lsm_blob_alloc+0x68/0x90 [ 52.251018][ T36] security_prepare_creds+0x2d/0x290 [ 52.251044][ T36] prepare_creds+0x5d6/0x950 [ 52.251070][ T36] copy_creds+0xa7/0xa50 [ 52.251096][ T36] copy_process+0x1420/0x8030 [ 52.251116][ T36] ? kasan_save_free_info+0x3b/0x70 [ 52.251132][ T36] ? __kasan_slab_free+0x5f/0x80 [ 52.251154][ T36] ? kmem_cache_free+0x127/0x6b0 [ 52.251170][ T36] ? kfree_skbmem+0x19a/0x210 [ 52.251185][ T36] ? consume_skb+0xd1/0x110 [ 52.251208][ T36] ? macvlan_process_broadcast+0x2b2/0x690 [ 52.251234][ T36] ? process_one_work+0xa23/0x1940 [ 52.251257][ T36] ? worker_thread+0x5ef/0xe50 [ 52.251280][ T36] ? kthread+0x370/0x450 [ 52.251301][ T36] ? ret_from_fork+0x72b/0xd50 [ 52.251320][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 52.251345][ T36] ? __pfx_copy_process+0x10/0x10 [ 52.251364][ T36] ? rcu_is_watching+0x12/0xc0 [ 52.251383][ T36] ? rcu_is_watching+0x12/0xc0 [ 52.251402][ T36] ? clockevents_program_event+0x1bf/0x820 [ 52.251426][ T36] ? lock_release+0x24d/0x310 [ 52.251450][ T36] ? rcu_is_watching+0x12/0xc0 [ 52.251471][ T36] kernel_clone+0x176/0x9d0 [ 52.251491][ T36] ? __pfx_kernel_clone+0x10/0x10 [ 52.251513][ T36] ? __pfx_clockevents_program_event+0x10/0x10 [ 52.251534][ T36] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 52.251562][ T36] user_mode_thread+0xcc/0x110 [ 52.251582][ T36] ? __pfx_user_mode_thread+0x10/0x10 [ 52.251602][ T36] ? kernel_sigaction+0x134/0x260 [ 52.251627][ T36] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 52.251655][ T36] ? __pfx_kernel_sigaction+0x10/0x10 [ 52.251678][ T36] ? rcu_is_watching+0x12/0xc0 [ 52.251697][ T36] ? lock_acquire+0x301/0x370 [ 52.251721][ T36] ? rcu_is_watching+0x12/0xc0 [ 52.251741][ T36] call_usermodehelper_exec_work+0x6b/0x180 [ 52.251767][ T36] process_one_work+0xa23/0x1940 [ 52.251795][ T36] ? __pfx_process_one_work+0x10/0x10 [ 52.251821][ T36] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 52.251848][ T36] worker_thread+0x5ef/0xe50 [ 52.251876][ T36] ? kthread+0x13a/0x450 [ 52.251896][ T36] ? __pfx_worker_thread+0x10/0x10 [ 52.251919][ T36] kthread+0x370/0x450 [ 52.251939][ T36] ? __pfx_kthread+0x10/0x10 [ 52.251962][ T36] ret_from_fork+0x72b/0xd50 [ 52.251981][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 52.252001][ T36] ? __switch_to+0x800/0x10f0 [ 52.252026][ T36] ? __pfx_kthread+0x10/0x10 [ 52.252048][ T36] ret_from_fork_asm+0x1a/0x30 [ 52.252075][ T36] [ 52.252084][ T110] CPU: 1 UID: 0 PID: 110 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 52.252102][ T110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.252110][ T110] Call Trace: [ 52.252114][ T110] [ 52.252119][ T110] dump_stack_lvl+0x100/0x190 [ 52.252135][ T110] should_fail_ex.cold+0x5/0xa [ 52.252149][ T110] ? get_mem_cgroup_from_objcg+0x13f/0x620 [ 52.252164][ T110] should_failslab+0xc2/0x120 [ 52.252184][ T110] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.252203][ T110] ? zswap_store+0xc6d/0x2e70 [ 52.252218][ T110] zswap_store+0xc6d/0x2e70 [ 52.252236][ T110] ? __pfx_zswap_store+0x10/0x10 [ 52.252251][ T110] ? folio_free_swap+0x60d/0x9f0 [ 52.252276][ T110] ? do_raw_spin_lock+0x128/0x260 [ 52.252292][ T110] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.252309][ T110] ? swap_writeout+0xdd8/0x1b20 [ 52.252323][ T110] ? rcu_is_watching+0x12/0xc0 [ 52.252339][ T110] ? swap_writeout+0xdd8/0x1b20 [ 52.252353][ T110] ? lock_release+0x24d/0x310 [ 52.252377][ T110] swap_writeout+0xde0/0x1b20 [ 52.252394][ T110] shrink_folio_list+0x51c5/0x60a0 [ 52.252420][ T110] ? rcu_is_watching+0x12/0xc0 [ 52.252437][ T110] ? __pfx_shrink_folio_list+0x10/0x10 [ 52.252463][ T110] ? isolate_folios+0x116b/0x3520 [ 52.252485][ T110] ? isolate_folios+0x1383/0x3520 [ 52.252516][ T110] ? evict_folios+0x22c/0x17b0 [ 52.252538][ T110] ? evict_folios+0x257/0x17b0 [ 52.252560][ T110] ? rcu_is_watching+0x12/0xc0 [ 52.252577][ T110] ? evict_folios+0x257/0x17b0 [ 52.252599][ T110] ? lock_release+0x24d/0x310 [ 52.252622][ T110] evict_folios+0x31d/0x17b0 [ 52.252647][ T110] ? __pfx_evict_folios+0x10/0x10 [ 52.252672][ T110] ? __zone_watermark_ok+0x281/0x500 [ 52.252690][ T110] ? zone_watermark_ok+0x30/0x80 [ 52.252707][ T110] ? __pfx___might_resched+0x10/0x10 [ 52.252731][ T110] try_to_shrink_lruvec+0x249/0x6b0 [ 52.252756][ T110] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 52.252781][ T110] shrink_one+0x307/0x850 [ 52.252820][ T110] ? shrink_node+0x2701/0x3e90 [ 52.252838][ T110] ? shrink_node+0x2701/0x3e90 [ 52.252853][ T110] shrink_node+0x2721/0x3e90 [ 52.252870][ T110] ? shrink_node+0x246f/0x3e90 [ 52.252886][ T110] ? __pfx_shrink_node+0x10/0x10 [ 52.252901][ T110] ? find_held_lock+0x2b/0x80 [ 52.252924][ T110] ? balance_pgdat+0xb20/0x1f00 [ 52.252938][ T110] balance_pgdat+0xb20/0x1f00 [ 52.252953][ T110] ? do_raw_spin_lock+0x128/0x260 [ 52.252971][ T110] ? __pfx_balance_pgdat+0x10/0x10 [ 52.252986][ T110] ? lockdep_hardirqs_on+0x78/0x100 [ 52.253005][ T110] ? debug_object_free+0x295/0x550 [ 52.253031][ T110] ? __lock_acquire+0x49f/0x1a40 [ 52.253080][ T110] ? rcu_is_watching+0x12/0xc0 [ 52.253100][ T110] kswapd+0x556/0xb50 [ 52.253116][ T110] ? __pfx_kswapd+0x10/0x10 [ 52.253131][ T110] ? rcu_is_cpu_rrupt_from_idle+0x240/0x270 [ 52.253150][ T110] ? __pfx_autoremove_wake_function+0x10/0x10 [ 52.253173][ T110] ? __kthread_parkme+0x18c/0x230 [ 52.253189][ T110] ? kthread+0x13a/0x450 [ 52.253208][ T110] ? __pfx_kswapd+0x10/0x10 [ 52.253222][ T110] kthread+0x370/0x450 [ 52.253241][ T110] ? __pfx_kthread+0x10/0x10 [ 52.253279][ T110] ret_from_fork+0x72b/0xd50 [ 52.253299][ T110] ? __pfx_ret_from_fork+0x10/0x10 [ 52.253317][ T110] ? __switch_to+0x800/0x10f0 [ 52.253339][ T110] ? __pfx_kthread+0x10/0x10 [ 52.253359][ T110] ret_from_fork_asm+0x1a/0x30 [ 52.253382][ T110] [ 52.253569][ T5899] CPU: 3 UID: 0 PID: 5899 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 52.253591][ T5899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.253600][ T5899] Call Trace: [ 52.253605][ T5899] [ 52.253611][ T5899] dump_stack_lvl+0x100/0x190 [ 52.253631][ T5899] should_fail_ex.cold+0x5/0xa [ 52.253647][ T5899] should_failslab+0xc2/0x120 [ 52.253669][ T5899] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.253689][ T5899] ? mas_preallocate+0x1105/0x14a0 [ 52.253715][ T5899] mas_preallocate+0x1105/0x14a0 [ 52.253728][ T5742] FAULT_INJECTION: forcing a failure. [ 52.253728][ T5742] name failslab, interval 1, probability 10, space 0, times 60 [ 52.253740][ T5899] ? __pfx_mas_preallocate+0x10/0x10 [ 52.253767][ T5899] ? anon_vma_name+0x5a/0x250 [ 52.253793][ T5899] __split_vma+0x33d/0xda0 [ 52.253810][ T5899] ? __pfx___split_vma+0x10/0x10 [ 52.253830][ T5899] vma_modify+0x1cf4/0x25c0 [ 52.253850][ T5899] ? __pfx_vma_modify+0x10/0x10 [ 52.253872][ T5899] vma_modify_flags+0x257/0x3d0 [ 52.253888][ T5899] ? __pfx_vma_modify_flags+0x10/0x10 [ 52.253903][ T5899] ? validate_mm+0x261/0x4e0 [ 52.253922][ T5899] ? rcu_is_watching+0x12/0xc0 [ 52.253940][ T5899] ? percpu_counter_add_batch+0xb9/0x230 [ 52.253966][ T5899] mprotect_fixup+0x27a/0xe30 [ 52.253985][ T5899] ? __pfx_mprotect_fixup+0x10/0x10 [ 52.254005][ T5899] ? __pfx_mas_prev+0x10/0x10 [ 52.254029][ T5899] do_mprotect_pkey+0xa4b/0xef0 [ 52.254048][ T5899] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 52.254068][ T5899] ? find_held_lock+0x2b/0x80 [ 52.254088][ T5899] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 52.254114][ T5899] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 52.254138][ T5899] __ia32_sys_mprotect+0x75/0xb0 [ 52.254153][ T5899] ? lockdep_hardirqs_on+0x78/0x100 [ 52.254171][ T5899] __do_fast_syscall_32+0xe7/0x970 [ 52.254194][ T5899] do_fast_syscall_32+0x32/0x70 [ 52.254215][ T5899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.254256][ T5899] RIP: 0023:0xf7fa4fec [ 52.254276][ T5899] Code: Unable to access opcode bytes at 0xf7fa4fc2. [ 52.254284][ T5899] RSP: 002b:00000000ffaec588 EFLAGS: 00000286 ORIG_RAX: 000000000000007d [ 52.254299][ T5899] RAX: ffffffffffffffda RBX: 00000000f5447000 RCX: 0000000000020000 [ 52.254311][ T5899] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000021000 [ 52.254320][ T5899] RBP: 00000000f5466b40 R08: 0000000000000000 R09: 0000000000000000 [ 52.254329][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.254338][ T5899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.254353][ T5899] [ 52.254363][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.254381][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.254392][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.254412][ T12] Call Trace: [ 52.254417][ T12] [ 52.254423][ T12] dump_stack_lvl+0x100/0x190 [ 52.254441][ T12] should_fail_ex.cold+0x5/0xa [ 52.254456][ T12] should_failslab+0xc2/0x120 [ 52.254477][ T12] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.254497][ T12] ? fib6_add_1+0x2b0/0x1700 [ 52.254515][ T12] fib6_add_1+0x2b0/0x1700 [ 52.254534][ T12] fib6_add+0x1c5/0x1d30 [ 52.254552][ T12] ? do_raw_spin_lock+0x128/0x260 [ 52.254570][ T12] ? __pfx_fib6_add+0x10/0x10 [ 52.254586][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.254605][ T12] ip6_ins_rt+0xb5/0x110 [ 52.254626][ T12] ? __pfx_ip6_ins_rt+0x10/0x10 [ 52.254644][ T12] ? nlmsg_notify+0xbf/0x290 [ 52.254663][ T12] ? nlmsg_notify+0xdc/0x290 [ 52.254679][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.254701][ T12] __ipv6_ifa_notify+0xbf1/0xf90 [ 52.254700][ T60] FAULT_INJECTION: forcing a failure. [ 52.254700][ T60] name failslab, interval 1, probability 10, space 0, times 59 [ 52.254719][ T12] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 52.254733][ T12] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.254759][ T12] ? __cancel_work+0x245/0x340 [ 52.254783][ T12] ? __pfx___cancel_work+0x10/0x10 [ 52.254805][ T12] ? __fib6_clean_all+0x18c/0x2d0 [ 52.254823][ T12] ? addrconf_dad_completed+0x195/0xff0 [ 52.254842][ T12] addrconf_dad_completed+0x195/0xff0 [ 52.254864][ T12] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.254883][ T12] ? addrconf_dad_work+0x820/0x1360 [ 52.254903][ T12] ? rcu_is_watching+0x12/0xc0 [ 52.254927][ T12] ? addrconf_dad_work+0x83c/0x1360 [ 52.254945][ T12] addrconf_dad_work+0x83c/0x1360 [ 52.254966][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.254987][ T12] ? lock_acquire+0x301/0x370 [ 52.255007][ T12] ? rcu_is_watching+0x12/0xc0 [ 52.255027][ T12] ? rcu_is_watching+0x12/0xc0 [ 52.255045][ T12] process_one_work+0xa23/0x1940 [ 52.255085][ T12] ? __pfx_process_one_work+0x10/0x10 [ 52.255111][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.255130][ T12] worker_thread+0x5ef/0xe50 [ 52.255155][ T12] ? kthread+0x13a/0x450 [ 52.255175][ T12] ? __pfx_worker_thread+0x10/0x10 [ 52.255194][ T12] kthread+0x370/0x450 [ 52.255215][ T12] ? __pfx_kthread+0x10/0x10 [ 52.255235][ T12] ret_from_fork+0x72b/0xd50 [ 52.255253][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 52.255272][ T12] ? __switch_to+0x800/0x10f0 [ 52.255294][ T12] ? __pfx_kthread+0x10/0x10 [ 52.255315][ T12] ret_from_fork_asm+0x1a/0x30 [ 52.255339][ T12] [ 52.256803][ T5900] FAULT_INJECTION: forcing a failure. [ 52.256803][ T5900] name failslab, interval 1, probability 10, space 0, times 58 [ 52.261014][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 52.261033][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.261041][ T5742] Call Trace: [ 52.261047][ T5742] [ 52.261072][ T5742] dump_stack_lvl+0x100/0x190 [ 52.261091][ T5742] should_fail_ex.cold+0x5/0xa [ 52.261104][ T5742] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 52.261123][ T5742] should_failslab+0xc2/0x120 [ 52.261143][ T5742] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.261161][ T5742] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.261182][ T5742] ? security_file_alloc+0x34/0x2c0 [ 52.261205][ T5742] security_file_alloc+0x34/0x2c0 [ 52.261225][ T5742] init_file+0x95/0x480 [ 52.261243][ T5742] alloc_empty_file+0x79/0x1c0 [ 52.261266][ T5742] path_openat+0xe7/0x4280 [ 52.261281][ T5742] ? kasan_save_track+0x14/0x30 [ 52.261300][ T5742] ? __kasan_slab_alloc+0x89/0x90 [ 52.261318][ T5742] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 52.261335][ T5742] ? do_getname+0x35/0x390 [ 52.261353][ T5742] ? do_sys_openat2+0xc7/0x1e0 [ 52.261371][ T5742] ? __ia32_compat_sys_openat+0x12d/0x210 [ 52.261389][ T5742] ? __do_fast_syscall_32+0xe7/0x970 [ 52.261411][ T5742] ? __pfx_path_openat+0x10/0x10 [ 52.261429][ T5742] do_file_open+0x20e/0x430 [ 52.261444][ T5742] ? __pfx_do_file_open+0x10/0x10 [ 52.261465][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 52.261480][ T5742] ? alloc_fd+0x471/0x7a0 [ 52.261497][ T5742] do_sys_openat2+0x10f/0x1e0 [ 52.261516][ T5742] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.261535][ T5742] ? kmem_cache_free+0x127/0x6b0 [ 52.261551][ T5742] ? __pfx_path_umount+0x10/0x10 [ 52.261567][ T5742] __ia32_compat_sys_openat+0x12d/0x210 [ 52.261588][ T5742] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 52.261610][ T5742] ? __pfx___ia32_sys_umount+0x10/0x10 [ 52.261626][ T5742] ? rcu_is_watching+0x12/0xc0 [ 52.261645][ T5742] __do_fast_syscall_32+0xe7/0x970 [ 52.261665][ T5742] do_fast_syscall_32+0x32/0x70 [ 52.261684][ T5742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.261693][ T5899] FAULT_INJECTION: forcing a failure. [ 52.261693][ T5899] name failslab, interval 1, probability 10, space 0, times 54 [ 52.261703][ T5742] RIP: 0023:0xf7f65fec [ 52.261715][ T5742] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.261729][ T5742] RSP: 002b:00000000ffb7a3b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 52.261744][ T5742] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffb7b514 [ 52.261754][ T5742] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f73f6ff4 [ 52.261763][ T5742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.261772][ T5742] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.261781][ T5742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.261795][ T5742] [ 52.261805][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 52.261826][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.261837][ T60] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.261863][ T60] Call Trace: [ 52.261868][ T60] [ 52.261874][ T60] dump_stack_lvl+0x100/0x190 [ 52.261892][ T60] should_fail_ex.cold+0x5/0xa [ 52.261910][ T60] should_failslab+0xc2/0x120 [ 52.261931][ T60] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.261952][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.261973][ T60] ? __alloc_skb+0x140/0x710 [ 52.261995][ T60] __alloc_skb+0x140/0x710 [ 52.262015][ T60] ? __alloc_skb+0x5b7/0x710 [ 52.262036][ T60] ? __pfx___alloc_skb+0x10/0x10 [ 52.262055][ T60] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.262074][ T60] ? __pfx___might_resched+0x10/0x10 [ 52.262101][ T60] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.262127][ T60] process_one_work+0xa23/0x1940 [ 52.262155][ T60] ? __pfx_process_one_work+0x10/0x10 [ 52.262182][ T60] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.262206][ T60] worker_thread+0x5ef/0xe50 [ 52.262231][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.262255][ T60] ? kthread+0x13a/0x450 [ 52.262276][ T60] ? __pfx_worker_thread+0x10/0x10 [ 52.262298][ T60] kthread+0x370/0x450 [ 52.262319][ T60] ? __pfx_kthread+0x10/0x10 [ 52.262341][ T60] ret_from_fork+0x72b/0xd50 [ 52.262361][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 52.262381][ T60] ? __switch_to+0x800/0x10f0 [ 52.262407][ T60] ? __pfx_kthread+0x10/0x10 [ 52.262434][ T60] ret_from_fork_asm+0x1a/0x30 [ 52.262460][ T60] [ 52.264607][ C2] FAULT_INJECTION: forcing a failure. [ 52.264607][ C2] name failslab, interval 1, probability 10, space 0, times 50 [ 52.266009][ T5899] CPU: 3 UID: 0 PID: 5899 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 52.266023][ T5899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.266029][ T5899] Call Trace: [ 52.266033][ T5899] [ 52.266037][ T5899] dump_stack_lvl+0x100/0x190 [ 52.266050][ T5899] should_fail_ex.cold+0x5/0xa [ 52.266060][ T5899] should_failslab+0xc2/0x120 [ 52.266074][ T5899] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.266086][ T5899] ? __send_signal_locked+0x155/0x12d0 [ 52.266104][ T5899] __send_signal_locked+0x155/0x12d0 [ 52.266121][ T5899] do_notify_parent+0xf05/0x10b0 [ 52.266121][ T36] FAULT_INJECTION: forcing a failure. [ 52.266121][ T36] name failslab, interval 1, probability 10, space 0, times 49 [ 52.266138][ T5899] ? __pfx_do_notify_parent+0x10/0x10 [ 52.266154][ T5899] ? do_raw_spin_lock+0x128/0x260 [ 52.266165][ T5899] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.266175][ T5899] ? exit_tasks_rcu_start+0x204/0x2f0 [ 52.266192][ T5899] ? will_become_orphaned_pgrp+0x2a6/0x340 [ 52.266207][ T5899] do_exit+0x1b75/0x2ae0 [ 52.266219][ T5899] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 52.266234][ T5899] ? do_raw_spin_lock+0x128/0x260 [ 52.266244][ T5899] ? __pfx_do_exit+0x10/0x10 [ 52.266262][ T5899] ? rcu_is_watching+0x12/0xc0 [ 52.266274][ T5899] do_group_exit+0xd5/0x2a0 [ 52.266288][ T5899] __ia32_sys_exit_group+0x3e/0x50 [ 52.266302][ T5899] ia32_sys_call+0x19ea/0x19f0 [ 52.266316][ T5899] __do_fast_syscall_32+0xe7/0x970 [ 52.266331][ T5899] do_fast_syscall_32+0x32/0x70 [ 52.266344][ T5899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.266357][ T5899] RIP: 0023:0xf7fa4fec [ 52.266365][ T5899] Code: Unable to access opcode bytes at 0xf7fa4fc2. [ 52.266369][ T5899] RSP: 002b:00000000ffaec63c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 52.266379][ T5899] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffaec6dc [ 52.266386][ T5899] RDX: 00000000f7195037 RSI: 00000000f743d300 RDI: 00000000f72714d9 [ 52.266392][ T5899] RBP: 00000000ffaec698 R08: 0000000000000000 R09: 0000000000000000 [ 52.266398][ T5899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.266404][ T5899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.266412][ T5899] [ 52.268127][ C2] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.268148][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.268160][ C2] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.268183][ C2] Call Trace: [ 52.268190][ C2] [ 52.268196][ C2] dump_stack_lvl+0x100/0x190 [ 52.268214][ C2] should_fail_ex.cold+0x5/0xa [ 52.268232][ C2] should_failslab+0xc2/0x120 [ 52.268255][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.268274][ C2] ? dst_alloc+0x99/0x1a0 [ 52.268296][ C2] ? __pfx_ip6_dst_gc+0x10/0x10 [ 52.268322][ C2] dst_alloc+0x99/0x1a0 [ 52.268341][ C2] ip6_pol_route+0x9fd/0x1310 [ 52.268365][ C2] ? __pfx_ip6_pol_route+0x10/0x10 [ 52.268386][ C2] ? __skb_ext_put+0x102/0x2f0 [ 52.268403][ C2] ? kmem_cache_free+0x127/0x6b0 [ 52.268423][ C2] ? __skb_ext_put+0x107/0x2f0 [ 52.268440][ C2] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 52.268462][ C2] fib6_rule_lookup+0x52f/0x720 [ 52.268484][ C2] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 52.268500][ C2] ? br_nf_dev_queue_xmit+0x5c5/0x2730 [ 52.268529][ C2] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 52.268555][ C2] ? br_nf_post_routing+0xafb/0x16a0 [ 52.268579][ C2] ? lock_release+0x24d/0x310 [ 52.268606][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.268633][ C2] ip6_route_input+0x662/0xc50 [ 52.268655][ C2] ? __pfx_ip6_route_input+0x10/0x10 [ 52.268677][ C2] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 52.268705][ C2] ? br_forward_finish+0x28d/0x4d0 [ 52.268727][ C2] ? lock_release+0x24d/0x310 [ 52.268752][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 52.268774][ C2] ? worker_thread+0x5ef/0xe50 [ 52.268799][ C2] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 52.268827][ C2] ip6_rcv_finish+0x130/0x300 [ 52.268849][ C2] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 52.268873][ C2] ip_sabotage_in+0x21e/0x290 [ 52.268898][ C2] nf_hook_slow+0xbf/0x220 [ 52.268921][ C2] nf_hook.constprop.0+0x2a6/0x750 [ 52.268944][ C2] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 52.268967][ C2] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 52.268992][ C2] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 52.269017][ C2] ? __pfx_ipv6_rcv+0x10/0x10 [ 52.269038][ C2] ipv6_rcv+0xa4/0x3d0 [ 52.269080][ C2] ? __pfx_ipv6_rcv+0x10/0x10 [ 52.269103][ C2] __netif_receive_skb_one_core+0x12d/0x1e0 [ 52.269125][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 52.269146][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.269165][ C2] ? lock_acquire+0x301/0x370 [ 52.269191][ C2] __netif_receive_skb+0x1f/0x120 [ 52.269211][ C2] netif_receive_skb+0x139/0x7d0 [ 52.269230][ C2] ? br_multicast_count+0x8d/0xbc0 [ 52.269256][ C2] ? __pfx_netif_receive_skb+0x10/0x10 [ 52.269276][ C2] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 52.269302][ C2] ? br_handle_vlan+0x279/0x550 [ 52.269321][ C2] ? rcu_read_lock_held+0x9/0x50 [ 52.269345][ C2] ? br_netif_receive_skb+0xff/0x1f0 [ 52.269369][ C2] br_pass_frame_up+0x346/0x490 [ 52.269395][ C2] br_handle_frame_finish+0xa94/0x1fa0 [ 52.269422][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.269447][ C2] ? ila_output+0xc60/0xc80 [ 52.269464][ C2] ? ip6t_do_table+0xbed/0x1c90 [ 52.269483][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.269510][ C2] ? ip6t_do_table+0xc1d/0x1c90 [ 52.269530][ C2] ? __pfx_ip6t_do_table+0x10/0x10 [ 52.269550][ C2] ? nf_hook_slow+0x167/0x220 [ 52.269566][ C2] br_nf_hook_thresh+0x30d/0x420 [ 52.269592][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.269618][ C2] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 52.269644][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.269668][ C2] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 52.269692][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.269714][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.269739][ C2] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 52.269764][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.269791][ C2] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 52.269818][ C2] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 52.269844][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.269863][ C2] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 52.269890][ C2] ? net_generic+0xea/0x2a0 [ 52.269918][ C2] ? lock_release+0x24d/0x310 [ 52.269945][ C2] br_nf_pre_routing+0x90f/0x1560 [ 52.269971][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.269992][ C2] br_handle_frame+0xce9/0x1540 [ 52.270016][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 52.270040][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.270060][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.270083][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.270103][ C2] ? unwind_next_frame+0x3be/0x2090 [ 52.270128][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 52.270153][ C2] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 52.270173][ C2] ? unwind_next_frame+0x3be/0x2090 [ 52.270199][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 52.270223][ C2] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.270243][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 52.270270][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 52.270293][ C2] ? rcu_core+0x59d/0x10d0 [ 52.270311][ C2] ? stack_trace_save+0x8e/0xc0 [ 52.270332][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 52.270354][ C2] ? slab_free_after_rcu_debug+0x4c/0x170 [ 52.270374][ C2] ? stack_depot_save_flags+0x27/0x9d0 [ 52.270399][ C2] ? kasan_save_stack+0x30/0x50 [ 52.270420][ C2] ? kasan_save_track+0x14/0x30 [ 52.270440][ C2] ? kasan_save_free_info+0x3b/0x70 [ 52.270456][ C2] ? __kasan_slab_free+0x5f/0x80 [ 52.270480][ C2] ? process_backlog+0x32a/0x1580 [ 52.270498][ C2] __netif_receive_skb_one_core+0xb0/0x1e0 [ 52.270518][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 52.270539][ C2] ? __css_rstat_updated+0x1ce/0x5a0 [ 52.270565][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.270583][ C2] ? lock_acquire+0x301/0x370 [ 52.270607][ C2] ? process_backlog+0x32a/0x1580 [ 52.270628][ C2] ? process_backlog+0x32a/0x1580 [ 52.270645][ C2] __netif_receive_skb+0x1f/0x120 [ 52.270666][ C2] process_backlog+0x37a/0x1580 [ 52.270686][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 52.270707][ C2] net_rx_action+0xa40/0xf20 [ 52.270730][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 52.270748][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.270767][ C2] ? hrtimer_bases_first+0x1a0/0x210 [ 52.270785][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 52.270804][ C2] ? sched_clock+0x38/0x60 [ 52.270821][ C2] ? sched_clock_cpu+0x6c/0x570 [ 52.270849][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.270868][ C2] handle_softirqs+0x1ea/0x9b0 [ 52.270890][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 52.270907][ C2] ? irqtime_account_delta+0x9a/0x110 [ 52.270935][ C2] ? __dev_queue_xmit+0xa12/0x4970 [ 52.270955][ C2] do_softirq+0xac/0xe0 [ 52.270971][ C2] [ 52.270978][ C2] [ 52.270983][ C2] __local_bh_enable_ip+0xf8/0x120 [ 52.271001][ C2] ? __dev_queue_xmit+0xa12/0x4970 [ 52.271020][ C2] __dev_queue_xmit+0xa27/0x4970 [ 52.271040][ C2] ? ip6mr_fib_lookup+0x133/0x1a0 [ 52.271061][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 52.271080][ C2] ? ip6t_do_table+0xbed/0x1c90 [ 52.271101][ C2] ? ip6t_do_table+0xc1d/0x1c90 [ 52.271120][ C2] ? mroute6_is_socket+0x1db/0x260 [ 52.271142][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271161][ C2] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 52.271187][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271207][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271227][ C2] ? __ip6_finish_output+0x357/0xdf0 [ 52.271248][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271269][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271290][ C2] ip6_finish_output2+0xfd4/0x1ce0 [ 52.271314][ C2] __ip6_finish_output+0x357/0xdf0 [ 52.271337][ C2] ip6_output+0x2aa/0xa60 [ 52.271359][ C2] ? __pfx_ip6_output+0x10/0x10 [ 52.271382][ C2] ? __pfx_ip6_finish_output+0x10/0x10 [ 52.271404][ C2] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.271426][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271446][ C2] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 52.271468][ C2] ? lock_release+0x24d/0x310 [ 52.271492][ C2] ? __pfx_ip6_output+0x10/0x10 [ 52.271513][ C2] NF_HOOK.constprop.0+0x115/0x5a0 [ 52.271536][ C2] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 52.271557][ C2] ? icmp6_dst_alloc+0x33c/0x4f0 [ 52.271581][ C2] ? __pfx_dst_output+0x10/0x10 [ 52.271603][ C2] mld_sendpack+0x8f7/0xec0 [ 52.271627][ C2] ? __pfx_mld_sendpack+0x10/0x10 [ 52.271650][ C2] ? mld_in_v1_mode+0x2b2/0x3a0 [ 52.271671][ C2] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 52.271692][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271711][ C2] mld_send_initial_cr+0x219/0x320 [ 52.271736][ C2] ipv6_mc_dad_complete+0xa7/0x1d0 [ 52.271762][ C2] addrconf_dad_completed+0xd91/0xff0 [ 52.271785][ C2] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.271807][ C2] ? addrconf_dad_work+0x820/0x1360 [ 52.271828][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271847][ C2] ? addrconf_dad_work+0x83c/0x1360 [ 52.271868][ C2] addrconf_dad_work+0x83c/0x1360 [ 52.271889][ C2] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.271909][ C2] ? lock_acquire+0x301/0x370 [ 52.271940][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271961][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.271982][ C2] process_one_work+0xa23/0x1940 [ 52.272009][ C2] ? __pfx_process_one_work+0x10/0x10 [ 52.272035][ C2] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.272056][ C2] worker_thread+0x5ef/0xe50 [ 52.272083][ C2] ? kthread+0x13a/0x450 [ 52.272105][ C2] ? __pfx_worker_thread+0x10/0x10 [ 52.272126][ C2] kthread+0x370/0x450 [ 52.272131][ T5140] FAULT_INJECTION: forcing a failure. [ 52.272131][ T5140] name failslab, interval 1, probability 10, space 0, times 45 [ 52.272148][ C2] ? __pfx_kthread+0x10/0x10 [ 52.272170][ C2] ret_from_fork+0x72b/0xd50 [ 52.272189][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 52.272210][ C2] ? __switch_to+0x800/0x10f0 [ 52.272236][ C2] ? __pfx_kthread+0x10/0x10 [ 52.272257][ C2] ret_from_fork_asm+0x1a/0x30 [ 52.272284][ C2] [ 52.272543][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.272565][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.272592][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.272620][ T36] Call Trace: [ 52.272625][ T36] [ 52.272632][ T36] dump_stack_lvl+0x100/0x190 [ 52.272651][ T36] should_fail_ex.cold+0x5/0xa [ 52.272669][ T36] should_failslab+0xc2/0x120 [ 52.272692][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.272713][ T36] ? __alloc_skb+0x5b7/0x710 [ 52.272735][ T36] ? __alloc_skb+0x140/0x710 [ 52.272757][ T36] __alloc_skb+0x140/0x710 [ 52.272777][ T36] ? __alloc_skb+0x5b7/0x710 [ 52.272796][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 52.272819][ T36] ? kfree_skbmem+0x19f/0x210 [ 52.272837][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.272865][ T36] process_one_work+0xa23/0x1940 [ 52.272893][ T36] ? __pfx_process_one_work+0x10/0x10 [ 52.272920][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.272944][ T36] worker_thread+0x5ef/0xe50 [ 52.272971][ T36] ? kthread+0x13a/0x450 [ 52.272993][ T36] ? __pfx_worker_thread+0x10/0x10 [ 52.273016][ T36] kthread+0x370/0x450 [ 52.273037][ T36] ? __pfx_kthread+0x10/0x10 [ 52.273082][ T36] ret_from_fork+0x72b/0xd50 [ 52.273103][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 52.273123][ T36] ? __switch_to+0x800/0x10f0 [ 52.273147][ T36] ? __pfx_kthread+0x10/0x10 [ 52.273169][ T36] ret_from_fork_asm+0x1a/0x30 [ 52.273196][ T36] [ 52.277100][ T41] FAULT_INJECTION: forcing a failure. [ 52.277100][ T41] name failslab, interval 1, probability 10, space 0, times 39 [ 52.277849][ T1364] FAULT_INJECTION: forcing a failure. [ 52.277849][ T1364] name failslab, interval 1, probability 10, space 0, times 38 [ 52.277870][ T1364] CPU: 1 UID: 0 PID: 1364 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 52.277888][ T1364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.277898][ T1364] Workqueue: events nsim_fib_event_work [ 52.277917][ T1364] Call Trace: [ 52.277922][ T1364] [ 52.277927][ T1364] dump_stack_lvl+0x100/0x190 [ 52.277944][ T1364] should_fail_ex.cold+0x5/0xa [ 52.277959][ T1364] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 52.277975][ T1364] should_failslab+0xc2/0x120 [ 52.277996][ T1364] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.278012][ T1364] ? nsim_fib_event_work+0xfdd/0x6310 [ 52.278028][ T1364] nsim_fib_event_work+0xfdd/0x6310 [ 52.278044][ T1364] ? __lock_acquire+0x49f/0x1a40 [ 52.278066][ T1364] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.278083][ T1364] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.278102][ T1364] ? debug_object_deactivate+0x2e4/0x3b0 [ 52.278126][ T1364] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.278143][ T1364] ? rcu_is_watching+0x12/0xc0 [ 52.278159][ T5590] FAULT_INJECTION: forcing a failure. [ 52.278159][ T5590] name failslab, interval 1, probability 10, space 0, times 38 [ 52.278163][ T1364] process_one_work+0xa23/0x1940 [ 52.278188][ T1364] ? __pfx_process_one_work+0x10/0x10 [ 52.278212][ T1364] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.278227][ T1364] worker_thread+0x5ef/0xe50 [ 52.278250][ T1364] ? __pfx_worker_thread+0x10/0x10 [ 52.278277][ T1364] ? kthread+0x13a/0x450 [ 52.278296][ T1364] ? __pfx_worker_thread+0x10/0x10 [ 52.278316][ T1364] kthread+0x370/0x450 [ 52.278335][ T1364] ? __pfx_kthread+0x10/0x10 [ 52.278354][ T1364] ret_from_fork+0x72b/0xd50 [ 52.278372][ T1364] ? __pfx_ret_from_fork+0x10/0x10 [ 52.278390][ T1364] ? __switch_to+0x800/0x10f0 [ 52.278412][ T1364] ? __pfx_kthread+0x10/0x10 [ 52.278432][ T1364] ret_from_fork_asm+0x1a/0x30 [ 52.278455][ T1364] [ 52.280058][ T41] CPU: 2 UID: 0 PID: 41 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 52.280077][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.280088][ T41] Workqueue: events nsim_fib_event_work [ 52.280106][ T41] Call Trace: [ 52.280111][ T41] [ 52.280118][ T41] dump_stack_lvl+0x100/0x190 [ 52.280135][ T41] should_fail_ex.cold+0x5/0xa [ 52.280150][ T41] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 52.280166][ T41] should_failslab+0xc2/0x120 [ 52.280188][ T41] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.280203][ T41] ? nsim_fib_event_work+0xfdd/0x6310 [ 52.280234][ T41] nsim_fib_event_work+0xfdd/0x6310 [ 52.280254][ T41] ? debug_object_deactivate+0x2e4/0x3b0 [ 52.280278][ T41] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.280296][ T41] ? rcu_is_watching+0x12/0xc0 [ 52.280316][ T41] process_one_work+0xa23/0x1940 [ 52.280341][ T41] ? __pfx_process_one_work+0x10/0x10 [ 52.280366][ T41] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 52.280384][ T41] worker_thread+0x5ef/0xe50 [ 52.280409][ T41] ? kthread+0x13a/0x450 [ 52.280428][ T41] ? __pfx_worker_thread+0x10/0x10 [ 52.280449][ T41] kthread+0x370/0x450 [ 52.280470][ T41] ? __pfx_kthread+0x10/0x10 [ 52.280489][ T41] ret_from_fork+0x72b/0xd50 [ 52.280509][ T41] ? __pfx_ret_from_fork+0x10/0x10 [ 52.280527][ T41] ? __switch_to+0x800/0x10f0 [ 52.280550][ T41] ? __pfx_kthread+0x10/0x10 [ 52.280572][ T41] ret_from_fork_asm+0x1a/0x30 [ 52.280597][ T41] [ 52.280909][ T24] FAULT_INJECTION: forcing a failure. [ 52.280909][ T24] name failslab, interval 1, probability 10, space 0, times 35 [ 52.282548][ T5590] CPU: 3 UID: 0 PID: 5590 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 52.282563][ T5590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.282571][ T5590] Workqueue: bat_events batadv_mcast_mla_update [ 52.282591][ T5590] Call Trace: [ 52.282594][ T5590] [ 52.282598][ T5590] dump_stack_lvl+0x100/0x190 [ 52.282610][ T5590] should_fail_ex.cold+0x5/0xa [ 52.282620][ T5590] should_failslab+0xc2/0x120 [ 52.282634][ T5590] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.282644][ T5590] ? batadv_mcast_mla_update+0xcd5/0x3200 [ 52.282659][ T5590] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 52.282676][ T5590] batadv_mcast_mla_update+0x19ae/0x3200 [ 52.282693][ T5590] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 52.282710][ T5590] ? debug_object_deactivate+0x2e4/0x3b0 [ 52.282726][ T5590] ? __pfx_debug_object_deactivate+0x10/0x10 [ 52.282740][ T5590] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.282760][ T5590] ? lock_acquire+0x301/0x370 [ 52.282775][ T5590] ? rcu_is_watching+0x12/0xc0 [ 52.282787][ T5590] ? rcu_is_watching+0x12/0xc0 [ 52.282799][ T5590] process_one_work+0xa23/0x1940 [ 52.282816][ T5590] ? __pfx_process_one_work+0x10/0x10 [ 52.282832][ T5590] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 52.282848][ T5590] worker_thread+0x5ef/0xe50 [ 52.282863][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 52.282878][ T5590] ? kthread+0x13a/0x450 [ 52.282891][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 52.282905][ T5590] kthread+0x370/0x450 [ 52.282918][ T5590] ? __pfx_kthread+0x10/0x10 [ 52.282932][ T5590] ret_from_fork+0x72b/0xd50 [ 52.282943][ T5590] ? __pfx_ret_from_fork+0x10/0x10 [ 52.282956][ T5590] ? __switch_to+0x800/0x10f0 [ 52.282971][ T5590] ? __pfx_kthread+0x10/0x10 [ 52.282984][ T5590] ret_from_fork_asm+0x1a/0x30 [ 52.283000][ T5590] [ 52.283019][ T5590] FAULT_INJECTION: forcing a failure. [ 52.283019][ T5590] name failslab, interval 1, probability 10, space 0, times 32 [ 52.283458][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.283477][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.283483][ T36] FAULT_INJECTION: forcing a failure. [ 52.283483][ T36] name failslab, interval 1, probability 10, space 0, times 32 [ 52.283487][ T24] Workqueue: mld mld_dad_work [ 52.283512][ T24] Call Trace: [ 52.283516][ T24] [ 52.283521][ T24] dump_stack_lvl+0x100/0x190 [ 52.283539][ T24] should_fail_ex.cold+0x5/0xa [ 52.283553][ T24] ? skb_put+0x138/0x180 [ 52.283570][ T24] should_failslab+0xc2/0x120 [ 52.283591][ T24] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.283611][ T24] ? rcu_is_watching+0x12/0xc0 [ 52.283644][ T24] ? dst_alloc+0x99/0x1a0 [ 52.283664][ T24] ? __pfx_ip6_dst_gc+0x10/0x10 [ 52.283689][ T24] dst_alloc+0x99/0x1a0 [ 52.283723][ T24] icmp6_dst_alloc+0x79/0x4f0 [ 52.283747][ T24] mld_sendpack+0x5ae/0xec0 [ 52.283769][ T110] ahci 0000:00:1f.2: Using 48-bit DMA addresses [ 52.283770][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 52.283793][ T24] ? mld_in_v1_mode+0x2b2/0x3a0 [ 52.283811][ T24] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 52.283833][ T24] mld_send_initial_cr+0x219/0x320 [ 52.283855][ T24] mld_dad_work+0x32/0x1f0 [ 52.283876][ T24] process_one_work+0xa23/0x1940 [ 52.283902][ T24] ? __pfx_process_one_work+0x10/0x10 [ 52.283932][ T24] ? __pfx_mld_dad_work+0x10/0x10 [ 52.283954][ T24] worker_thread+0x5ef/0xe50 [ 52.283979][ T24] ? kthread+0x13a/0x450 [ 52.283998][ T24] ? __pfx_worker_thread+0x10/0x10 [ 52.284020][ T24] kthread+0x370/0x450 [ 52.284038][ T24] ? __pfx_kthread+0x10/0x10 [ 52.284059][ T24] ret_from_fork+0x72b/0xd50 [ 52.284079][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 52.284099][ T24] ? __switch_to+0x800/0x10f0 [ 52.284122][ T24] ? __pfx_kthread+0x10/0x10 [ 52.284145][ T24] ret_from_fork_asm+0x1a/0x30 [ 52.284169][ T24] [ 52.284402][ C2] FAULT_INJECTION: forcing a failure. [ 52.284402][ C2] name failslab, interval 1, probability 10, space 0, times 30 [ 52.284424][ C2] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.284444][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.284454][ C2] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.284476][ C2] Call Trace: [ 52.284482][ C2] [ 52.284487][ C2] dump_stack_lvl+0x100/0x190 [ 52.284504][ C2] should_fail_ex.cold+0x5/0xa [ 52.284522][ C2] should_failslab+0xc2/0x120 [ 52.284544][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.284563][ C2] ? ebt_do_table+0x1ce6/0x2250 [ 52.284583][ C2] ? skb_ext_add+0xfa/0x810 [ 52.284601][ C2] skb_ext_add+0xfa/0x810 [ 52.284619][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.284639][ C2] ? net_generic+0xea/0x2a0 [ 52.284662][ C2] br_nf_forward_ip.part.0+0x28/0x820 [ 52.284690][ C2] br_nf_forward+0xfe5/0x19f0 [ 52.284717][ C2] nf_hook_slow+0xbf/0x220 [ 52.284736][ C2] __br_forward+0x2f7/0x970 [ 52.284760][ C2] ? __pfx___br_forward+0x10/0x10 [ 52.284779][ C2] ? __asan_memcpy+0x3c/0x60 [ 52.284799][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 52.284819][ C2] ? __skb_clone+0x570/0x760 [ 52.284841][ C2] br_flood+0x372/0x7b0 [ 52.284880][ C2] br_handle_frame_finish+0x1014/0x1fa0 [ 52.284907][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.284938][ C2] ? ila_output+0xc60/0xc80 [ 52.284956][ C2] ? ip6t_do_table+0xbed/0x1c90 [ 52.284973][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.285002][ C2] ? ip6t_do_table+0xc1d/0x1c90 [ 52.285022][ C2] ? __pfx_ip6t_do_table+0x10/0x10 [ 52.285043][ C2] ? nf_hook_slow+0x167/0x220 [ 52.285080][ C2] br_nf_hook_thresh+0x30d/0x420 [ 52.285105][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.285130][ C2] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 52.285157][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.285182][ C2] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 52.285208][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.285232][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.285255][ C2] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 52.285282][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.285310][ C2] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 52.285337][ C2] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 52.285363][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.285383][ C2] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 52.285409][ C2] ? net_generic+0xea/0x2a0 [ 52.285432][ C2] ? lock_release+0x24d/0x310 [ 52.285459][ C2] br_nf_pre_routing+0x90f/0x1560 [ 52.285486][ C2] br_handle_frame+0xce9/0x1540 [ 52.285510][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 52.285534][ C2] ? udp_queue_rcv_one_skb+0x917/0xf20 [ 52.285556][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 52.285581][ C2] ? udp_queue_rcv_skb+0x1a3/0xcf0 [ 52.285598][ C2] ? __pfx_ipt_do_table+0x10/0x10 [ 52.285620][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 52.285644][ C2] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 52.285669][ C2] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 52.285692][ C2] ? nf_hook.constprop.0+0x2e3/0x750 [ 52.285719][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.285739][ C2] ? ip_local_deliver_finish+0x419/0x6e0 [ 52.285764][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.285783][ C2] ? ip_local_deliver_finish+0x419/0x6e0 [ 52.285809][ C2] ? lock_release+0x24d/0x310 [ 52.285834][ C2] ? ip_local_deliver_finish+0x428/0x6e0 [ 52.285862][ C2] ? ip_local_deliver+0x19f/0x1f0 [ 52.285877][ C2] ? __pfx_ip_local_deliver+0x10/0x10 [ 52.285904][ C2] ? process_backlog+0x32a/0x1580 [ 52.285928][ C2] __netif_receive_skb_one_core+0xb0/0x1e0 [ 52.285947][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 52.285970][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.285990][ C2] ? lock_acquire+0x301/0x370 [ 52.286012][ C2] ? process_backlog+0x32a/0x1580 [ 52.286033][ C2] ? process_backlog+0x32a/0x1580 [ 52.286052][ C2] __netif_receive_skb+0x1f/0x120 [ 52.286071][ C2] process_backlog+0x37a/0x1580 [ 52.286093][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 52.286112][ C2] net_rx_action+0xa40/0xf20 [ 52.286135][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 52.286155][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.286173][ C2] ? hrtimer_bases_first+0x1a0/0x210 [ 52.286192][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 52.286212][ C2] ? sched_clock+0x38/0x60 [ 52.286230][ C2] ? sched_clock_cpu+0x6c/0x570 [ 52.286256][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286278][ C2] handle_softirqs+0x1ea/0x9b0 [ 52.286300][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 52.286319][ C2] ? irqtime_account_delta+0x9a/0x110 [ 52.286343][ C2] ? __dev_queue_xmit+0xa12/0x4970 [ 52.286360][ C2] do_softirq+0xac/0xe0 [ 52.286378][ C2] [ 52.286383][ C2] [ 52.286388][ C2] __local_bh_enable_ip+0xf8/0x120 [ 52.286408][ C2] ? __dev_queue_xmit+0xa12/0x4970 [ 52.286424][ C2] __dev_queue_xmit+0xa27/0x4970 [ 52.286444][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286465][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286496][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 52.286514][ C2] ? ref_tracker_alloc+0x307/0x590 [ 52.286533][ C2] ? in6_dev_get+0x133/0x310 [ 52.286552][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286572][ C2] ? in6_dev_get+0x133/0x310 [ 52.286594][ C2] ? do_raw_spin_lock+0x128/0x260 [ 52.286611][ C2] ? ___neigh_create+0x184c/0x2940 [ 52.286629][ C2] ? ___neigh_create+0x184c/0x2940 [ 52.286644][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286664][ C2] ? ___neigh_create+0x184c/0x2940 [ 52.286678][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.286706][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286725][ C2] ? __asan_memcpy+0x3c/0x60 [ 52.286741][ C2] ? eth_header+0x120/0x1f0 [ 52.286759][ C2] neigh_resolve_output+0x51f/0x8f0 [ 52.286789][ C2] ip6_finish_output2+0xb0f/0x1ce0 [ 52.286814][ C2] __ip6_finish_output+0x357/0xdf0 [ 52.286832][ T1161] FAULT_INJECTION: forcing a failure. [ 52.286832][ T1161] name failslab, interval 1, probability 10, space 0, times 30 [ 52.286837][ C2] ip6_output+0x2aa/0xa60 [ 52.286850][ T5746] FAULT_INJECTION: forcing a failure. [ 52.286850][ T5746] name failslab, interval 1, probability 10, space 0, times 30 [ 52.286859][ C2] ? __pfx_ip6_output+0x10/0x10 [ 52.286881][ C2] ? __pfx_ip6_finish_output+0x10/0x10 [ 52.286902][ C2] ? ndisc_send_skb+0xbba/0x1bf0 [ 52.286928][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.286948][ C2] ? ndisc_send_skb+0xbba/0x1bf0 [ 52.286982][ C2] ? lock_release+0x24d/0x310 [ 52.287007][ C2] ? __pfx_ip6_output+0x10/0x10 [ 52.287028][ C2] ndisc_send_skb+0xa85/0x1bf0 [ 52.287052][ C2] ? __pfx_ndisc_send_skb+0x10/0x10 [ 52.287074][ C2] ? __pfx_dst_output+0x10/0x10 [ 52.287098][ C2] ? ndisc_alloc_skb+0x319/0x530 [ 52.287120][ C2] ? __asan_memcpy+0x3c/0x60 [ 52.287138][ C2] ndisc_send_rs+0x129/0x680 [ 52.287163][ C2] addrconf_dad_completed+0x47f/0xff0 [ 52.287187][ C2] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.287209][ C2] ? addrconf_dad_work+0x820/0x1360 [ 52.287229][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.287250][ C2] ? addrconf_dad_work+0x83c/0x1360 [ 52.287269][ C2] addrconf_dad_work+0x83c/0x1360 [ 52.287291][ C2] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.287313][ C2] ? lock_acquire+0x301/0x370 [ 52.287337][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.287356][ C2] ? rcu_is_watching+0x12/0xc0 [ 52.287377][ C2] process_one_work+0xa23/0x1940 [ 52.287403][ C2] ? __pfx_process_one_work+0x10/0x10 [ 52.287429][ C2] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.287451][ C2] worker_thread+0x5ef/0xe50 [ 52.287478][ C2] ? kthread+0x13a/0x450 [ 52.287500][ C2] ? __pfx_worker_thread+0x10/0x10 [ 52.287521][ C2] kthread+0x370/0x450 [ 52.287543][ C2] ? __pfx_kthread+0x10/0x10 [ 52.287565][ C2] ret_from_fork+0x72b/0xd50 [ 52.287584][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 52.287606][ C2] ? __switch_to+0x800/0x10f0 [ 52.287631][ C2] ? __pfx_kthread+0x10/0x10 [ 52.287652][ C2] ret_from_fork_asm+0x1a/0x30 [ 52.287679][ C2] [ 52.287689][ T1161] CPU: 1 UID: 0 PID: 1161 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 52.287709][ T1161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.287719][ T1161] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.287743][ T1161] Call Trace: [ 52.287747][ T1161] [ 52.287752][ T1161] dump_stack_lvl+0x100/0x190 [ 52.287770][ T1161] should_fail_ex.cold+0x5/0xa [ 52.287785][ T1161] should_failslab+0xc2/0x120 [ 52.287806][ T1161] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.287826][ T1161] ? __alloc_skb+0x5b7/0x710 [ 52.287846][ T1161] ? __alloc_skb+0x140/0x710 [ 52.287866][ T1161] __alloc_skb+0x140/0x710 [ 52.287883][ T1161] ? __alloc_skb+0x5b7/0x710 [ 52.287902][ T1161] ? __pfx___alloc_skb+0x10/0x10 [ 52.287920][ T1161] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.287937][ T1161] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.287956][ T1161] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.287977][ T1161] ? rcu_is_watching+0x12/0xc0 [ 52.287995][ T1161] ? lock_acquire+0x301/0x370 [ 52.288020][ T1161] process_one_work+0xa23/0x1940 [ 52.288046][ T1161] ? __pfx_process_one_work+0x10/0x10 [ 52.288070][ T1161] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.288091][ T1161] worker_thread+0x5ef/0xe50 [ 52.288115][ T1161] ? kthread+0x13a/0x450 [ 52.288133][ T1161] ? __pfx_worker_thread+0x10/0x10 [ 52.288153][ T1161] kthread+0x370/0x450 [ 52.288172][ T1161] ? __pfx_kthread+0x10/0x10 [ 52.288192][ T1161] ret_from_fork+0x72b/0xd50 [ 52.288210][ T1161] ? __pfx_ret_from_fork+0x10/0x10 [ 52.288228][ T1161] ? __switch_to+0x800/0x10f0 [ 52.288250][ T1161] ? __pfx_kthread+0x10/0x10 [ 52.288274][ T1161] ret_from_fork_asm+0x1a/0x30 [ 52.288297][ T1161] [ 52.288308][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.288329][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.288341][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.288366][ T36] Call Trace: [ 52.288372][ T36] [ 52.288378][ T36] dump_stack_lvl+0x100/0x190 [ 52.288397][ T36] should_fail_ex.cold+0x5/0xa [ 52.288414][ T36] should_failslab+0xc2/0x120 [ 52.288443][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.288463][ T36] ? __alloc_skb+0x5b7/0x710 [ 52.288483][ T36] ? __alloc_skb+0x140/0x710 [ 52.288505][ T36] __alloc_skb+0x140/0x710 [ 52.288507][ T12] FAULT_INJECTION: forcing a failure. [ 52.288507][ T12] name failslab, interval 1, probability 10, space 0, times 25 [ 52.288525][ T36] ? __alloc_skb+0x5b7/0x710 [ 52.288544][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 52.288565][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.288583][ T36] ? __pfx___might_resched+0x10/0x10 [ 52.288611][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.288639][ T36] process_one_work+0xa23/0x1940 [ 52.288667][ T36] ? __pfx_process_one_work+0x10/0x10 [ 52.288694][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.288718][ T36] worker_thread+0x5ef/0xe50 [ 52.288745][ T36] ? kthread+0x13a/0x450 [ 52.288766][ T36] ? __pfx_worker_thread+0x10/0x10 [ 52.288789][ T36] kthread+0x370/0x450 [ 52.288811][ T36] ? __pfx_kthread+0x10/0x10 [ 52.288833][ T36] ret_from_fork+0x72b/0xd50 [ 52.288853][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 52.288874][ T36] ? __switch_to+0x800/0x10f0 [ 52.288899][ T36] ? __pfx_kthread+0x10/0x10 [ 52.288910][ T1161] FAULT_INJECTION: forcing a failure. [ 52.288910][ T1161] name failslab, interval 1, probability 10, space 0, times 22 [ 52.288921][ T36] ret_from_fork_asm+0x1a/0x30 [ 52.288947][ T36] [ 52.288955][ T1161] CPU: 1 UID: 0 PID: 1161 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 52.288973][ T1161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.288983][ T1161] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.289004][ T1161] Call Trace: [ 52.289009][ T1161] [ 52.289014][ T1161] dump_stack_lvl+0x100/0x190 [ 52.289070][ T1161] should_fail_ex.cold+0x5/0xa [ 52.289086][ T1161] should_failslab+0xc2/0x120 [ 52.289104][ T1161] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.289113][ T9] FAULT_INJECTION: forcing a failure. [ 52.289113][ T9] name failslab, interval 1, probability 10, space 0, times 21 [ 52.289123][ T1161] ? __alloc_skb+0x5b7/0x710 [ 52.289141][ T1161] ? __alloc_skb+0x140/0x710 [ 52.289161][ T1161] __alloc_skb+0x140/0x710 [ 52.289178][ T1161] ? __alloc_skb+0x5b7/0x710 [ 52.289196][ T1161] ? __pfx___alloc_skb+0x10/0x10 [ 52.289216][ T1161] ? kfree_skbmem+0x19f/0x210 [ 52.289231][ T1161] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.289261][ T1161] process_one_work+0xa23/0x1940 [ 52.289286][ T1161] ? __pfx_process_one_work+0x10/0x10 [ 52.289310][ T1161] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.289331][ T1161] worker_thread+0x5ef/0xe50 [ 52.289355][ T1161] ? kthread+0x13a/0x450 [ 52.289374][ T1161] ? __pfx_worker_thread+0x10/0x10 [ 52.289394][ T1161] kthread+0x370/0x450 [ 52.289413][ T1161] ? __pfx_kthread+0x10/0x10 [ 52.289432][ T1161] ret_from_fork+0x72b/0xd50 [ 52.289448][ T1161] ? __pfx_ret_from_fork+0x10/0x10 [ 52.289465][ T1161] ? __switch_to+0x800/0x10f0 [ 52.289488][ T1161] ? __pfx_kthread+0x10/0x10 [ 52.289507][ T1161] ret_from_fork_asm+0x1a/0x30 [ 52.289530][ T1161] [ 52.289539][ T5140] CPU: 3 UID: 0 PID: 5140 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 52.289553][ T5140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.289559][ T5140] Call Trace: [ 52.289562][ T5140] [ 52.289566][ T5140] dump_stack_lvl+0x100/0x190 [ 52.289579][ T5140] should_fail_ex.cold+0x5/0xa [ 52.289588][ T5140] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 52.289602][ T5140] should_failslab+0xc2/0x120 [ 52.289615][ T5140] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.289628][ T5140] ? __alloc_skb+0x5b7/0x710 [ 52.289641][ T5140] ? __alloc_skb+0x140/0x710 [ 52.289654][ T5140] __alloc_skb+0x140/0x710 [ 52.289666][ T5140] ? __alloc_skb+0x5b7/0x710 [ 52.289678][ T5140] ? __pfx___alloc_skb+0x10/0x10 [ 52.289692][ T5140] alloc_skb_with_frags+0xdd/0x760 [ 52.289709][ T5140] sock_alloc_send_pskb+0x801/0x980 [ 52.289724][ T5140] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 52.289737][ T5140] ? rcu_is_watching+0x12/0xc0 [ 52.289749][ T5140] ? sock_def_readable+0x1d2/0x600 [ 52.289761][ T5140] ? rcu_is_watching+0x12/0xc0 [ 52.289773][ T5140] ? sock_def_readable+0x1d2/0x600 [ 52.289785][ T5140] ? lock_release+0x24d/0x310 [ 52.289801][ T5140] unix_dgram_sendmsg+0x3c7/0x1810 [ 52.289816][ T5140] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 52.289846][ T5140] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 52.289864][ T5140] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 52.289878][ T5140] ? apparmor_socket_sendmsg+0x15b/0x270 [ 52.289890][ T5140] __sys_sendto+0x48b/0x4e0 [ 52.289903][ T5140] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 52.289916][ T5140] ? __pfx___sys_sendto+0x10/0x10 [ 52.289940][ T5140] ? rcu_is_watching+0x12/0xc0 [ 52.289954][ T5140] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 52.289968][ T5140] ? lock_release+0x24d/0x310 [ 52.289984][ T5140] ? lock_release+0x24d/0x310 [ 52.290001][ T5140] __x64_sys_sendto+0xe0/0x1c0 [ 52.290013][ T5140] ? trace_irq_enable.constprop.0+0x122/0x160 [ 52.290030][ T5140] do_syscall_64+0x115/0x840 [ 52.290037][ T36] FAULT_INJECTION: forcing a failure. [ 52.290037][ T36] name failslab, interval 1, probability 10, space 0, times 18 [ 52.290043][ T5140] ? clear_bhb_loop+0x40/0x90 [ 52.290055][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.290066][ T5140] RIP: 0033:0x7f3f02cb3407 [ 52.290075][ T5140] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.290085][ T5140] RSP: 002b:00007ffc2be796c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 52.290096][ T5140] RAX: ffffffffffffffda RBX: 00007f3f02b63c80 RCX: 00007f3f02cb3407 [ 52.290103][ T5140] RDX: 000000000000004d RSI: 00007ffc2be79800 RDI: 0000000000000003 [ 52.290109][ T5140] RBP: 00007ffc2be79c30 R08: 0000000000000000 R09: 0000000000000000 [ 52.290115][ T5140] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc2be79c48 [ 52.290122][ T5140] R13: 00007ffc2be79800 R14: 0000000000000032 R15: 00007ffc2be79800 [ 52.290131][ T5140] [ 52.290137][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.290155][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.290165][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.290186][ T36] Call Trace: [ 52.290191][ T36] [ 52.290197][ T36] dump_stack_lvl+0x100/0x190 [ 52.290212][ T36] should_fail_ex.cold+0x5/0xa [ 52.290228][ T36] should_failslab+0xc2/0x120 [ 52.290248][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 52.290274][ T36] ? __alloc_skb+0x5b7/0x710 [ 52.290292][ T36] ? __alloc_skb+0x140/0x710 [ 52.290311][ T36] __alloc_skb+0x140/0x710 [ 52.290329][ T36] ? __alloc_skb+0x5b7/0x710 [ 52.290347][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 52.290365][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 52.290381][ T36] ? __pfx___might_resched+0x10/0x10 [ 52.290403][ T36] ? lock_release+0x24d/0x310 [ 52.290426][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 52.290450][ T36] process_one_work+0xa23/0x1940 [ 52.290474][ T36] ? __pfx_process_one_work+0x10/0x10 [ 52.290498][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 52.290519][ T36] worker_thread+0x5ef/0xe50 [ 52.290543][ T36] ? kthread+0x13a/0x450 [ 52.290561][ T36] ? __pfx_worker_thread+0x10/0x10 [ 52.290581][ T36] kthread+0x370/0x450 [ 52.290599][ T36] ? __pfx_kthread+0x10/0x10 [ 52.290619][ T36] ret_from_fork+0x72b/0xd50 [ 52.290638][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 52.290656][ T36] ? __switch_to+0x800/0x10f0 [ 52.290676][ T36] ? __pfx_kthread+0x10/0x10 [ 52.290696][ T36] ret_from_fork_asm+0x1a/0x30 [ 52.290720][ T36] [ 52.290728][ T5590] CPU: 3 UID: 0 PID: 5590 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 52.290740][ T5590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.290749][ T36] FAULT_INJECTION: forcing a failure. [ 52.290749][ T36] name failslab, interval 1, probability 10, space 0, times 17 [ 52.290748][ T5590] Workqueue: bat_events batadv_mcast_mla_update [ 52.290767][ T5590] Call Trace: [ 52.290770][ T5590] [ 52.290773][ T5590] dump_stack_lvl+0x100/0x190 [ 52.290784][ T5590] should_fail_ex.cold+0x5/0xa [ 52.290794][ T5590] should_failslab+0xc2/0x120 [ 52.290807][ T5590] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.290817][ T5590] ? lock_acquire+0x301/0x370 [ 52.290832][ T5590] ? batadv_mcast_get_bridge+0xcc/0x2b0 [ 52.290846][ T5590] ? lock_release+0x24d/0x310 [ 52.290861][ T5590] ? batadv_mcast_mla_update+0x1ed5/0x3200 [ 52.290878][ T5590] batadv_mcast_mla_update+0x1ed5/0x3200 [ 52.290894][ T5590] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 52.290911][ T5590] ? debug_object_deactivate+0x2e4/0x3b0 [ 52.290936][ T5590] ? __pfx_debug_object_deactivate+0x10/0x10 [ 52.290952][ T5590] ? lock_acquire+0x301/0x370 [ 52.290966][ T5590] ? rcu_is_watching+0x12/0xc0 [ 52.290978][ T5590] ? rcu_is_watching+0x12/0xc0 [ 52.290990][ T5590] process_one_work+0xa23/0x1940 [ 52.291007][ T5590] ? __pfx_process_one_work+0x10/0x10 [ 52.291023][ T5590] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 52.291039][ T5590] worker_thread+0x5ef/0xe50 [ 52.291054][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 52.291069][ T5590] ? kthread+0x13a/0x450 [ 52.291082][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 52.291096][ T5590] kthread+0x370/0x450 [ 52.291108][ T5590] ? __pfx_kthread+0x10/0x10 [ 52.291122][ T5590] ret_from_fork+0x72b/0xd50 [ 52.291134][ T5590] ? __pfx_ret_from_fork+0x10/0x10 [ 52.291146][ T5590] ? __switch_to+0x800/0x10f0 [ 52.291161][ T5590] ? __pfx_kthread+0x10/0x10 [ 52.291175][ T5590] ret_from_fork_asm+0x1a/0x30 [ 52.291190][ T5590] [ 52.291198][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.291220][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.291230][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 52.291252][ T12] Call Trace: [ 52.291258][ T12] [ 52.291263][ T12] dump_stack_lvl+0x100/0x190 [ 52.291282][ T12] should_fail_ex.cold+0x5/0xa [ 52.291298][ T12] should_failslab+0xc2/0x120 [ 52.291320][ T12] __kmalloc_cache_noprof+0x91/0x6c0 [ 52.291336][ T12] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 52.291359][ T12] dst_cow_metrics_generic+0x4c/0x1e0 [ 52.291381][ T12] icmp6_dst_alloc+0x418/0x4f0 [ 52.291405][ T12] ndisc_send_skb+0x133f/0x1bf0 [ 52.291426][ T12] ? __kasan_slab_alloc+0x89/0x90 [ 52.291464][ T12] ? __pfx_ndisc_send_skb+0x10/0x10 [ 52.291487][ T12] ? kmalloc_reserve+0xf9/0x350 [ 52.291506][ T12] ? ndisc_alloc_skb+0x319/0x530 [ 52.291527][ T12] ? __asan_memcpy+0x3c/0x60 [ 52.291546][ T12] ndisc_send_rs+0x129/0x680 [ 52.291569][ T12] addrconf_dad_completed+0x47f/0xff0 [ 52.291591][ T12] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 52.291613][ T12] ? addrconf_dad_work+0x820/0x1360 [ 52.291632][ T12] ? rcu_is_watching+0x12/0xc0 [ 52.291652][ T12] ? addrconf_dad_work+0x83c/0x1360 [ 52.291672][ T12] addrconf_dad_work+0x83c/0x1360 [ 52.291694][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.291713][ T12] ? lock_acquire+0x301/0x370 [ 52.291739][ T12] ? rcu_is_watching+0x12/0xc0 [ 52.291759][ T12] ? rcu_is_watching+0x12/0xc0 [ 52.291779][ T12] process_one_work+0xa23/0x1940 [ 52.291805][ T12] ? __pfx_process_one_work+0x10/0x10 [ 52.291830][ T12] ? __pfx_addrconf_dad_work+0x10/0x10 [ 52.291852][ T12] worker_thread+0x5ef/0xe50 [ 52.291878][ T12] ? kthread+0x13a/0x450 [ 52.291896][ T12] ? __pfx_worker_thread+0x10/0x10 [ 52.291924][ T12] kthread+0x370/0x450 [ 52.291945][ T12] ? __pfx_kthread+0x10/0x10 [ 52.291967][ T12] ret_from_fork+0x72b/0xd50 [ 52.291985][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 52.292006][ T12] ? __switch_to+0x800/0x10f0 [ 52.292030][ T12] ? __pfx_kthread+0x10/0x10 [ 52.292050][ T12] ret_from_fork_asm+0x1a/0x30 [ 52.292076][ T12] [ 52.292085][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.292103][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.292113][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.292134][ T36] Call Trace: [ 52.292139][ T36] [ 52.292143][ T36] dump_stack_lvl+0x100/0x190 [ 52.292145][ T5140] FAULT_INJECTION: forcing a failure. [ 52.292145][ T5140] name failslab, interval 1, probability 10, space 0, times 15 [ 52.292159][ T36] should_fail_ex.cold+0x5/0xa [ 52.292175][ T36] should_failslab+0xc2/0x120 [ 52.292194][ T36] kmem_cache_