last executing test programs: 8.683984072s ago: executing program 1 (id=714): openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/91) 8.10238253s ago: executing program 2 (id=720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x3, 0x101, 0x7ff, 0x15}, {0x7, 0x0, 0x3ff, 0x200, 0x8, 0x1}, 0x3, 0x92, 0x151f}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 8.022495275s ago: executing program 2 (id=724): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) pread64(r0, &(0x7f0000000a80), 0x8, 0xc0000) pread64(r0, &(0x7f0000000ac0), 0x8, 0xd0000) pread64(r0, &(0x7f0000000b00), 0x8, 0xe0000) pread64(r0, &(0x7f0000000b40), 0x8, 0xf0000) 7.89242061s ago: executing program 2 (id=727): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000002"], 0x48}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7.611622378s ago: executing program 0 (id=732): syz_usb_connect(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 7.272033199s ago: executing program 3 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100\x00', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='3\x00', 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000380)={0x1000}) 7.271790364s ago: executing program 3 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 7.213925585s ago: executing program 1 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_set_msi/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/raw_syscalls/sys_enter/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 7.083429537s ago: executing program 1 (id=739): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) close(r2) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 7.082744745s ago: executing program 3 (id=740): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058202000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000400)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000600)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000500)="840100"/64) (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000800)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000700)="88010000010000001400"/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000900)="880100"/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000a00)="880100"/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000b00)="880100"/64) (async) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='none\x00', &(0x7f0000000e00)='./sys\x00', &(0x7f0000000f00)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/adsl_state\x00', 0x2, 0x0) read(r1, &(0x7f0000001100)=""/64, 0x40) write(r1, &(0x7f0000001200)='stop\x00', 0x5) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001300)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001400)="850100"/64) (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001500)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001600)="880100000200000014000000010000000300"/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001700)="880100"/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001800)="880100"/64) (async) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000001900)="880100"/64) (async) nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0) 7.082415461s ago: executing program 1 (id=741): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x8, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 7.017649452s ago: executing program 2 (id=742): ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'macvlan1\x00', 0x6}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x8}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000240), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x2, 0xfff7fff8, 0x4, 0xffffffff, 0x57, "bb40af00008000"}) 6.91391634s ago: executing program 2 (id=743): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) stat(&(0x7f0000000040)='./file0\x00', 0x0) 6.61334542s ago: executing program 1 (id=744): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(0x0, 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='file0\x00', 0x6) 5.793957507s ago: executing program 3 (id=745): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) r2 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='21064', 0x5) 5.613874856s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100\x00', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/self/fail-nth\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='3\x00', 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000380)={0x1000}) 4.87460425s ago: executing program 1 (id=747): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000102030109022000010100c000090400000200000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000300), 0xd, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0xe, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000500), 0xf, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000600), 0x15, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000700), 0xb, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000800)={0xa0, 0x6, 0x2900, 0x0, 0x0, 0x3e8, &(0x7f0000000900)}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000a00)={0x23, 0x3, 0x15, 0x101, 0x0, 0x3e8, 0x0}) 4.53350874s ago: executing program 0 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.213796104s ago: executing program 2 (id=749): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) close(r2) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 1.143755758s ago: executing program 0 (id=750): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000002"], 0x48}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 693.913979ms ago: executing program 3 (id=751): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x1, 0x200, &(0x7f0000000880)="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"}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000000c0)={0x1}) 263.735945ms ago: executing program 0 (id=752): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x8, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 330.754µs ago: executing program 0 (id=753): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x8) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) 0s ago: executing program 0 (id=754): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) r2 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='21064', 0x5) 0s ago: executing program 0 (id=755): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) kernel console output (not intermixed with test programs): 2760][ T5842] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.112777][ T5842] hub_port_init+0x6c8/0x37f0 [ 99.112794][ T5842] hub_event+0x2e7d/0x4a60 [ 99.112819][ T5842] ? __pfx_hub_event+0x10/0x10 [ 99.112832][ T5842] ? debug_object_deactivate+0x2e4/0x3b0 [ 99.112853][ T5842] ? rcu_is_watching+0x12/0xc0 [ 99.112872][ T5842] process_one_work+0xa23/0x1940 [ 99.112890][ T5842] ? __pfx_process_one_work+0x10/0x10 [ 99.112907][ T5842] ? __pfx_hub_event+0x10/0x10 [ 99.112922][ T5842] worker_thread+0x5ef/0xe50 [ 99.112937][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 99.112950][ T5842] ? kthread+0x13a/0x450 [ 99.112960][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 99.112971][ T5842] kthread+0x370/0x450 [ 99.112981][ T5842] ? __pfx_kthread+0x10/0x10 [ 99.112993][ T5842] ret_from_fork+0x72b/0xd50 [ 99.113009][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 99.113026][ T5842] ? __switch_to+0x800/0x10f0 [ 99.113038][ T5842] ? __pfx_kthread+0x10/0x10 [ 99.113049][ T5842] ret_from_fork_asm+0x1a/0x30 [ 99.113072][ T5842] [ 99.113092][ T5842] raw-gadget.1 gadget.3: failed to queue reset event [ 99.113804][ T5732] 57382 total pagecache pages [ 99.113811][ T5732] 0 pages in swap cache [ 99.113816][ T5732] Free swap = 124996kB [ 99.126892][ T1175] FAULT_INJECTION: forcing a failure. [ 99.126892][ T1175] name failslab, interval 1, probability 1, space 0, times 66 [ 99.126915][ T1175] CPU: 1 UID: 0 PID: 1175 Comm: kworker/u33:13 Not tainted syzkaller #0 PREEMPT(full) [ 99.126929][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.126937][ T1175] Workqueue: events_unbound cfg80211_wiphy_work [ 99.126957][ T1175] Call Trace: [ 99.126962][ T1175] [ 99.126967][ T1175] dump_stack_lvl+0x100/0x190 [ 99.126982][ T1175] should_fail_ex.cold+0x5/0xa [ 99.126997][ T1175] should_failslab+0xc2/0x120 [ 99.127013][ T1175] __kmalloc_noprof+0xfc/0x820 [ 99.127026][ T1175] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.127046][ T1175] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.127062][ T1175] ? unwind_next_frame+0x3be/0x2090 [ 99.127076][ T1175] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 99.127092][ T1175] ? ret_from_fork_asm+0x1a/0x30 [ 99.127117][ T1175] ? stack_trace_save+0x8e/0xc0 [ 99.127130][ T1175] ? __pfx_stack_trace_save+0x10/0x10 [ 99.127144][ T1175] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 99.127158][ T1175] cfg80211_inform_bss_data+0x230/0x3b60 [ 99.127174][ T1175] ? __kmalloc_noprof+0x322/0x820 [ 99.127186][ T1175] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 99.127205][ T1175] ? cfg80211_wiphy_work+0x2b7/0x550 [ 99.127220][ T1175] ? process_one_work+0xa23/0x1940 [ 99.127232][ T1175] ? worker_thread+0x5ef/0xe50 [ 99.127243][ T1175] ? kthread+0x370/0x450 [ 99.127253][ T1175] ? ret_from_fork+0x72b/0xd50 [ 99.127268][ T1175] ? ret_from_fork_asm+0x1a/0x30 [ 99.127288][ T1175] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 99.127306][ T1175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.127321][ T1175] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 99.127341][ T1175] ? __lock_acquire+0x49f/0x1a40 [ 99.127355][ T1175] ? __lock_acquire+0x49f/0x1a40 [ 99.127374][ T1175] ? __lock_acquire+0x49f/0x1a40 [ 99.127387][ T1175] ? find_held_lock+0x2b/0x80 [ 99.127405][ T1175] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 99.127422][ T1175] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 99.127443][ T1175] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 99.127462][ T1175] ieee80211_bss_info_update+0x310/0xab0 [ 99.127480][ T1175] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 99.127501][ T1175] ? rcu_is_watching+0x12/0xc0 [ 99.127518][ T1175] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 99.127533][ T1175] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 99.127551][ T1175] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 99.127574][ T1175] ieee80211_iface_work+0xa9a/0x1070 [ 99.127594][ T1175] cfg80211_wiphy_work+0x2b7/0x550 [ 99.127611][ T1175] process_one_work+0xa23/0x1940 [ 99.127629][ T1175] ? __pfx_process_one_work+0x10/0x10 [ 99.127645][ T1175] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 99.127662][ T1175] worker_thread+0x5ef/0xe50 [ 99.127677][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 99.127695][ T1175] ? kthread+0x13a/0x450 [ 99.127705][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 99.127716][ T1175] kthread+0x370/0x450 [ 99.127726][ T1175] ? __pfx_kthread+0x10/0x10 [ 99.127738][ T1175] ret_from_fork+0x72b/0xd50 [ 99.127754][ T1175] ? __pfx_ret_from_fork+0x10/0x10 [ 99.127770][ T1175] ? __switch_to+0x800/0x10f0 [ 99.127782][ T1175] ? __pfx_kthread+0x10/0x10 [ 99.127793][ T1175] ret_from_fork_asm+0x1a/0x30 [ 99.127816][ T1175] [ 99.146077][ T1175] FAULT_INJECTION: forcing a failure. [ 99.146077][ T1175] name failslab, interval 1, probability 1, space 0, times 65 [ 99.146227][ T5732] Total swap = 124996kB [ 99.147996][ T1175] CPU: 0 UID: 0 PID: 1175 Comm: kworker/u33:13 Not tainted syzkaller #0 PREEMPT(full) [ 99.148013][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.148022][ T1175] Workqueue: events_unbound nsim_dev_trap_report_work [ 99.148041][ T1175] Call Trace: [ 99.148047][ T1175] [ 99.148053][ T1175] dump_stack_lvl+0x100/0x190 [ 99.148069][ T1175] should_fail_ex.cold+0x5/0xa [ 99.148084][ T1175] should_failslab+0xc2/0x120 [ 99.148099][ T1175] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.148114][ T1175] ? __alloc_skb+0x140/0x710 [ 99.148129][ T1175] __alloc_skb+0x140/0x710 [ 99.148141][ T1175] ? __alloc_skb+0x5b7/0x710 [ 99.148153][ T1175] ? __pfx___alloc_skb+0x10/0x10 [ 99.148168][ T1175] ? kfree_skbmem+0x19f/0x210 [ 99.148187][ T1175] nsim_dev_trap_report_work+0x2af/0xd20 [ 99.148206][ T1175] process_one_work+0xa23/0x1940 [ 99.148224][ T1175] ? __pfx_process_one_work+0x10/0x10 [ 99.148240][ T1175] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 99.148257][ T1175] worker_thread+0x5ef/0xe50 [ 99.148286][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 99.148299][ T1175] ? kthread+0x13a/0x450 [ 99.148310][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 99.148321][ T1175] kthread+0x370/0x450 [ 99.148331][ T1175] ? __pfx_kthread+0x10/0x10 [ 99.148342][ T1175] ret_from_fork+0x72b/0xd50 [ 99.148359][ T1175] ? __pfx_ret_from_fork+0x10/0x10 [ 99.148376][ T1175] ? __switch_to+0x800/0x10f0 [ 99.148387][ T1175] ? __pfx_kthread+0x10/0x10 [ 99.148398][ T1175] ret_from_fork_asm+0x1a/0x30 [ 99.148421][ T1175] [ 99.171665][ T8108] FAULT_INJECTION: forcing a failure. [ 99.171665][ T8108] name failslab, interval 1, probability 1, space 0, times 63 [ 99.173041][ T5732] 1048443 pages RAM [ 99.173052][ T5732] 0 pages HighMem/MovableOnly [ 99.173057][ T5732] 285322 pages reserved [ 99.173062][ T5732] 0 pages cma reserved [ 99.175790][ T8108] CPU: 1 UID: 0 PID: 8108 Comm: syz.3.740 Not tainted syzkaller #0 PREEMPT(full) [ 99.175818][ T8108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.175826][ T8108] Call Trace: [ 99.175833][ T8108] [ 99.175839][ T8108] dump_stack_lvl+0x100/0x190 [ 99.175860][ T8108] should_fail_ex.cold+0x5/0xa [ 99.175877][ T8108] should_failslab+0xc2/0x120 [ 99.175893][ T8108] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.175908][ T8108] ? __pfx_map_id_range_down+0x10/0x10 [ 99.175924][ T8108] ? security_inode_alloc+0x3b/0x2c0 [ 99.175945][ T8108] security_inode_alloc+0x3b/0x2c0 [ 99.175963][ T8108] inode_init_always_gfp+0xc77/0xfb0 [ 99.175978][ T8108] alloc_inode+0x8e/0x250 [ 99.175994][ T8108] iget_locked+0x1d9/0x6d0 [ 99.176010][ T8108] ? __pfx_iget_locked+0x10/0x10 [ 99.176025][ T8108] ? kernfs_root+0xee/0x2a0 [ 99.176037][ T8108] ? kernfs_root+0xee/0x2a0 [ 99.176053][ T8108] kernfs_get_inode+0x46/0x470 [ 99.176067][ T8108] kernfs_iop_lookup+0x1a7/0x2d0 [ 99.176080][ T8108] __lookup_slow+0x155/0x320 [ 99.176096][ T8108] lookup_slow+0x50/0x70 [ 99.176111][ T8108] link_path_walk+0x1377/0x1cc0 [ 99.176133][ T8108] path_openat+0x1c9/0x4280 [ 99.176144][ T8108] ? __kasan_slab_alloc+0x89/0x90 [ 99.176157][ T8108] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 99.176169][ T8108] ? do_getname+0x35/0x390 [ 99.176183][ T8108] ? __x64_sys_openat+0x12d/0x210 [ 99.176201][ T8108] ? __pfx_path_openat+0x10/0x10 [ 99.176216][ T8108] do_file_open+0x20e/0x430 [ 99.176229][ T8108] ? __pfx_do_file_open+0x10/0x10 [ 99.176251][ T8108] ? alloc_fd+0x471/0x7a0 [ 99.176263][ T8108] ? do_getname+0x191/0x390 [ 99.176279][ T8108] do_sys_openat2+0x10f/0x1e0 [ 99.176294][ T8108] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.176308][ T8108] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 99.176329][ T8108] __x64_sys_openat+0x12d/0x210 [ 99.176344][ T8108] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.176358][ T8108] ? find_held_lock+0x2b/0x80 [ 99.176375][ T8108] ? trace_syscall_enter+0xd9/0x110 [ 99.176394][ T8108] do_syscall_64+0x115/0x870 [ 99.176407][ T8108] ? clear_bhb_loop+0x40/0x90 [ 99.176421][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.176432][ T8108] RIP: 0033:0x7fb51339df99 [ 99.176443][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.176455][ T8108] RSP: 002b:00007fb514191028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.176467][ T8108] RAX: ffffffffffffffda RBX: 00007fb513626090 RCX: 00007fb51339df99 [ 99.176474][ T8108] RDX: 0000000000000002 RSI: 0000200000001000 RDI: ffffffffffffff9c [ 99.176481][ T8108] RBP: 00007fb513434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 99.176487][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.176493][ T8108] R13: 00007fb513626128 R14: 00007fb513626090 R15: 00007fff7172ed68 [ 99.176507][ T8108] [ 99.245931][ T5814] FAULT_INJECTION: forcing a failure. [ 99.245931][ T5814] name failslab, interval 1, probability 1, space 0, times 61 [ 99.249543][ T5733] FAULT_INJECTION: forcing a failure. [ 99.249543][ T5733] name failslab, interval 1, probability 1, space 0, times 61 [ 99.249830][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 99.249844][ T5733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.249852][ T5733] Call Trace: [ 99.249856][ T5733] [ 99.249860][ T5733] dump_stack_lvl+0x100/0x190 [ 99.249879][ T5733] should_fail_ex.cold+0x5/0xa [ 99.249894][ T5733] should_failslab+0xc2/0x120 [ 99.249909][ T5733] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.249923][ T5733] ? vm_area_dup+0x27/0x8e0 [ 99.249943][ T5733] vm_area_dup+0x27/0x8e0 [ 99.249961][ T5733] dup_mmap+0x6f6/0x21b0 [ 99.249982][ T5733] ? __pfx_dup_mmap+0x10/0x10 [ 99.250012][ T5733] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.250028][ T5733] ? __lock_acquire+0x49f/0x1a40 [ 99.250042][ T5733] ? find_held_lock+0x2b/0x80 [ 99.250060][ T5733] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 99.250085][ T5733] copy_process+0x4588/0x8030 [ 99.250109][ T5733] ? __pfx_copy_process+0x10/0x10 [ 99.250133][ T5733] kernel_clone+0x176/0x9d0 [ 99.250160][ T5733] ? __pfx_kernel_clone+0x10/0x10 [ 99.250184][ T5733] __do_sys_clone+0xd9/0x120 [ 99.250200][ T5733] ? __pfx___do_sys_clone+0x10/0x10 [ 99.250215][ T5733] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 99.250238][ T5733] ? find_held_lock+0x2b/0x80 [ 99.250255][ T5733] ? trace_syscall_enter+0xd9/0x110 [ 99.250270][ T5733] ? trace_syscall_enter+0xd9/0x110 [ 99.250289][ T5733] do_syscall_64+0x115/0x870 [ 99.250302][ T5733] ? clear_bhb_loop+0x40/0x90 [ 99.250315][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.250327][ T5733] RIP: 0033:0x7f78c5bc6a12 [ 99.250337][ T5733] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 99.250348][ T5733] RSP: 002b:00007fffcd898d80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 99.250359][ T5733] RAX: ffffffffffffffda RBX: 00007fffcd898d80 RCX: 00007f78c5bc6a12 [ 99.250366][ T5733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 99.250373][ T5733] RBP: 00007fffcd898f0c R08: 0000000000000000 R09: 0000000000000001 [ 99.250379][ T5733] R10: 00005555576567d0 R11: 0000000000000246 R12: 0000000000000001 [ 99.250385][ T5733] R13: 00000000000927c0 R14: 0000000000018197 R15: 00007fffcd898f60 [ 99.250399][ T5733] [ 99.281053][ T5143] FAULT_INJECTION: forcing a failure. [ 99.281053][ T5143] name failslab, interval 1, probability 1, space 0, times 59 [ 99.281457][ T5814] CPU: 3 UID: 0 PID: 5814 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 99.281480][ T5814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.281494][ T5814] Workqueue: bat_events batadv_mcast_mla_update [ 99.281543][ T5814] Call Trace: [ 99.281549][ T5814] [ 99.281558][ T5814] dump_stack_lvl+0x100/0x190 [ 99.281583][ T5814] should_fail_ex.cold+0x5/0xa [ 99.281608][ T5814] should_failslab+0xc2/0x120 [ 99.281635][ T5814] __kmalloc_cache_noprof+0x91/0x6c0 [ 99.281666][ T5814] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 99.281699][ T5814] batadv_mcast_mla_update+0x19ae/0x3200 [ 99.281733][ T5814] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 99.281764][ T5814] ? debug_object_deactivate+0x2e4/0x3b0 [ 99.281800][ T5814] ? rcu_is_watching+0x12/0xc0 [ 99.281833][ T5814] process_one_work+0xa23/0x1940 [ 99.281866][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 99.281895][ T5814] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 99.281924][ T5814] worker_thread+0x5ef/0xe50 [ 99.281953][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 99.281975][ T5814] ? kthread+0x13a/0x450 [ 99.281993][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 99.282012][ T5814] kthread+0x370/0x450 [ 99.282030][ T5814] ? __pfx_kthread+0x10/0x10 [ 99.282050][ T5814] ret_from_fork+0x72b/0xd50 [ 99.282076][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 99.282103][ T5814] ? __switch_to+0x800/0x10f0 [ 99.282123][ T5814] ? __pfx_kthread+0x10/0x10 [ 99.282145][ T5814] ret_from_fork_asm+0x1a/0x30 [ 99.282190][ T5814] [ 99.331078][ C1] FAULT_INJECTION: forcing a failure. [ 99.331078][ C1] name failslab, interval 1, probability 1, space 0, times 58 [ 99.332010][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 99.332026][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.332033][ T5143] Call Trace: [ 99.332037][ T5143] [ 99.332042][ T5143] dump_stack_lvl+0x100/0x190 [ 99.332065][ T5143] should_fail_ex.cold+0x5/0xa [ 99.332080][ T5143] should_failslab+0xc2/0x120 [ 99.332095][ T5143] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.332109][ T5143] ? do_getname+0x35/0x390 [ 99.332127][ T5143] do_getname+0x35/0x390 [ 99.332143][ T5143] do_sys_openat2+0xc7/0x1e0 [ 99.332157][ T5143] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.332172][ T5143] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 99.332193][ T5143] __x64_sys_openat+0x12d/0x210 [ 99.332207][ T5143] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.332221][ T5143] ? find_held_lock+0x2b/0x80 [ 99.332240][ T5143] ? trace_syscall_enter+0xd9/0x110 [ 99.332259][ T5143] do_syscall_64+0x115/0x870 [ 99.332272][ T5143] ? clear_bhb_loop+0x40/0x90 [ 99.332285][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.332297][ T5143] RIP: 0033:0x7f6303ca7407 [ 99.332308][ T5143] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 99.332342][ T5143] RSP: 002b:00007ffffd8dade0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 99.332354][ T5143] RAX: ffffffffffffffda RBX: 00007f6304472880 RCX: 00007f6303ca7407 [ 99.332361][ T5143] RDX: 0000000000080000 RSI: 00007ffffd8daf60 RDI: ffffffffffffff9c [ 99.332385][ T5143] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 99.332391][ T5143] R10: 0000000000000000 R11: 0000000000000202 R12: 00005596816537f5 [ 99.332398][ T5143] R13: 00005596816537f5 R14: 0000000000000001 R15: 0000000000000000 [ 99.332414][ T5143] [ 99.332522][ T5143] udevd[5143]: worker [5741] did not accept message -105 (No buffer space available), kill it [ 99.334512][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.334528][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.334535][ C1] Call Trace: [ 99.334540][ C1] [ 99.334545][ C1] dump_stack_lvl+0x100/0x190 [ 99.334561][ C1] should_fail_ex.cold+0x5/0xa [ 99.334579][ C1] should_failslab+0xc2/0x120 [ 99.334595][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.334608][ C1] ? __alloc_skb+0x5b7/0x710 [ 99.334622][ C1] ? __alloc_skb+0x140/0x710 [ 99.334636][ C1] __alloc_skb+0x140/0x710 [ 99.334648][ C1] ? __alloc_skb+0x5b7/0x710 [ 99.334660][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 99.334673][ C1] ? lock_acquire+0x1b9/0x370 [ 99.334689][ C1] __netdev_alloc_skb+0x7a/0x960 [ 99.334704][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 99.334721][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.334736][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 99.334750][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 99.334768][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 99.334787][ C1] __iterate_interfaces+0x2e6/0x650 [ 99.334800][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 99.334816][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 99.334830][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 99.334846][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 99.334863][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 99.334881][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 99.334902][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 99.334919][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.334936][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.334950][ C1] ? _raw_spin_unlock+0x28/0x50 [ 99.334967][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.334980][ C1] __irq_exit_rcu+0x162/0x210 [ 99.334994][ C1] irq_exit_rcu+0x9/0x30 [ 99.335007][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.335019][ C1] [ 99.335023][ C1] [ 99.335027][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.335040][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 99.335054][ C1] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 99.335065][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000202 [ 99.335075][ C1] RAX: 00000000000e04d9 RBX: ffff88801eaf2540 RCX: ffffffff8bbb22d5 [ 99.335082][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 99.335089][ C1] RBP: ffffed1003d5e4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 99.335096][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 99.335103][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 99.335113][ C1] ? ct_kernel_exit+0x125/0x180 [ 99.335127][ C1] default_idle+0x9/0x10 [ 99.335140][ C1] default_idle_call+0x6c/0xb0 [ 99.335153][ C1] do_idle+0x3a7/0x5b0 [ 99.335169][ C1] ? __pfx_do_idle+0x10/0x10 [ 99.335184][ C1] ? do_idle+0x388/0x5b0 [ 99.335201][ C1] cpu_startup_entry+0x4f/0x60 [ 99.335216][ C1] start_secondary+0x21d/0x2d0 [ 99.335232][ C1] ? __pfx_start_secondary+0x10/0x10 [ 99.335248][ C1] common_startup_64+0x13e/0x158 [ 99.335271][ C1] [ 99.335790][ T224] FAULT_INJECTION: forcing a failure. [ 99.335790][ T224] name failslab, interval 1, probability 1, space 0, times 55 [ 99.354864][ T5143] udevd[5143]: worker [5741] terminated by signal 9 (Killed) [ 99.355775][ T224] CPU: 1 UID: 0 PID: 224 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 99.355792][ T224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.355800][ T224] Workqueue: events_unbound cfg80211_wiphy_work [ 99.355822][ T224] Call Trace: [ 99.355828][ T224] [ 99.355832][ T224] dump_stack_lvl+0x100/0x190 [ 99.355849][ T224] should_fail_ex.cold+0x5/0xa [ 99.355863][ T224] should_failslab+0xc2/0x120 [ 99.355879][ T224] __kmalloc_noprof+0xfc/0x820 [ 99.355892][ T224] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 99.355914][ T224] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 99.355934][ T224] ? kasan_save_stack+0x3f/0x50 [ 99.355947][ T224] ? kasan_save_stack+0x30/0x50 [ 99.355960][ T224] ? __kasan_kmalloc+0xaa/0xb0 [ 99.355972][ T224] ? __kmalloc_noprof+0x322/0x820 [ 99.355986][ T224] ? lock_acquire+0x1b9/0x370 [ 99.356000][ T224] ? find_held_lock+0x2b/0x80 [ 99.356018][ T224] ? __kfree_rcu_sheaf+0x195/0x730 [ 99.356031][ T224] ? __kfree_rcu_sheaf+0x195/0x730 [ 99.356045][ T224] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 99.356067][ T224] ? kvfree_call_rcu+0x1be/0x4f0 [ 99.356086][ T224] ? __asan_memcpy+0x3c/0x60 [ 99.356098][ T224] ieee80211_inform_bss+0x159/0x1170 [ 99.356118][ T224] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 99.356137][ T224] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.356154][ T224] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 99.356170][ T224] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 99.356186][ T224] ? unwind_next_frame+0x3be/0x2090 [ 99.356201][ T224] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 99.356216][ T224] ? ret_from_fork_asm+0x1a/0x30 [ 99.356240][ T224] ? stack_trace_save+0x8e/0xc0 [ 99.356252][ T224] ? __pfx_stack_trace_save+0x10/0x10 [ 99.356266][ T224] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 99.356281][ T224] cfg80211_inform_bss_data+0x230/0x3b60 [ 99.356296][ T224] ? __kmalloc_noprof+0x322/0x820 [ 99.356308][ T224] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 99.356326][ T224] ? cfg80211_wiphy_work+0x2b7/0x550 [ 99.356341][ T224] ? process_one_work+0xa23/0x1940 [ 99.356352][ T224] ? worker_thread+0x5ef/0xe50 [ 99.356363][ T224] ? kthread+0x370/0x450 [ 99.356373][ T224] ? ret_from_fork+0x72b/0xd50 [ 99.356388][ T224] ? ret_from_fork_asm+0x1a/0x30 [ 99.356407][ T224] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 99.356425][ T224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.356440][ T224] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 99.356460][ T224] ? __lock_acquire+0x49f/0x1a40 [ 99.356473][ T224] ? __lock_acquire+0x49f/0x1a40 [ 99.356491][ T224] ? __lock_acquire+0x49f/0x1a40 [ 99.356505][ T224] ? find_held_lock+0x2b/0x80 [ 99.356522][ T224] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 99.356538][ T224] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 99.356558][ T224] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 99.356582][ T224] ieee80211_bss_info_update+0x310/0xab0 [ 99.356600][ T224] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 99.356620][ T224] ? rcu_is_watching+0x12/0xc0 [ 99.356637][ T224] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 99.356651][ T224] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 99.356670][ T224] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 99.356692][ T224] ieee80211_iface_work+0xa9a/0x1070 [ 99.356711][ T224] cfg80211_wiphy_work+0x2b7/0x550 [ 99.356729][ T224] process_one_work+0xa23/0x1940 [ 99.356746][ T224] ? __pfx_process_one_work+0x10/0x10 [ 99.356764][ T224] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 99.356781][ T224] worker_thread+0x5ef/0xe50 [ 99.356798][ T224] ? kthread+0x13a/0x450 [ 99.356808][ T224] ? __pfx_worker_thread+0x10/0x10 [ 99.356819][ T224] kthread+0x370/0x450 [ 99.356829][ T224] ? __pfx_kthread+0x10/0x10 [ 99.356840][ T224] ret_from_fork+0x72b/0xd50 [ 99.356857][ T224] ? __pfx_ret_from_fork+0x10/0x10 [ 99.356873][ T224] ? __switch_to+0x800/0x10f0 [ 99.356885][ T224] ? __pfx_kthread+0x10/0x10 [ 99.356897][ T224] ret_from_fork_asm+0x1a/0x30 [ 99.356919][ T224] [ 99.433717][ C2] FAULT_INJECTION: forcing a failure. [ 99.433717][ C2] name failslab, interval 1, probability 1, space 0, times 51 [ 99.434037][ C1] FAULT_INJECTION: forcing a failure. [ 99.434037][ C1] name failslab, interval 1, probability 1, space 0, times 51 [ 99.434103][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 99.434124][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.434135][ C1] Call Trace: [ 99.434141][ C1] [ 99.434149][ C1] dump_stack_lvl+0x100/0x190 [ 99.434175][ C1] should_fail_ex.cold+0x5/0xa [ 99.434198][ C1] should_failslab+0xc2/0x120 [ 99.434216][ C1] __kmalloc_noprof+0xfc/0x820 [ 99.434236][ C1] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 99.434268][ C1] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 99.434297][ C1] ? kasan_save_stack+0x3f/0x50 [ 99.434315][ C1] ? kasan_save_stack+0x30/0x50 [ 99.434330][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 99.434348][ C1] ? __kmalloc_noprof+0x322/0x820 [ 99.434369][ C1] ? lock_acquire+0x1b9/0x370 [ 99.434391][ C1] ? find_held_lock+0x2b/0x80 [ 99.434416][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 99.434433][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 99.434451][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 99.434483][ C1] ? kvfree_call_rcu+0x1be/0x4f0 [ 99.434512][ C1] ? __asan_memcpy+0x3c/0x60 [ 99.434531][ C1] ieee80211_inform_bss+0x159/0x1170 [ 99.434554][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 99.434589][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.434615][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 99.434639][ C1] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 99.434664][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 99.434699][ C1] ? mark_held_locks+0x40/0x70 [ 99.434719][ C1] ? find_held_lock+0x2b/0x80 [ 99.434743][ C1] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 99.434769][ C1] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 99.434788][ C1] ? rcu_is_watching+0x12/0xc0 [ 99.434815][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 99.434836][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 99.434867][ C1] ? update_sd_lb_stats.constprop.0+0x1cf5/0x3ff0 [ 99.434889][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 99.434914][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 99.434947][ C1] ? __pfx_update_sd_lb_stats.constprop.0+0x10/0x10 [ 99.434987][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.435012][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 99.435041][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 99.435066][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 99.435099][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 99.435118][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 99.435138][ C1] ? __lock_acquire+0x49f/0x1a40 [ 99.435161][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 99.435191][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 99.435213][ C1] ? do_raw_spin_lock+0x128/0x260 [ 99.435242][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 99.435262][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 99.435288][ C1] ieee80211_rx_list+0xf19/0x2160 [ 99.435332][ C1] ? lock_acquire+0x1b9/0x370 [ 99.435354][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 99.435385][ C1] ieee80211_rx_napi+0xdc/0x400 [ 99.435409][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 99.435432][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 99.435450][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.435471][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 99.435496][ C1] tasklet_action_common+0x2de/0x3d0 [ 99.435520][ C1] handle_softirqs+0x1ea/0x9b0 [ 99.435543][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.435570][ C1] ? run_ksoftirqd+0x5b/0x60 [ 99.435590][ C1] ? rcu_is_watching+0x12/0xc0 [ 99.435610][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 99.435631][ C1] run_ksoftirqd+0x38/0x60 [ 99.435651][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 99.435681][ C1] ? kthread+0x13a/0x450 [ 99.435694][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 99.435710][ C1] kthread+0x370/0x450 [ 99.435719][ C1] ? __pfx_kthread+0x10/0x10 [ 99.435731][ C1] ret_from_fork+0x72b/0xd50 [ 99.435747][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 99.435763][ C1] ? __switch_to+0x800/0x10f0 [ 99.435774][ C1] ? __pfx_kthread+0x10/0x10 [ 99.435788][ C1] ret_from_fork_asm+0x1a/0x30 [ 99.435823][ C1] [ 99.437294][ T5746] FAULT_INJECTION: forcing a failure. [ 99.437294][ T5746] name failslab, interval 1, probability 1, space 0, times 50 [ 99.440765][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 99.440780][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.440788][ C2] Call Trace: [ 99.440793][ C2] [ 99.440798][ C2] dump_stack_lvl+0x100/0x190 [ 99.440816][ C2] should_fail_ex.cold+0x5/0xa [ 99.440830][ C2] should_failslab+0xc2/0x120 [ 99.440845][ C2] __kmalloc_noprof+0xfc/0x820 [ 99.440857][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.440870][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.440888][ C2] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 99.440907][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 99.440929][ C2] ? mark_held_locks+0x40/0x70 [ 99.440943][ C2] ? find_held_lock+0x2b/0x80 [ 99.440959][ C2] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 99.440977][ C2] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 99.440992][ C2] ? rcu_is_watching+0x12/0xc0 [ 99.441011][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 99.441025][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 99.441043][ C2] ? __lock_acquire+0x49f/0x1a40 [ 99.441056][ C2] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 99.441073][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 99.441093][ C2] ? find_held_lock+0x2b/0x80 [ 99.441109][ C2] ? unwind_next_frame+0x3be/0x2090 [ 99.441121][ C2] ? unwind_next_frame+0x3be/0x2090 [ 99.441137][ C2] ? __lock_acquire+0x49f/0x1a40 [ 99.441156][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 99.441174][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 99.441191][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 99.441215][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 99.441229][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 99.441245][ C2] ? __lock_acquire+0x49f/0x1a40 [ 99.441259][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 99.441278][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 99.441296][ C2] ? do_raw_spin_lock+0x128/0x260 [ 99.441314][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 99.441327][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 99.441343][ C2] ieee80211_rx_list+0xf19/0x2160 [ 99.441364][ C2] ? lock_acquire+0x1b9/0x370 [ 99.441393][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 99.441414][ C2] ieee80211_rx_napi+0xdc/0x400 [ 99.441431][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 99.441448][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 99.441459][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.441472][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 99.441489][ C2] tasklet_action_common+0x2de/0x3d0 [ 99.441507][ C2] handle_softirqs+0x1ea/0x9b0 [ 99.441523][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 99.441537][ C2] ? _raw_spin_unlock+0x28/0x50 [ 99.441554][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.441567][ C2] __irq_exit_rcu+0x162/0x210 [ 99.441581][ C2] irq_exit_rcu+0x9/0x30 [ 99.441594][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.441606][ C2] [ 99.441610][ C2] [ 99.441614][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.441628][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 99.441640][ C2] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 99.441651][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 99.441660][ C2] RAX: 00000000000c6279 RBX: ffff88801f294a80 RCX: ffffffff8bbb22d5 [ 99.441667][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 99.441674][ C2] RBP: ffffed1003e52950 R08: 0000000000000001 R09: ffffed100d4c678d [ 99.441680][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 99.441687][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 99.441696][ C2] ? ct_kernel_exit+0x125/0x180 [ 99.441712][ C2] default_idle+0x9/0x10 [ 99.441725][ C2] default_idle_call+0x6c/0xb0 [ 99.441738][ C2] do_idle+0x3a7/0x5b0 [ 99.441754][ C2] ? __pfx_do_idle+0x10/0x10 [ 99.441772][ C2] cpu_startup_entry+0x4f/0x60 [ 99.441788][ C2] start_secondary+0x21d/0x2d0 [ 99.441803][ C2] ? __pfx_start_secondary+0x10/0x10 [ 99.441820][ C2] common_startup_64+0x13e/0x158 [ 99.441842][ C2] [ 99.495479][ T5842] usb 8-1: device not accepting address 3, error -71 [ 99.496295][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 99.496312][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.496318][ T5746] Call Trace: [ 99.496324][ T5746] [ 99.496328][ T5746] dump_stack_lvl+0x100/0x190 [ 99.496346][ T5746] should_fail_ex.cold+0x5/0xa [ 99.496372][ T5746] should_failslab+0xc2/0x120 [ 99.496387][ T5746] __kmalloc_noprof+0xfc/0x820 [ 99.496401][ T5746] ? tomoyo_encode2+0xfb/0x3c0 [ 99.496415][ T5746] tomoyo_encode2+0xfb/0x3c0 [ 99.496430][ T5746] tomoyo_encode+0x29/0x50 [ 99.496444][ T5746] tomoyo_realpath_from_path+0x18c/0x690 [ 99.496466][ T5746] tomoyo_path_perm+0x276/0x460 [ 99.496490][ T5746] ? tomoyo_path_perm+0x262/0x460 [ 99.496517][ T5746] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 99.496537][ T5746] ? __pfx_check_buffer+0x10/0x10 [ 99.496560][ T5746] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 99.496586][ T5746] ? lockdep_hardirqs_on+0x78/0x100 [ 99.496600][ T5746] ? rb_commit+0x129/0x9d0 [ 99.496618][ T5746] security_inode_getattr+0x116/0x280 [ 99.496637][ T5746] vfs_fstat+0x4b/0xe0 [ 99.496651][ T5746] __do_sys_newfstat+0x8b/0x110 [ 99.496665][ T5746] ? __pfx___do_sys_newfstat+0x10/0x10 [ 99.496685][ T5746] ? trace_syscall_enter+0xd9/0x110 [ 99.496707][ T5746] ? trace_syscall_enter+0xd9/0x110 [ 99.496732][ T5746] ? rcu_is_watching+0x12/0xc0 [ 99.496770][ T5746] do_syscall_64+0x115/0x870 [ 99.496789][ T5746] ? clear_bhb_loop+0x40/0x90 [ 99.496812][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.496830][ T5746] RIP: 0033:0x7f6303d11ad7 [ 99.496845][ T5746] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 99.496857][ T5746] RSP: 002b:00007ffffd8d6758 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 99.496869][ T5746] RAX: ffffffffffffffda RBX: 00005596b4d70d90 RCX: 00007f6303d11ad7 [ 99.496876][ T5746] RDX: 00007f6303defea0 RSI: 00007ffffd8d6760 RDI: 0000000000000008 [ 99.496883][ T5746] RBP: 00007f6303defff0 R08: 0000000000000001 R09: 0000000000000000 [ 99.496889][ T5746] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 99.496896][ T5746] R13: 0000000000003fff R14: 0000000000000000 R15: 00005596b4d70d90 [ 99.496909][ T5746] [ 99.497069][ T5746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.535894][ C2] FAULT_INJECTION: forcing a failure. [ 99.535894][ C2] name failslab, interval 1, probability 1, space 0, times 47 [ 99.875012][ T5669] FAULT_INJECTION: forcing a failure. [ 99.875012][ T5669] name failslab, interval 1, probability 1, space 0, times 46 [ 99.875118][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 99.875135][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.875143][ C2] Call Trace: [ 99.875149][ C2] [ 99.875154][ C2] dump_stack_lvl+0x100/0x190 [ 99.875173][ C2] should_fail_ex.cold+0x5/0xa [ 99.875188][ C2] should_failslab+0xc2/0x120 [ 99.875203][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.875218][ C2] ? __alloc_skb+0x140/0x710 [ 99.875234][ C2] __alloc_skb+0x140/0x710 [ 99.875246][ C2] ? __alloc_skb+0x5b7/0x710 [ 99.875259][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 99.875272][ C2] ? do_raw_spin_lock+0x128/0x260 [ 99.875290][ C2] skb_copy+0x1ca/0x3a0 [ 99.875303][ C2] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 99.875337][ C2] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 99.875353][ C2] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 99.875370][ C2] ? __lock_acquire+0x49f/0x1a40 [ 99.875385][ C2] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 99.875402][ C2] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 99.875417][ C2] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 99.875436][ C2] __iterate_interfaces+0x2e6/0x650 [ 99.875450][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 99.875465][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 99.875480][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 99.875496][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 99.875515][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 99.875533][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 99.875559][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 99.875577][ C2] handle_softirqs+0x1ea/0x9b0 [ 99.875593][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 99.875608][ C2] ? _raw_spin_unlock+0x28/0x50 [ 99.875625][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 99.875638][ C2] __irq_exit_rcu+0x162/0x210 [ 99.875652][ C2] irq_exit_rcu+0x9/0x30 [ 99.875665][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.875679][ C2] [ 99.875682][ C2] [ 99.875687][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.875700][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 99.875713][ C2] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 99.875724][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 99.875734][ C2] RAX: 00000000000c648f RBX: ffff88801f294a80 RCX: ffffffff8bbb22d5 [ 99.875741][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 99.875748][ C2] RBP: ffffed1003e52950 R08: 0000000000000001 R09: ffffed100d4c678d [ 99.875755][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 99.875762][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 99.875772][ C2] ? ct_kernel_exit+0x125/0x180 [ 99.875787][ C2] default_idle+0x9/0x10 [ 99.875799][ C2] default_idle_call+0x6c/0xb0 [ 99.875813][ C2] do_idle+0x3a7/0x5b0 [ 99.875828][ C2] ? __pfx_do_idle+0x10/0x10 [ 99.875847][ C2] cpu_startup_entry+0x4f/0x60 [ 99.875863][ C2] start_secondary+0x21d/0x2d0 [ 99.875879][ C2] ? __pfx_start_secondary+0x10/0x10 [ 99.875896][ C2] common_startup_64+0x13e/0x158 [ 99.875919][ C2] [ 99.878063][ T5814] FAULT_INJECTION: forcing a failure. [ 99.878063][ T5814] name failslab, interval 1, probability 1, space 0, times 44 [ 99.879130][ T5669] CPU: 0 UID: 0 PID: 5669 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 99.879145][ T5669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.879153][ T5669] Call Trace: [ 99.879157][ T5669] [ 99.879161][ T5669] dump_stack_lvl+0x100/0x190 [ 99.879179][ T5669] should_fail_ex.cold+0x5/0xa [ 99.879193][ T5669] should_failslab+0xc2/0x120 [ 99.879208][ T5669] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.879227][ T5669] ? __alloc_skb+0x140/0x710 [ 99.879244][ T5669] __alloc_skb+0x140/0x710 [ 99.879257][ T5669] ? __pfx___alloc_skb+0x10/0x10 [ 99.879274][ T5669] tcp_stream_alloc_skb+0x34/0x660 [ 99.879290][ T5669] tcp_sendmsg_locked+0x13b2/0x44d0 [ 99.879310][ T5669] ? __lock_acquire+0x49f/0x1a40 [ 99.879327][ T5669] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 99.879345][ T5669] ? do_raw_spin_lock+0x128/0x260 [ 99.879361][ T5669] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.879380][ T5669] ? __local_bh_enable_ip+0x9e/0x120 [ 99.879397][ T5669] tcp_sendmsg+0x2e/0x50 [ 99.879412][ T5669] ? __pfx_tcp_sendmsg+0x10/0x10 [ 99.879427][ T5669] inet_sendmsg+0xb9/0x140 [ 99.879442][ T5669] sock_write_iter+0x4ea/0x5b0 [ 99.879459][ T5669] ? __pfx_inet_sendmsg+0x10/0x10 [ 99.879473][ T5669] ? __pfx_sock_write_iter+0x10/0x10 [ 99.879494][ T5669] ? bpf_lsm_file_permission+0x9/0x10 [ 99.879524][ T5669] ? security_file_permission+0x76/0x210 [ 99.879537][ T5669] ? rw_verify_area+0xce/0x6d0 [ 99.879554][ T5669] vfs_write+0x6ac/0x1050 [ 99.879572][ T5669] ? __pfx_sock_write_iter+0x10/0x10 [ 99.879590][ T5669] ? __pfx_vfs_write+0x10/0x10 [ 99.879613][ T5669] ? trace_event_buffer_commit+0x20a/0xa80 [ 99.879632][ T5669] ksys_write+0x1f8/0x250 [ 99.879649][ T5669] ? __pfx_ksys_write+0x10/0x10 [ 99.879666][ T5669] ? trace_syscall_enter+0xd9/0x110 [ 99.879686][ T5669] do_syscall_64+0x115/0x870 [ 99.879699][ T5669] ? clear_bhb_loop+0x40/0x90 [ 99.879713][ T5669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.879725][ T5669] RIP: 0033:0x7f0743ca7407 [ 99.879735][ T5669] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 99.879746][ T5669] RSP: 002b:00007fff24055ee0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 99.879757][ T5669] RAX: ffffffffffffffda RBX: 00007f074438c300 RCX: 00007f0743ca7407 [ 99.879765][ T5669] RDX: 000000000000032c RSI: 0000556028a017e0 RDI: 0000000000000004 [ 99.879772][ T5669] RBP: 00005560289d7be0 R08: 0000000000000000 R09: 0000000000000000 [ 99.879778][ T5669] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 99.879785][ T5669] R13: 00007fff24056030 R14: 0000000000000000 R15: 0000000000000004 [ 99.879798][ T5669] [ 99.996347][ T218] FAULT_INJECTION: forcing a failure. [ 99.996347][ T218] name failslab, interval 1, probability 1, space 0, times 43 [ 99.997821][ T1175] FAULT_INJECTION: forcing a failure. [ 99.997821][ T1175] name failslab, interval 1, probability 1, space 0, times 43 [ 99.998665][ T218] CPU: 0 UID: 0 PID: 218 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 99.998689][ T218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.998702][ T218] Workqueue: events_unbound nsim_dev_trap_report_work [ 99.998749][ T218] Call Trace: [ 99.998759][ T218] [ 99.998765][ T218] dump_stack_lvl+0x100/0x190 [ 99.998786][ T218] should_fail_ex.cold+0x5/0xa [ 99.998805][ T218] should_failslab+0xc2/0x120 [ 99.998825][ T218] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 99.998845][ T218] ? __alloc_skb+0x140/0x710 [ 99.998865][ T218] __alloc_skb+0x140/0x710 [ 99.998880][ T218] ? __alloc_skb+0x5b7/0x710 [ 99.998895][ T218] ? __pfx___alloc_skb+0x10/0x10 [ 99.998910][ T218] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.998937][ T218] nsim_dev_trap_report_work+0x2af/0xd20 [ 99.998964][ T218] process_one_work+0xa23/0x1940 [ 99.998988][ T218] ? __pfx_process_one_work+0x10/0x10 [ 99.999009][ T218] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 99.999029][ T218] worker_thread+0x5ef/0xe50 [ 99.999052][ T218] ? kthread+0x13a/0x450 [ 99.999065][ T218] ? __pfx_worker_thread+0x10/0x10 [ 99.999079][ T218] kthread+0x370/0x450 [ 99.999092][ T218] ? __pfx_kthread+0x10/0x10 [ 99.999106][ T218] ret_from_fork+0x72b/0xd50 [ 99.999128][ T218] ? __pfx_ret_from_fork+0x10/0x10 [ 99.999149][ T218] ? __switch_to+0x800/0x10f0 [ 99.999164][ T218] ? __pfx_kthread+0x10/0x10 [ 99.999179][ T218] ret_from_fork_asm+0x1a/0x30 [ 99.999209][ T218] [ 99.999445][ T218] FAULT_INJECTION: forcing a failure. [ 99.999445][ T218] name failslab, interval 1, probability 1, space 0, times 40 [ 100.000087][ T1175] CPU: 2 UID: 0 PID: 1175 Comm: kworker/u33:13 Not tainted syzkaller #0 PREEMPT(full) [ 100.000102][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.000110][ T1175] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.000127][ T1175] Call Trace: [ 100.000132][ T1175] [ 100.000137][ T1175] dump_stack_lvl+0x100/0x190 [ 100.000152][ T1175] should_fail_ex.cold+0x5/0xa [ 100.000167][ T1175] should_failslab+0xc2/0x120 [ 100.000181][ T1175] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.000196][ T1175] ? __alloc_skb+0x140/0x710 [ 100.000211][ T1175] __alloc_skb+0x140/0x710 [ 100.000223][ T1175] ? __alloc_skb+0x5b7/0x710 [ 100.000235][ T1175] ? __pfx___alloc_skb+0x10/0x10 [ 100.000248][ T1175] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.000265][ T1175] ? __pfx___might_resched+0x10/0x10 [ 100.000282][ T1175] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.000301][ T1175] process_one_work+0xa23/0x1940 [ 100.000319][ T1175] ? __pfx_process_one_work+0x10/0x10 [ 100.000335][ T1175] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.000351][ T1175] worker_thread+0x5ef/0xe50 [ 100.000366][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.000379][ T1175] ? kthread+0x13a/0x450 [ 100.000388][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.000400][ T1175] kthread+0x370/0x450 [ 100.000410][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.000421][ T1175] ret_from_fork+0x72b/0xd50 [ 100.000438][ T1175] ? __pfx_ret_from_fork+0x10/0x10 [ 100.000454][ T1175] ? __switch_to+0x800/0x10f0 [ 100.000465][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.000477][ T1175] ret_from_fork_asm+0x1a/0x30 [ 100.000500][ T1175] [ 100.000508][ T5814] CPU: 3 UID: 0 PID: 5814 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 100.000528][ T5814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.000539][ T5814] Workqueue: bat_events batadv_mcast_mla_update [ 100.000568][ T5814] Call Trace: [ 100.000574][ T5814] [ 100.000581][ T5814] dump_stack_lvl+0x100/0x190 [ 100.000603][ T5814] should_fail_ex.cold+0x5/0xa [ 100.000623][ T5814] should_failslab+0xc2/0x120 [ 100.000646][ T5814] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.000676][ T5814] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 100.000705][ T5814] batadv_mcast_mla_update+0x19ae/0x3200 [ 100.000736][ T5814] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 100.000766][ T5814] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.000798][ T5814] ? rcu_is_watching+0x12/0xc0 [ 100.000828][ T5814] process_one_work+0xa23/0x1940 [ 100.000857][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 100.000882][ T5814] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 100.000910][ T5814] worker_thread+0x5ef/0xe50 [ 100.000935][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 100.000955][ T5814] ? kthread+0x13a/0x450 [ 100.000970][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 100.000987][ T5814] kthread+0x370/0x450 [ 100.001002][ T5814] ? __pfx_kthread+0x10/0x10 [ 100.001021][ T5814] ret_from_fork+0x72b/0xd50 [ 100.001045][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 100.001070][ T5814] ? __switch_to+0x800/0x10f0 [ 100.001087][ T5814] ? __pfx_kthread+0x10/0x10 [ 100.001105][ T5814] ret_from_fork_asm+0x1a/0x30 [ 100.001140][ T5814] [ 100.016113][ T5748] FAULT_INJECTION: forcing a failure. [ 100.016113][ T5748] name failslab, interval 1, probability 1, space 0, times 38 [ 100.018238][ T218] CPU: 0 UID: 0 PID: 218 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.018261][ T218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.018274][ T218] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.018300][ T218] Call Trace: [ 100.018306][ T218] [ 100.018314][ T218] dump_stack_lvl+0x100/0x190 [ 100.018340][ T218] should_fail_ex.cold+0x5/0xa [ 100.018363][ T218] should_failslab+0xc2/0x120 [ 100.018386][ T218] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.018408][ T218] ? __alloc_skb+0x140/0x710 [ 100.018434][ T218] __alloc_skb+0x140/0x710 [ 100.018452][ T218] ? __alloc_skb+0x5b7/0x710 [ 100.018471][ T218] ? __pfx___alloc_skb+0x10/0x10 [ 100.018494][ T218] ? kfree_skbmem+0x19f/0x210 [ 100.018523][ T218] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.018556][ T218] process_one_work+0xa23/0x1940 [ 100.018585][ T218] ? __pfx_process_one_work+0x10/0x10 [ 100.018612][ T218] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.018636][ T218] worker_thread+0x5ef/0xe50 [ 100.018664][ T218] ? kthread+0x13a/0x450 [ 100.018679][ T218] ? __pfx_worker_thread+0x10/0x10 [ 100.018697][ T218] kthread+0x370/0x450 [ 100.018712][ T218] ? __pfx_kthread+0x10/0x10 [ 100.018736][ T218] ret_from_fork+0x72b/0xd50 [ 100.018763][ T218] ? __pfx_ret_from_fork+0x10/0x10 [ 100.018788][ T218] ? __switch_to+0x800/0x10f0 [ 100.018805][ T218] ? __pfx_kthread+0x10/0x10 [ 100.018824][ T218] ret_from_fork_asm+0x1a/0x30 [ 100.018862][ T218] [ 100.018926][ T218] FAULT_INJECTION: forcing a failure. [ 100.018926][ T218] name failslab, interval 1, probability 1, space 0, times 37 [ 100.020419][ T5143] FAULT_INJECTION: forcing a failure. [ 100.020419][ T5143] name failslab, interval 1, probability 1, space 0, times 37 [ 100.020445][ T5143] CPU: 2 UID: 0 PID: 5143 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.020464][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.020473][ T5143] Call Trace: [ 100.020479][ T5143] [ 100.020486][ T5143] dump_stack_lvl+0x100/0x190 [ 100.020510][ T5143] should_fail_ex.cold+0x5/0xa [ 100.020531][ T5143] should_failslab+0xc2/0x120 [ 100.020552][ T5143] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.020571][ T5143] ? trace_kmem_cache_alloc+0xdd/0x100 [ 100.020592][ T5143] ? security_file_alloc+0x34/0x2c0 [ 100.020618][ T5143] security_file_alloc+0x34/0x2c0 [ 100.020634][ T5143] init_file+0x95/0x480 [ 100.020654][ T5143] alloc_empty_file+0x79/0x1c0 [ 100.020675][ T5143] path_openat+0xe7/0x4280 [ 100.020691][ T5143] ? __kasan_slab_alloc+0x89/0x90 [ 100.020711][ T5143] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 100.020729][ T5143] ? do_getname+0x35/0x390 [ 100.020748][ T5143] ? do_sys_openat2+0xc7/0x1e0 [ 100.020768][ T5143] ? __x64_sys_openat+0x12d/0x210 [ 100.020787][ T5143] ? do_syscall_64+0x115/0x870 [ 100.020805][ T5143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.020828][ T5143] ? __pfx_path_openat+0x10/0x10 [ 100.020851][ T5143] do_file_open+0x20e/0x430 [ 100.020871][ T5143] ? __pfx_do_file_open+0x10/0x10 [ 100.020904][ T5143] ? alloc_fd+0x471/0x7a0 [ 100.020922][ T5143] ? do_getname+0x191/0x390 [ 100.020945][ T5143] do_sys_openat2+0x10f/0x1e0 [ 100.020966][ T5143] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.020987][ T5143] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 100.021017][ T5143] __x64_sys_openat+0x12d/0x210 [ 100.021033][ T5143] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.021047][ T5143] ? find_held_lock+0x2b/0x80 [ 100.021065][ T5143] ? trace_syscall_enter+0xd9/0x110 [ 100.021089][ T5143] do_syscall_64+0x115/0x870 [ 100.021106][ T5143] ? clear_bhb_loop+0x40/0x90 [ 100.021125][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.021143][ T5143] RIP: 0033:0x7f6303d15c3a [ 100.021157][ T5143] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 100.021173][ T5143] RSP: 002b:00007ffffd8df378 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 100.021189][ T5143] RAX: ffffffffffffffda RBX: 00005596b4e0f730 RCX: 00007f6303d15c3a [ 100.021199][ T5143] RDX: 0000000000090800 RSI: 00005596b4b24a90 RDI: 00000000ffffff9c [ 100.021209][ T5143] RBP: 00005596b4b24a90 R08: 0000000000000000 R09: 0000000000000001 [ 100.021218][ T5143] R10: 0000000000000000 R11: 0000000000000206 R12: 00005596b4d6d170 [ 100.021228][ T5143] R13: 00000000000000fd R14: 0000559681657be0 R15: 00007ffffd8df680 [ 100.021250][ T5143] [ 100.021259][ T5748] CPU: 3 UID: 0 PID: 5748 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.021281][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.021289][ T5748] Call Trace: [ 100.021296][ T5748] [ 100.021303][ T5748] dump_stack_lvl+0x100/0x190 [ 100.021323][ T5748] should_fail_ex.cold+0x5/0xa [ 100.021345][ T5748] should_failslab+0xc2/0x120 [ 100.021367][ T5748] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.021409][ T5748] ? skb_clone+0x190/0x400 [ 100.021432][ T5748] skb_clone+0x190/0x400 [ 100.021454][ T5748] netlink_broadcast_filtered+0xb22/0xf20 [ 100.021492][ T5748] netlink_sendmsg+0xa16/0xda0 [ 100.021515][ T5748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.021535][ T5748] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.021563][ T5748] ____sys_sendmsg+0xa4d/0xbe0 [ 100.021588][ T5748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.021608][ T5748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.021639][ T5748] ? __pfx_trace_clock_local+0x10/0x10 [ 100.021666][ T5748] ___sys_sendmsg+0x190/0x1e0 [ 100.021694][ T5748] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.021729][ T5748] ? rb_commit+0x129/0x9d0 [ 100.021761][ T5748] ? ring_buffer_unlock_commit+0x2e6/0x6f0 [ 100.021787][ T5748] __sys_sendmsg+0x160/0x210 [ 100.021809][ T5748] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.021842][ T5748] do_syscall_64+0x115/0x870 [ 100.021862][ T5748] ? clear_bhb_loop+0x40/0x90 [ 100.021882][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.021901][ T5748] RIP: 0033:0x7f6303ca7407 [ 100.021914][ T5748] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.021931][ T5748] RSP: 002b:00007ffffd8df1b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 100.021945][ T5748] RAX: ffffffffffffffda RBX: 00007f6304472880 RCX: 00007f6303ca7407 [ 100.021957][ T5748] RDX: 0000000000000000 RSI: 00007ffffd8df210 RDI: 000000000000000c [ 100.021966][ T5748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.021975][ T5748] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000c5 [ 100.021986][ T5748] R13: 00005596b4d634c0 R14: 0000000000000000 R15: 0000000000000000 [ 100.022006][ T5748] [ 100.027921][ T5748] FAULT_INJECTION: forcing a failure. [ 100.027921][ T5748] name failslab, interval 1, probability 1, space 0, times 34 [ 100.029525][ T218] CPU: 0 UID: 0 PID: 218 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.029547][ T218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.029556][ T218] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.029583][ T218] Call Trace: [ 100.029589][ T218] [ 100.029598][ T218] dump_stack_lvl+0x100/0x190 [ 100.029623][ T218] should_fail_ex.cold+0x5/0xa [ 100.029644][ T218] should_failslab+0xc2/0x120 [ 100.029668][ T218] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.029691][ T218] ? __alloc_skb+0x140/0x710 [ 100.029716][ T218] __alloc_skb+0x140/0x710 [ 100.029740][ T218] ? __alloc_skb+0x5b7/0x710 [ 100.029760][ T218] ? __pfx___alloc_skb+0x10/0x10 [ 100.029783][ T218] ? kfree_skbmem+0x19f/0x210 [ 100.029811][ T218] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.029844][ T218] process_one_work+0xa23/0x1940 [ 100.029873][ T218] ? __pfx_process_one_work+0x10/0x10 [ 100.029900][ T218] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.029924][ T218] worker_thread+0x5ef/0xe50 [ 100.029953][ T218] ? kthread+0x13a/0x450 [ 100.029968][ T218] ? __pfx_worker_thread+0x10/0x10 [ 100.029987][ T218] kthread+0x370/0x450 [ 100.030001][ T218] ? __pfx_kthread+0x10/0x10 [ 100.030021][ T218] ret_from_fork+0x72b/0xd50 [ 100.030047][ T218] ? __pfx_ret_from_fork+0x10/0x10 [ 100.030073][ T218] ? __switch_to+0x800/0x10f0 [ 100.030092][ T218] ? __pfx_kthread+0x10/0x10 [ 100.030127][ T218] ret_from_fork_asm+0x1a/0x30 [ 100.030163][ T218] [ 100.032168][ T218] FAULT_INJECTION: forcing a failure. [ 100.032168][ T218] name failslab, interval 1, probability 1, space 0, times 33 [ 100.035862][ T8110] FAULT_INJECTION: forcing a failure. [ 100.035862][ T8110] name failslab, interval 1, probability 1, space 0, times 33 [ 100.035899][ T8110] CPU: 1 UID: 0 PID: 8110 Comm: syz.3.745 Not tainted syzkaller #0 PREEMPT(full) [ 100.035915][ T8110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.035922][ T8110] Call Trace: [ 100.035926][ T8110] [ 100.035932][ T8110] dump_stack_lvl+0x100/0x190 [ 100.035950][ T8110] should_fail_ex.cold+0x5/0xa [ 100.035966][ T8110] should_failslab+0xc2/0x120 [ 100.035982][ T8110] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.036003][ T8110] ? find_held_lock+0x2b/0x80 [ 100.036021][ T8110] ? configfs_mkdir+0x13e/0xb70 [ 100.036036][ T8110] ? new_fragment+0x3b/0xf0 [ 100.036051][ T8110] new_fragment+0x3b/0xf0 [ 100.036063][ T8110] configfs_mkdir+0x1ff/0xb70 [ 100.036080][ T8110] ? may_create+0x285/0x440 [ 100.036100][ T8110] ? __pfx_configfs_mkdir+0x10/0x10 [ 100.036117][ T8110] ? inode_permission+0x374/0x620 [ 100.036136][ T8110] vfs_mkdir+0x361/0x850 [ 100.036159][ T8110] filename_mkdirat+0x48b/0x5e0 [ 100.036179][ T8110] ? __pfx_filename_mkdirat+0x10/0x10 [ 100.036198][ T8110] ? strncpy_from_user+0x19d/0x2d0 [ 100.036215][ T8110] ? do_getname+0x191/0x390 [ 100.036232][ T8110] __x64_sys_mkdir+0x6b/0x90 [ 100.036249][ T8110] do_syscall_64+0x115/0x870 [ 100.036266][ T8110] ? clear_bhb_loop+0x40/0x90 [ 100.036284][ T8110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.036298][ T8110] RIP: 0033:0x7fb51339df99 [ 100.036312][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.036326][ T8110] RSP: 002b:00007fb5141b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 100.036342][ T8110] RAX: ffffffffffffffda RBX: 00007fb513625fa0 RCX: 00007fb51339df99 [ 100.036351][ T8110] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00002000000003c0 [ 100.036359][ T8110] RBP: 00007fb513434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 100.036366][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.036374][ T8110] R13: 00007fb513626038 R14: 00007fb513625fa0 R15: 00007fff7172ed68 [ 100.036391][ T8110] [ 100.046247][ T5748] CPU: 2 UID: 0 PID: 5748 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.046266][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.046273][ T5748] Call Trace: [ 100.046278][ T5748] [ 100.046282][ T5748] dump_stack_lvl+0x100/0x190 [ 100.046300][ T5748] should_fail_ex.cold+0x5/0xa [ 100.046315][ T5748] should_failslab+0xc2/0x120 [ 100.046331][ T5748] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.046346][ T5748] ? do_getname+0x35/0x390 [ 100.046363][ T5748] do_getname+0x35/0x390 [ 100.046378][ T5748] do_faccessat+0x115/0xc10 [ 100.046390][ T5748] ? __pfx_do_faccessat+0x10/0x10 [ 100.046401][ T5748] ? trace_syscall_enter+0xd9/0x110 [ 100.046417][ T5748] ? trace_syscall_enter+0xd9/0x110 [ 100.046435][ T5748] __x64_sys_faccessat2+0x96/0x100 [ 100.046447][ T5748] ? trace_syscall_enter+0xe3/0x110 [ 100.046462][ T5748] do_syscall_64+0x115/0x870 [ 100.046475][ T5748] ? clear_bhb_loop+0x40/0x90 [ 100.046489][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.046501][ T5748] RIP: 0033:0x7f6303d115da [ 100.046511][ T5748] Code: e8 7b 54 fe ff 44 39 f0 0f 85 74 ff ff ff 44 89 fe 4c 89 ef e8 f7 fc ff ff 89 c5 e9 31 ff ff ff 41 89 ca b8 b7 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 8b 15 e9 f7 0d 00 f7 [ 100.046522][ T5748] RSP: 002b:00007ffffd8d8e88 EFLAGS: 00000206 ORIG_RAX: 00000000000001b7 [ 100.046534][ T5748] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f6303d115da [ 100.046541][ T5748] RDX: 0000000000000000 RSI: 00007f6304580e2e RDI: 000000000000000b [ 100.046548][ T5748] RBP: 00005596b4d7a1e0 R08: 0000000000000000 R09: 0000000000000000 [ 100.046554][ T5748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.046560][ T5748] R13: 00007f6304580e2e R14: 0000000000000000 R15: 0000000000000009 [ 100.046573][ T5748] [ 100.046879][ T5748] FAULT_INJECTION: forcing a failure. [ 100.046879][ T5748] name failslab, interval 1, probability 1, space 0, times 31 [ 100.057064][ T218] CPU: 0 UID: 0 PID: 218 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.057082][ T218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.057090][ T218] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.057109][ T218] Call Trace: [ 100.057114][ T218] [ 100.057120][ T218] dump_stack_lvl+0x100/0x190 [ 100.057136][ T218] should_fail_ex.cold+0x5/0xa [ 100.057151][ T218] should_failslab+0xc2/0x120 [ 100.057167][ T218] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.057181][ T218] ? __alloc_skb+0x140/0x710 [ 100.057197][ T218] __alloc_skb+0x140/0x710 [ 100.057209][ T218] ? __alloc_skb+0x5b7/0x710 [ 100.057223][ T218] ? __pfx___alloc_skb+0x10/0x10 [ 100.057236][ T218] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.057253][ T218] ? __pfx___might_resched+0x10/0x10 [ 100.057270][ T218] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.057290][ T218] process_one_work+0xa23/0x1940 [ 100.057307][ T218] ? __pfx_process_one_work+0x10/0x10 [ 100.057323][ T218] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.057339][ T218] worker_thread+0x5ef/0xe50 [ 100.057454][ T218] ? kthread+0x13a/0x450 [ 100.057469][ T218] ? __pfx_worker_thread+0x10/0x10 [ 100.057481][ T218] kthread+0x370/0x450 [ 100.057492][ T218] ? __pfx_kthread+0x10/0x10 [ 100.057503][ T218] ret_from_fork+0x72b/0xd50 [ 100.057520][ T218] ? __pfx_ret_from_fork+0x10/0x10 [ 100.057537][ T218] ? __switch_to+0x800/0x10f0 [ 100.057549][ T218] ? __pfx_kthread+0x10/0x10 [ 100.057560][ T218] ret_from_fork_asm+0x1a/0x30 [ 100.057583][ T218] [ 100.066946][ T8050] FAULT_INJECTION: forcing a failure. [ 100.066946][ T8050] name failslab, interval 1, probability 1, space 0, times 29 [ 100.067003][ T8050] CPU: 0 UID: 0 PID: 8050 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.067023][ T8050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.067033][ T8050] Call Trace: [ 100.067039][ T8050] [ 100.067046][ T8050] dump_stack_lvl+0x100/0x190 [ 100.067071][ T8050] should_fail_ex.cold+0x5/0xa [ 100.067091][ T8050] should_failslab+0xc2/0x120 [ 100.067113][ T8050] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 100.067135][ T8050] ? __d_alloc+0x35/0xa50 [ 100.067158][ T8050] __d_alloc+0x35/0xa50 [ 100.067181][ T8050] d_alloc+0x4a/0x1e0 [ 100.067202][ T8050] lookup_one_qstr_excl+0x171/0x250 [ 100.067224][ T8050] ? mnt_want_write+0x161/0x410 [ 100.067241][ T8050] filename_unlinkat+0x275/0x730 [ 100.067259][ T8050] ? __might_fault+0xc5/0x140 [ 100.067277][ T8050] ? __pfx_filename_unlinkat+0x10/0x10 [ 100.067306][ T8050] ? do_getname+0x191/0x390 [ 100.067329][ T8050] __x64_sys_unlink+0x46/0x70 [ 100.067349][ T8050] do_syscall_64+0x115/0x870 [ 100.067368][ T8050] ? clear_bhb_loop+0x40/0x90 [ 100.067388][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.067405][ T8050] RIP: 0033:0x7f6303d15937 [ 100.067419][ T8050] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 100.067434][ T8050] RSP: 002b:00007ffffd8dee28 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 100.067450][ T8050] RAX: ffffffffffffffda RBX: 00007ffffd8dee30 RCX: 00007f6303d15937 [ 100.067460][ T8050] RDX: 0000000000000000 RSI: 00000000000003e2 RDI: 00007ffffd8dee30 [ 100.067470][ T8050] RBP: 00005596b4d630c0 R08: 0000000000000000 R09: 0000000000000000 [ 100.067480][ T8050] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000aba9500 [ 100.067490][ T8050] R13: 0000000003938700 R14: 000055968166e100 R15: 000055968166e140 [ 100.067513][ T8050] [ 100.125597][ C1] FAULT_INJECTION: forcing a failure. [ 100.125597][ C1] name failslab, interval 1, probability 1, space 0, times 28 [ 100.128541][ T5748] CPU: 2 UID: 0 PID: 5748 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.128556][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.128563][ T5748] Call Trace: [ 100.128568][ T5748] [ 100.128574][ T5748] dump_stack_lvl+0x100/0x190 [ 100.128592][ T5748] should_fail_ex.cold+0x5/0xa [ 100.128612][ T5748] should_failslab+0xc2/0x120 [ 100.128627][ T5748] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.128642][ T5748] ? do_getname+0x35/0x390 [ 100.128658][ T5748] do_getname+0x35/0x390 [ 100.128674][ T5748] vfs_fstatat+0xd0/0xe0 [ 100.128688][ T5748] __do_sys_newfstatat+0x9d/0x120 [ 100.128703][ T5748] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 100.128724][ T5748] ? trace_syscall_enter+0xd9/0x110 [ 100.128740][ T5748] ? trace_syscall_enter+0xd9/0x110 [ 100.128759][ T5748] do_syscall_64+0x115/0x870 [ 100.128772][ T5748] ? clear_bhb_loop+0x40/0x90 [ 100.128786][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.128798][ T5748] RIP: 0033:0x7f6303d11b0a [ 100.128809][ T5748] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 100.128820][ T5748] RSP: 002b:00007ffffd8de428 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 100.128832][ T5748] RAX: ffffffffffffffda RBX: 00007ffffd8dee00 RCX: 00007f6303d11b0a [ 100.128838][ T5748] RDX: 00007ffffd8de450 RSI: 00007ffffd8dee00 RDI: 00000000ffffff9c [ 100.128845][ T5748] RBP: 00007ffffd8dee0f R08: 0000000000000075 R09: 0000000000000000 [ 100.128852][ T5748] R10: 0000000000000100 R11: 0000000000000202 R12: 00005596b4d72ed5 [ 100.128858][ T5748] R13: 00007ffffd8de4e0 R14: 00005596816536d7 R15: 00005596b4d72ed0 [ 100.128871][ T5748] [ 100.131989][ T5748] FAULT_INJECTION: forcing a failure. [ 100.131989][ T5748] name failslab, interval 1, probability 1, space 0, times 27 [ 100.134029][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 100.134044][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.134053][ C1] Call Trace: [ 100.134059][ C1] [ 100.134064][ C1] dump_stack_lvl+0x100/0x190 [ 100.134082][ C1] should_fail_ex.cold+0x5/0xa [ 100.134094][ C1] ? __pfx_xa_load+0x10/0x10 [ 100.134111][ C1] should_failslab+0xc2/0x120 [ 100.134127][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.134141][ C1] ? skb_clone+0x190/0x400 [ 100.134158][ C1] skb_clone+0x190/0x400 [ 100.134171][ C1] hsr_create_tagged_frame+0x983/0xf00 [ 100.134190][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 100.134205][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 100.134218][ C1] ? hsr_drop_frame+0x1f3/0xb80 [ 100.134236][ C1] hsr_forward_skb+0x1396/0x28d0 [ 100.134247][ C1] ? __pfx_hsr_drop_frame+0x10/0x10 [ 100.134266][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 100.134279][ C1] ? __asan_memset+0x23/0x50 [ 100.134290][ C1] ? __skb_pad+0x252/0x600 [ 100.134307][ C1] send_hsr_supervision_frame+0x696/0xbc0 [ 100.134330][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 100.134347][ C1] hsr_announce+0x169/0x3e0 [ 100.134363][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 100.134381][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 100.134396][ C1] call_timer_fn+0x19a/0x610 [ 100.134411][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 100.134424][ C1] ? __run_timers+0x747/0xb00 [ 100.134438][ C1] ? rcu_is_watching+0x12/0xc0 [ 100.134456][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 100.134470][ C1] __run_timers+0x757/0xb00 [ 100.134486][ C1] ? __pfx___run_timers+0x10/0x10 [ 100.134504][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 100.134523][ C1] run_timer_base+0x114/0x190 [ 100.134536][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 100.134550][ C1] run_timer_softirq+0x1a/0x50 [ 100.134563][ C1] handle_softirqs+0x1ea/0x9b0 [ 100.134579][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 100.134594][ C1] ? _raw_spin_unlock+0x28/0x50 [ 100.134610][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 100.134622][ C1] __irq_exit_rcu+0x162/0x210 [ 100.134641][ C1] irq_exit_rcu+0x9/0x30 [ 100.134654][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.134667][ C1] [ 100.134670][ C1] [ 100.134674][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.134688][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 100.134701][ C1] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 100.134712][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000202 [ 100.134721][ C1] RAX: 00000000000e0c79 RBX: ffff88801eaf2540 RCX: ffffffff8bbb22d5 [ 100.134728][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 100.134735][ C1] RBP: ffffed1003d5e4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 100.134741][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 100.134748][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 100.134758][ C1] ? ct_kernel_exit+0x125/0x180 [ 100.134773][ C1] default_idle+0x9/0x10 [ 100.134785][ C1] default_idle_call+0x6c/0xb0 [ 100.134799][ C1] do_idle+0x3a7/0x5b0 [ 100.134814][ C1] ? __pfx_do_idle+0x10/0x10 [ 100.134830][ C1] ? do_idle+0x388/0x5b0 [ 100.134847][ C1] cpu_startup_entry+0x4f/0x60 [ 100.134862][ C1] start_secondary+0x21d/0x2d0 [ 100.134877][ C1] ? __pfx_start_secondary+0x10/0x10 [ 100.134894][ C1] common_startup_64+0x13e/0x158 [ 100.134917][ C1] [ 100.136006][ T5734] FAULT_INJECTION: forcing a failure. [ 100.136006][ T5734] name failslab, interval 1, probability 1, space 0, times 26 [ 100.136221][ T5748] CPU: 2 UID: 0 PID: 5748 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.136235][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.136242][ T5748] Call Trace: [ 100.136246][ T5748] [ 100.136251][ T5748] dump_stack_lvl+0x100/0x190 [ 100.136267][ T5748] should_fail_ex.cold+0x5/0xa [ 100.136282][ T5748] should_failslab+0xc2/0x120 [ 100.136297][ T5748] __kmalloc_noprof+0xfc/0x820 [ 100.136311][ T5748] ? tomoyo_encode2+0xfb/0x3c0 [ 100.136324][ T5748] tomoyo_encode2+0xfb/0x3c0 [ 100.136337][ T5748] tomoyo_encode+0x29/0x50 [ 100.136347][ T5748] tomoyo_realpath_from_path+0x18c/0x690 [ 100.136361][ T5748] tomoyo_path_perm+0x276/0x460 [ 100.136376][ T5748] ? tomoyo_path_perm+0x262/0x460 [ 100.136393][ T5748] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 100.136408][ T5748] ? __pfx_check_buffer+0x10/0x10 [ 100.136431][ T5748] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 100.136457][ T5748] ? lockdep_hardirqs_on+0x78/0x100 [ 100.136470][ T5748] ? rb_commit+0x129/0x9d0 [ 100.136488][ T5748] security_inode_getattr+0x116/0x280 [ 100.136506][ T5748] vfs_fstat+0x4b/0xe0 [ 100.136520][ T5748] __do_sys_newfstat+0x8b/0x110 [ 100.136534][ T5748] ? __pfx___do_sys_newfstat+0x10/0x10 [ 100.136554][ T5748] ? trace_syscall_enter+0xd9/0x110 [ 100.136570][ T5748] ? trace_syscall_enter+0xd9/0x110 [ 100.136587][ T5748] ? rcu_is_watching+0x12/0xc0 [ 100.136608][ T5748] do_syscall_64+0x115/0x870 [ 100.136621][ T5748] ? clear_bhb_loop+0x40/0x90 [ 100.136635][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.136646][ T5748] RIP: 0033:0x7f6303d11ad7 [ 100.136657][ T5748] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 100.136668][ T5748] RSP: 002b:00007ffffd8de6f8 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 100.136679][ T5748] RAX: ffffffffffffffda RBX: 00005596b4d70d90 RCX: 00007f6303d11ad7 [ 100.136685][ T5748] RDX: 00007f6303defea0 RSI: 00007ffffd8de700 RDI: 0000000000000009 [ 100.136691][ T5748] RBP: 00007f6303defff0 R08: 0000000000000073 R09: 0000000000000001 [ 100.136698][ T5748] R10: 0000000000000000 R11: 0000000000000297 R12: 00007ffffd8de8d0 [ 100.136704][ T5748] R13: 00007f6303defff0 R14: 0000000000000015 R15: 00005596816579dd [ 100.136718][ T5748] [ 100.136728][ T5748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.138277][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.138298][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.138307][ T5734] Call Trace: [ 100.138313][ T5734] [ 100.138320][ T5734] dump_stack_lvl+0x100/0x190 [ 100.138343][ T5734] should_fail_ex.cold+0x5/0xa [ 100.138390][ T5734] should_failslab+0xc2/0x120 [ 100.138433][ T5734] __kmalloc_noprof+0xfc/0x820 [ 100.138453][ T5734] ? tomoyo_encode2+0xfb/0x3c0 [ 100.138474][ T5734] tomoyo_encode2+0xfb/0x3c0 [ 100.138493][ T5734] tomoyo_encode+0x29/0x50 [ 100.138508][ T5734] tomoyo_realpath_from_path+0x18c/0x690 [ 100.138530][ T5734] tomoyo_path_perm+0x276/0x460 [ 100.138551][ T5734] ? tomoyo_path_perm+0x262/0x460 [ 100.138575][ T5734] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 100.138598][ T5734] ? mntput+0x70/0xa0 [ 100.138634][ T5734] ? __d_lookup+0x25c/0x4a0 [ 100.138665][ T5734] tomoyo_path_rmdir+0x91/0xe0 [ 100.138683][ T5734] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 100.138702][ T5734] ? lookup_dcache+0x66/0x170 [ 100.138731][ T5734] security_path_rmdir+0x145/0x2b0 [ 100.138755][ T5734] filename_rmdir+0x29d/0x5c0 [ 100.138775][ T5734] ? __pfx_filename_rmdir+0x10/0x10 [ 100.138802][ T5734] ? do_getname+0x191/0x390 [ 100.138825][ T5734] __x64_sys_unlinkat+0xf5/0x130 [ 100.138846][ T5734] do_syscall_64+0x115/0x870 [ 100.138863][ T5734] ? clear_bhb_loop+0x40/0x90 [ 100.138883][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.138899][ T5734] RIP: 0033:0x7fb51339d0b7 [ 100.138913][ T5734] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.138929][ T5734] RSP: 002b:00007fff7172cee8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 100.138945][ T5734] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fb51339d0b7 [ 100.138955][ T5734] RDX: 0000000000000200 RSI: 00007fff7172e090 RDI: 00000000ffffff9c [ 100.138966][ T5734] RBP: 00007fb513434314 R08: 00000000000105a0 R09: 0000000000000001 [ 100.138976][ T5734] R10: 0000000000000000 R11: 0000000000000207 R12: 00007fff7172e090 [ 100.138986][ T5734] R13: 00007fb513434314 R14: 000000000001865c R15: 00007fff7172f160 [ 100.139008][ T5734] [ 100.139026][ T5734] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.206481][ T1175] FAULT_INJECTION: forcing a failure. [ 100.206481][ T1175] name failslab, interval 1, probability 1, space 0, times 21 [ 100.216848][ T5733] FAULT_INJECTION: forcing a failure. [ 100.216848][ T5733] name failslab, interval 1, probability 1, space 0, times 20 [ 100.217905][ T1175] CPU: 1 UID: 0 PID: 1175 Comm: kworker/u33:13 Not tainted syzkaller #0 PREEMPT(full) [ 100.217922][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.217930][ T1175] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.217949][ T1175] Call Trace: [ 100.217955][ T1175] [ 100.217960][ T1175] dump_stack_lvl+0x100/0x190 [ 100.217975][ T1175] should_fail_ex.cold+0x5/0xa [ 100.217991][ T1175] should_failslab+0xc2/0x120 [ 100.218006][ T1175] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.218021][ T1175] ? __alloc_skb+0x140/0x710 [ 100.218037][ T1175] __alloc_skb+0x140/0x710 [ 100.218049][ T1175] ? __alloc_skb+0x5b7/0x710 [ 100.218062][ T1175] ? __pfx___alloc_skb+0x10/0x10 [ 100.218076][ T1175] ? kfree_skbmem+0x19f/0x210 [ 100.218095][ T1175] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.218115][ T1175] process_one_work+0xa23/0x1940 [ 100.218133][ T1175] ? __pfx_process_one_work+0x10/0x10 [ 100.218149][ T1175] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.218165][ T1175] worker_thread+0x5ef/0xe50 [ 100.218180][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.218193][ T1175] ? kthread+0x13a/0x450 [ 100.218204][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.218215][ T1175] kthread+0x370/0x450 [ 100.218225][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.218237][ T1175] ret_from_fork+0x72b/0xd50 [ 100.218253][ T1175] ? __pfx_ret_from_fork+0x10/0x10 [ 100.218270][ T1175] ? __switch_to+0x800/0x10f0 [ 100.218282][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.218293][ T1175] ret_from_fork_asm+0x1a/0x30 [ 100.218316][ T1175] [ 100.285821][ T1175] FAULT_INJECTION: forcing a failure. [ 100.285821][ T1175] name failslab, interval 1, probability 1, space 0, times 18 [ 100.287635][ T5733] CPU: 2 UID: 0 PID: 5733 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.287650][ T5733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.287657][ T5733] Call Trace: [ 100.287663][ T5733] [ 100.287669][ T5733] dump_stack_lvl+0x100/0x190 [ 100.287687][ T5733] should_fail_ex.cold+0x5/0xa [ 100.287701][ T5733] should_failslab+0xc2/0x120 [ 100.287718][ T5733] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.287733][ T5733] ? __alloc_skb+0x140/0x710 [ 100.287749][ T5733] __alloc_skb+0x140/0x710 [ 100.287761][ T5733] ? __alloc_skb+0x5b7/0x710 [ 100.287774][ T5733] ? __pfx___alloc_skb+0x10/0x10 [ 100.287787][ T5733] ? find_held_lock+0x2b/0x80 [ 100.287804][ T5733] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 100.287819][ T5733] inet6_rt_notify+0x1d2/0x4c0 [ 100.287840][ T5733] fib6_del+0xf7a/0x1790 [ 100.287866][ T5733] ? __pfx_fib6_del+0x10/0x10 [ 100.287882][ T5733] ? fib6_ifdown+0xcd/0x7e0 [ 100.287899][ T5733] fib6_clean_node+0x424/0x5d0 [ 100.287912][ T5733] ? __pfx_fib6_clean_node+0x10/0x10 [ 100.287929][ T5733] fib6_walk_continue+0x451/0x8d0 [ 100.287949][ T5733] fib6_walk+0x182/0x370 [ 100.287967][ T5733] fib6_clean_tree+0xdc/0x120 [ 100.287985][ T5733] ? __pfx_fib6_ifdown+0x10/0x10 [ 100.288001][ T5733] ? __pfx_fib6_clean_tree+0x10/0x10 [ 100.288022][ T5733] ? __pfx_fib6_clean_node+0x10/0x10 [ 100.288033][ T5733] ? __pfx_fib6_ifdown+0x10/0x10 [ 100.288052][ T5733] ? __pfx_fib6_ifdown+0x10/0x10 [ 100.288068][ T5733] __fib6_clean_all+0x107/0x2d0 [ 100.288081][ T5733] rt6_disable_ip+0x2a6/0x980 [ 100.288098][ T5733] ? __pfx_try_to_wake_up+0x10/0x10 [ 100.288116][ T5733] ? __pfx_rt6_disable_ip+0x10/0x10 [ 100.288135][ T5733] addrconf_ifdown.isra.0+0x11d/0x1b70 [ 100.288149][ T5733] ? trace_contention_end+0x126/0x160 [ 100.288164][ T5733] ? __mutex_lock+0x26d/0x1bd0 [ 100.288178][ T5733] ? tee_netdev_event+0x8a/0x3d0 [ 100.288195][ T5733] ? find_held_lock+0x2b/0x80 [ 100.288213][ T5733] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 100.288231][ T5733] addrconf_notify+0x4a3/0x1ba0 [ 100.288258][ T5733] ? __pfx_tls_dev_event+0x10/0x10 [ 100.288275][ T5733] ? __pfx_addrconf_notify+0x10/0x10 [ 100.288291][ T5733] ? ip6mr_device_event+0x1c4/0x230 [ 100.288307][ T5733] notifier_call_chain+0x99/0x3f0 [ 100.288321][ T5733] call_netdevice_notifiers_info+0xbe/0x110 [ 100.288340][ T5733] netif_close_many+0x319/0x630 [ 100.288358][ T5733] ? __mod_timer+0x409/0xca0 [ 100.288372][ T5733] ? __pfx_netif_close_many+0x10/0x10 [ 100.288390][ T5733] ? netif_close_many_and_unlock+0x1af/0x270 [ 100.288407][ T5733] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.288421][ T5733] unregister_netdevice_many_notify+0x840/0x2140 [ 100.288440][ T5733] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.288452][ T5733] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 100.288468][ T5733] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 100.288485][ T5733] ? linkwatch_fire_event+0x211/0x270 [ 100.288503][ T5733] ? netif_carrier_off+0xa8/0xc0 [ 100.288523][ T5733] unregister_netdevice_queue+0x30b/0x3c0 [ 100.288539][ T5733] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 100.288555][ T5733] ? linkwatch_schedule_work+0x16f/0x1a0 [ 100.288573][ T5733] ? linkwatch_fire_event+0x74/0x270 [ 100.288593][ T5733] __tun_detach+0x1371/0x16e0 [ 100.288618][ T5733] ? __pfx_tun_chr_close+0x10/0x10 [ 100.288637][ T5733] tun_chr_close+0xc2/0x220 [ 100.288653][ T5733] ? __pfx_tun_chr_close+0x10/0x10 [ 100.288670][ T5733] __fput+0x3ff/0xb50 [ 100.288687][ T5733] task_work_run+0x150/0x240 [ 100.288700][ T5733] ? __pfx_task_work_run+0x10/0x10 [ 100.288716][ T5733] do_exit+0x951/0x2ae0 [ 100.288736][ T5733] ? do_raw_spin_lock+0x128/0x260 [ 100.288753][ T5733] ? __pfx_do_exit+0x10/0x10 [ 100.288769][ T5733] ? do_group_exit+0x1bd/0x2a0 [ 100.288780][ T5733] ? rcu_is_watching+0x12/0xc0 [ 100.288799][ T5733] do_group_exit+0xd5/0x2a0 [ 100.288811][ T5733] __x64_sys_exit_group+0x3e/0x50 [ 100.288821][ T5733] x64_sys_call+0x102c/0x1530 [ 100.288837][ T5733] do_syscall_64+0x115/0x870 [ 100.288850][ T5733] ? clear_bhb_loop+0x40/0x90 [ 100.288864][ T5733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.288876][ T5733] RIP: 0033:0x7f78c5b9df99 [ 100.288887][ T5733] Code: Unable to access opcode bytes at 0x7f78c5b9df6f. [ 100.288893][ T5733] RSP: 002b:00007fffcd898da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 100.288904][ T5733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78c5b9df99 [ 100.288911][ T5733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 100.288918][ T5733] RBP: 00007f78c5c35e37 R08: 0000000000000000 R09: 00000000000927c0 [ 100.288925][ T5733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 100.288931][ T5733] R13: 00000000000927c0 R14: 0000000000018197 R15: 00007fffcd898f60 [ 100.288944][ T5733] [ 100.354975][ C2] FAULT_INJECTION: forcing a failure. [ 100.354975][ C2] name failslab, interval 1, probability 1, space 0, times 17 [ 100.356106][ T1175] CPU: 1 UID: 0 PID: 1175 Comm: kworker/u33:13 Not tainted syzkaller #0 PREEMPT(full) [ 100.356127][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.356139][ T1175] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.356165][ T1175] Call Trace: [ 100.356172][ T1175] [ 100.356179][ T1175] dump_stack_lvl+0x100/0x190 [ 100.356201][ T1175] should_fail_ex.cold+0x5/0xa [ 100.356222][ T1175] should_failslab+0xc2/0x120 [ 100.356243][ T1175] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.356264][ T1175] ? __alloc_skb+0x140/0x710 [ 100.356287][ T1175] __alloc_skb+0x140/0x710 [ 100.356303][ T1175] ? __alloc_skb+0x5b7/0x710 [ 100.356321][ T1175] ? __pfx___alloc_skb+0x10/0x10 [ 100.356341][ T1175] ? kfree_skbmem+0x19f/0x210 [ 100.356368][ T1175] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.356399][ T1175] process_one_work+0xa23/0x1940 [ 100.356426][ T1175] ? __pfx_process_one_work+0x10/0x10 [ 100.356449][ T1175] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.356471][ T1175] worker_thread+0x5ef/0xe50 [ 100.356494][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.356513][ T1175] ? kthread+0x13a/0x450 [ 100.356526][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.356542][ T1175] kthread+0x370/0x450 [ 100.356563][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.356580][ T1175] ret_from_fork+0x72b/0xd50 [ 100.356604][ T1175] ? __pfx_ret_from_fork+0x10/0x10 [ 100.356627][ T1175] ? __switch_to+0x800/0x10f0 [ 100.356643][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.356660][ T1175] ret_from_fork_asm+0x1a/0x30 [ 100.356694][ T1175] [ 100.365974][ C3] FAULT_INJECTION: forcing a failure. [ 100.365974][ C3] name failslab, interval 1, probability 1, space 0, times 16 [ 100.367908][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 100.367924][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.367931][ C2] Call Trace: [ 100.367937][ C2] [ 100.367942][ C2] dump_stack_lvl+0x100/0x190 [ 100.367960][ C2] should_fail_ex.cold+0x5/0xa [ 100.367976][ C2] should_failslab+0xc2/0x120 [ 100.367991][ C2] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.368005][ C2] ? __alloc_skb+0x5b7/0x710 [ 100.368018][ C2] ? __alloc_skb+0x140/0x710 [ 100.368032][ C2] __alloc_skb+0x140/0x710 [ 100.368048][ C2] ? __alloc_skb+0x5b7/0x710 [ 100.368060][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 100.368073][ C2] ? lock_acquire+0x1b9/0x370 [ 100.368089][ C2] __netdev_alloc_skb+0x7a/0x960 [ 100.368104][ C2] __ieee80211_beacon_get+0xba1/0x1ee0 [ 100.368122][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.368137][ C2] ieee80211_beacon_get_tim+0xa6/0x280 [ 100.368152][ C2] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 100.368169][ C2] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 100.368190][ C2] __iterate_interfaces+0x2e6/0x650 [ 100.368204][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 100.368219][ C2] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 100.368234][ C2] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 100.368250][ C2] mac80211_hwsim_beacon+0xe5/0x2a0 [ 100.368269][ C2] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 100.368286][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 100.368308][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 100.368326][ C2] handle_softirqs+0x1ea/0x9b0 [ 100.368343][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 100.368357][ C2] ? _raw_spin_unlock+0x28/0x50 [ 100.368374][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 100.368387][ C2] __irq_exit_rcu+0x162/0x210 [ 100.368401][ C2] irq_exit_rcu+0x9/0x30 [ 100.368414][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.368427][ C2] [ 100.368431][ C2] [ 100.368435][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.368448][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 100.368461][ C2] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 100.368472][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 100.368482][ C2] RAX: 00000000000c69f7 RBX: ffff88801f294a80 RCX: ffffffff8bbb22d5 [ 100.368489][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 100.368496][ C2] RBP: ffffed1003e52950 R08: 0000000000000001 R09: ffffed100d4c678d [ 100.368502][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 100.368509][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 100.368519][ C2] ? ct_kernel_exit+0x125/0x180 [ 100.368534][ C2] default_idle+0x9/0x10 [ 100.368546][ C2] default_idle_call+0x6c/0xb0 [ 100.368560][ C2] do_idle+0x3a7/0x5b0 [ 100.368575][ C2] ? __pfx_do_idle+0x10/0x10 [ 100.368593][ C2] cpu_startup_entry+0x4f/0x60 [ 100.368609][ C2] start_secondary+0x21d/0x2d0 [ 100.368624][ C2] ? __pfx_start_secondary+0x10/0x10 [ 100.368641][ C2] common_startup_64+0x13e/0x158 [ 100.368664][ C2] [ 100.370684][ T5734] FAULT_INJECTION: forcing a failure. [ 100.370684][ T5734] name failslab, interval 1, probability 1, space 0, times 15 [ 100.370987][ C3] CPU: 3 UID: 0 PID: 5733 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.371002][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.371009][ C3] Call Trace: [ 100.371014][ C3] [ 100.371019][ C3] dump_stack_lvl+0x100/0x190 [ 100.371036][ C3] should_fail_ex.cold+0x5/0xa [ 100.371049][ C3] should_failslab+0xc2/0x120 [ 100.371063][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.371078][ C3] ? __alloc_skb+0x140/0x710 [ 100.371093][ C3] __alloc_skb+0x140/0x710 [ 100.371104][ C3] ? __alloc_skb+0x5b7/0x710 [ 100.371116][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 100.371129][ C3] ? lock_acquire+0x1b9/0x370 [ 100.371144][ C3] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 100.371161][ C3] wg_packet_send_keepalive+0x7a/0x300 [ 100.371180][ C3] wg_expired_send_persistent_keepalive+0x5e/0x80 [ 100.371196][ C3] call_timer_fn+0x19a/0x610 [ 100.371209][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 100.371224][ C3] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 100.371240][ C3] ? mark_held_locks+0x40/0x70 [ 100.371254][ C3] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 100.371270][ C3] __run_timers+0x757/0xb00 [ 100.371286][ C3] ? __pfx___run_timers+0x10/0x10 [ 100.371303][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 100.371323][ C3] run_timer_base+0x114/0x190 [ 100.371335][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 100.371350][ C3] run_timer_softirq+0x1a/0x50 [ 100.371362][ C3] handle_softirqs+0x1ea/0x9b0 [ 100.371378][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 100.371392][ C3] ? _raw_spin_unlock+0x3e/0x50 [ 100.371408][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 100.371420][ C3] __irq_exit_rcu+0x162/0x210 [ 100.371434][ C3] irq_exit_rcu+0x9/0x30 [ 100.371447][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.371459][ C3] [ 100.371463][ C3] [ 100.371466][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.371479][ C3] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 100.371494][ C3] Code: e8 da dd ff ff 48 83 2d 1a 69 9e 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 fa a8 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 100.371505][ C3] RSP: 0018:ffffc90003baf990 EFLAGS: 00000246 [ 100.371515][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 100.371526][ C3] RDX: 0000000000000000 RSI: ffffffff8e29d3f5 RDI: ffffffff8c402680 [ 100.371533][ C3] RBP: 0000000000000246 R08: 000000000001614a R09: ffffffff9686d0f4 [ 100.371539][ C3] R10: ffffffff912279d7 R11: 0000000000000000 R12: ffffffff97eb0ec8 [ 100.371546][ C3] R13: ffff888034d34000 R14: ffff888034d34568 R15: 0000000000000001 [ 100.371560][ C3] __qdisc_destroy+0x172/0x530 [ 100.371576][ C3] qdisc_put+0xb0/0xf0 [ 100.371590][ C3] dev_shutdown+0x1d2/0x440 [ 100.371607][ C3] unregister_netdevice_many_notify+0xd55/0x2140 [ 100.371640][ C3] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 100.371658][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 100.371674][ C3] ? linkwatch_fire_event+0x211/0x270 [ 100.371691][ C3] ? netif_carrier_off+0xa8/0xc0 [ 100.371709][ C3] unregister_netdevice_queue+0x30b/0x3c0 [ 100.371725][ C3] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 100.371739][ C3] ? linkwatch_schedule_work+0x16f/0x1a0 [ 100.371757][ C3] ? linkwatch_fire_event+0x74/0x270 [ 100.371775][ C3] __tun_detach+0x1371/0x16e0 [ 100.371795][ C3] ? __pfx_tun_chr_close+0x10/0x10 [ 100.371811][ C3] tun_chr_close+0xc2/0x220 [ 100.371827][ C3] ? __pfx_tun_chr_close+0x10/0x10 [ 100.371842][ C3] __fput+0x3ff/0xb50 [ 100.371858][ C3] task_work_run+0x150/0x240 [ 100.371871][ C3] ? __pfx_task_work_run+0x10/0x10 [ 100.371886][ C3] do_exit+0x951/0x2ae0 [ 100.371903][ C3] ? do_raw_spin_lock+0x128/0x260 [ 100.371919][ C3] ? __pfx_do_exit+0x10/0x10 [ 100.371934][ C3] ? do_group_exit+0x1bd/0x2a0 [ 100.371944][ C3] ? rcu_is_watching+0x12/0xc0 [ 100.371963][ C3] do_group_exit+0xd5/0x2a0 [ 100.371974][ C3] __x64_sys_exit_group+0x3e/0x50 [ 100.371985][ C3] x64_sys_call+0x102c/0x1530 [ 100.372000][ C3] do_syscall_64+0x115/0x870 [ 100.372012][ C3] ? clear_bhb_loop+0x40/0x90 [ 100.372025][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.372037][ C3] RIP: 0033:0x7f78c5b9df99 [ 100.372046][ C3] Code: Unable to access opcode bytes at 0x7f78c5b9df6f. [ 100.372051][ C3] RSP: 002b:00007fffcd898da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 100.372061][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78c5b9df99 [ 100.372068][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 100.372074][ C3] RBP: 00007f78c5c35e37 R08: 0000000000000000 R09: 00000000000927c0 [ 100.372081][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 100.372087][ C3] R13: 00000000000927c0 R14: 0000000000018197 R15: 00007fffcd898f60 [ 100.372100][ C3] [ 100.457844][ C2] FAULT_INJECTION: forcing a failure. [ 100.457844][ C2] name failslab, interval 1, probability 1, space 0, times 12 [ 100.458243][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.458267][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.458276][ T5734] Call Trace: [ 100.458283][ T5734] [ 100.458289][ T5734] dump_stack_lvl+0x100/0x190 [ 100.458316][ T5734] should_fail_ex.cold+0x5/0xa [ 100.458339][ T5734] should_failslab+0xc2/0x120 [ 100.458363][ T5734] __kmalloc_noprof+0xfc/0x820 [ 100.458383][ T5734] ? rcu_is_watching+0x12/0xc0 [ 100.458410][ T5734] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.458433][ T5734] tomoyo_realpath_from_path+0xb6/0x690 [ 100.458455][ T5734] tomoyo_path_perm+0x276/0x460 [ 100.458479][ T5734] ? tomoyo_path_perm+0x262/0x460 [ 100.458504][ T5734] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 100.458559][ T5734] ? find_held_lock+0x2b/0x80 [ 100.458584][ T5734] ? __might_fault+0xc5/0x140 [ 100.458602][ T5734] ? __might_fault+0xc5/0x140 [ 100.458621][ T5734] security_inode_getattr+0x116/0x280 [ 100.458647][ T5734] vfs_statx+0x11f/0x3f0 [ 100.458669][ T5734] ? __pfx_vfs_statx+0x10/0x10 [ 100.458691][ T5734] ? do_getname+0x191/0x390 [ 100.458715][ T5734] vfs_fstatat+0x77/0xe0 [ 100.458737][ T5734] __do_sys_newfstatat+0x9d/0x120 [ 100.458759][ T5734] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 100.458793][ T5734] ? trace_syscall_enter+0xd9/0x110 [ 100.458817][ T5734] ? trace_syscall_enter+0xd9/0x110 [ 100.458845][ T5734] do_syscall_64+0x115/0x870 [ 100.458863][ T5734] ? clear_bhb_loop+0x40/0x90 [ 100.458885][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.458903][ T5734] RIP: 0033:0x7fb51339c5da [ 100.458919][ T5734] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 100.458935][ T5734] RSP: 002b:00007fff7172dfd8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 100.458951][ T5734] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb51339c5da [ 100.458961][ T5734] RDX: 00007fff7172e000 RSI: 00007fff7172e090 RDI: 00000000ffffff9c [ 100.458973][ T5734] RBP: 00007fff7172e090 R08: 00007fff7172f090 R09: 00000000ffffffff [ 100.458983][ T5734] R10: 0000000000000100 R11: 0000000000000286 R12: 00007fff7172f120 [ 100.458992][ T5734] R13: 00007fb513434314 R14: 000000000001865c R15: 00007fff7172f160 [ 100.459015][ T5734] [ 100.462026][ T5734] FAULT_INJECTION: forcing a failure. [ 100.462026][ T5734] name failslab, interval 1, probability 1, space 0, times 11 [ 100.463586][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 100.463609][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.463618][ C2] Call Trace: [ 100.463627][ C2] [ 100.463634][ C2] dump_stack_lvl+0x100/0x190 [ 100.463660][ C2] should_fail_ex.cold+0x5/0xa [ 100.463683][ C2] should_failslab+0xc2/0x120 [ 100.463705][ C2] __kmalloc_noprof+0xfc/0x820 [ 100.463725][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.463744][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 100.463773][ C2] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 100.463803][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 100.463840][ C2] ? mark_held_locks+0x40/0x70 [ 100.463861][ C2] ? find_held_lock+0x2b/0x80 [ 100.463886][ C2] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 100.463913][ C2] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 100.463936][ C2] ? rcu_is_watching+0x12/0xc0 [ 100.463965][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 100.463988][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 100.464017][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.464044][ C2] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 100.464068][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 100.464103][ C2] ? find_held_lock+0x2b/0x80 [ 100.464128][ C2] ? unwind_next_frame+0x3be/0x2090 [ 100.464147][ C2] ? unwind_next_frame+0x3be/0x2090 [ 100.464176][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.464208][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 100.464238][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 100.464267][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 100.464299][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 100.464321][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 100.464345][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.464369][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 100.464400][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 100.464428][ C2] ? do_raw_spin_lock+0x128/0x260 [ 100.464459][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 100.464479][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 100.464505][ C2] ieee80211_rx_list+0xf19/0x2160 [ 100.464537][ C2] ? lock_acquire+0x1b9/0x370 [ 100.464557][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 100.464589][ C2] ieee80211_rx_napi+0xdc/0x400 [ 100.464615][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 100.464641][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 100.464660][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.464680][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 100.464706][ C2] tasklet_action_common+0x2de/0x3d0 [ 100.464734][ C2] handle_softirqs+0x1ea/0x9b0 [ 100.464761][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 100.464783][ C2] ? _raw_spin_unlock+0x28/0x50 [ 100.464809][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 100.464828][ C2] __irq_exit_rcu+0x162/0x210 [ 100.464851][ C2] irq_exit_rcu+0x9/0x30 [ 100.464872][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.464889][ C2] [ 100.464894][ C2] [ 100.464902][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.464921][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 100.464941][ C2] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 100.464956][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000202 [ 100.464972][ C2] RAX: 00000000000c6c0b RBX: ffff88801f294a80 RCX: ffffffff8bbb22d5 [ 100.464982][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 100.464992][ C2] RBP: ffffed1003e52950 R08: 0000000000000001 R09: ffffed100d4c678d [ 100.465005][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 100.465014][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 100.465031][ C2] ? ct_kernel_exit+0x125/0x180 [ 100.465058][ C2] default_idle+0x9/0x10 [ 100.465079][ C2] default_idle_call+0x6c/0xb0 [ 100.465100][ C2] do_idle+0x3a7/0x5b0 [ 100.465123][ C2] ? __pfx_do_idle+0x10/0x10 [ 100.465153][ C2] cpu_startup_entry+0x4f/0x60 [ 100.465178][ C2] start_secondary+0x21d/0x2d0 [ 100.465201][ C2] ? __pfx_start_secondary+0x10/0x10 [ 100.465228][ C2] common_startup_64+0x13e/0x158 [ 100.465265][ C2] [ 100.465866][ T1166] FAULT_INJECTION: forcing a failure. [ 100.465866][ T1166] name failslab, interval 1, probability 1, space 0, times 10 [ 100.467638][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.467661][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.467671][ T5734] Call Trace: [ 100.467677][ T5734] [ 100.467684][ T5734] dump_stack_lvl+0x100/0x190 [ 100.467708][ T5734] should_fail_ex.cold+0x5/0xa [ 100.467730][ T5734] should_failslab+0xc2/0x120 [ 100.467753][ T5734] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 100.467777][ T5734] ? __get_vm_area_node+0x101/0x330 [ 100.467807][ T5734] __get_vm_area_node+0x101/0x330 [ 100.467834][ T5734] __vmalloc_node_range_noprof+0x228/0x1630 [ 100.467861][ T5734] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 100.467883][ T5734] ? trace_contention_end+0x126/0x160 [ 100.467907][ T5734] ? __mutex_lock+0x26d/0x1bd0 [ 100.467928][ T5734] ? __lock_acquire+0x49f/0x1a40 [ 100.467950][ T5143] FAULT_INJECTION: forcing a failure. [ 100.467950][ T5143] name failslab, interval 1, probability 1, space 0, times 10 [ 100.467949][ T5734] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 100.467972][ T5734] ? __pfx___mutex_lock+0x10/0x10 [ 100.467995][ T5734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.468018][ T5734] ? net_generic+0xea/0x2a0 [ 100.468034][ T5734] ? net_generic+0xea/0x2a0 [ 100.468054][ T5734] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 100.468070][ T5734] __vmalloc_node_noprof+0xad/0xf0 [ 100.468091][ T5734] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 100.468109][ T5734] do_ipt_get_ctl+0x7e0/0xbf0 [ 100.468127][ T5734] ? __mutex_unlock_slowpath+0x35d/0x930 [ 100.468144][ T5734] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 100.468160][ T5734] ? __lock_acquire+0x49f/0x1a40 [ 100.468176][ T5734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.468200][ T5734] ? nf_sockopt_find.isra.0+0x222/0x290 [ 100.468219][ T5734] nf_getsockopt+0x7c/0xe0 [ 100.468237][ T5734] ip_getsockopt+0x192/0x1e0 [ 100.468257][ T5734] ? __pfx_ip_getsockopt+0x10/0x10 [ 100.468274][ T5734] ? _copy_from_user+0x59/0xd0 [ 100.468295][ T5734] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 100.468321][ T5734] tcp_getsockopt+0xa1/0x110 [ 100.468342][ T5734] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 100.468366][ T5734] do_sock_getsockopt+0x50a/0x6e0 [ 100.468390][ T5734] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 100.468423][ T5734] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 100.468450][ T5734] __sys_getsockopt+0x148/0x260 [ 100.468473][ T5734] ? __x64_sys_getsockopt+0xbd/0x160 [ 100.468488][ T5734] __x64_sys_getsockopt+0xbd/0x160 [ 100.468505][ T5734] ? trace_syscall_enter+0xe3/0x110 [ 100.468525][ T5734] do_syscall_64+0x115/0x870 [ 100.468545][ T5734] ? clear_bhb_loop+0x40/0x90 [ 100.468563][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.468577][ T5734] RIP: 0033:0x7fb51339f76a [ 100.468590][ T5734] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 100.468604][ T5734] RSP: 002b:00007fff7172e9d8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 100.468619][ T5734] RAX: ffffffffffffffda RBX: 00007fff7172ea60 RCX: 00007fb51339f76a [ 100.468627][ T5734] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 100.468636][ T5734] RBP: 0000000000000003 R08: 00007fff7172e9fc R09: 0000000000000000 [ 100.468644][ T5734] R10: 00007fff7172ea60 R11: 0000000000000216 R12: 00007fb5135f0ac0 [ 100.468652][ T5734] R13: 00007fff7172e9fc R14: 0000000000000000 R15: 00007fb5135f1180 [ 100.468671][ T5734] [ 100.469435][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 100.469450][ T1166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.469458][ T1166] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.469476][ T1166] Call Trace: [ 100.469481][ T1166] [ 100.469486][ T1166] dump_stack_lvl+0x100/0x190 [ 100.469501][ T1166] should_fail_ex.cold+0x5/0xa [ 100.469515][ T1166] should_failslab+0xc2/0x120 [ 100.469530][ T1166] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.469545][ T1166] ? __alloc_skb+0x140/0x710 [ 100.469561][ T1166] __alloc_skb+0x140/0x710 [ 100.469573][ T1166] ? __alloc_skb+0x5b7/0x710 [ 100.469585][ T1166] ? __pfx___alloc_skb+0x10/0x10 [ 100.469597][ T1166] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.469615][ T1166] ? __pfx___might_resched+0x10/0x10 [ 100.469632][ T1166] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.469656][ T1166] process_one_work+0xa23/0x1940 [ 100.469674][ T1166] ? __pfx_process_one_work+0x10/0x10 [ 100.469690][ T1166] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.469706][ T1166] worker_thread+0x5ef/0xe50 [ 100.469723][ T1166] ? kthread+0x13a/0x450 [ 100.469732][ T1166] ? __pfx_worker_thread+0x10/0x10 [ 100.469744][ T1166] kthread+0x370/0x450 [ 100.469754][ T1166] ? __pfx_kthread+0x10/0x10 [ 100.469766][ T1166] ret_from_fork+0x72b/0xd50 [ 100.469782][ T1166] ? __pfx_ret_from_fork+0x10/0x10 [ 100.469799][ T1166] ? __switch_to+0x800/0x10f0 [ 100.469811][ T1166] ? __pfx_kthread+0x10/0x10 [ 100.469822][ T1166] ret_from_fork_asm+0x1a/0x30 [ 100.469846][ T1166] [ 100.545699][ T1175] FAULT_INJECTION: forcing a failure. [ 100.545699][ T1175] name failslab, interval 1, probability 1, space 0, times 7 [ 100.555543][ T5143] CPU: 2 UID: 0 PID: 5143 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.555568][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.555579][ T5143] Call Trace: [ 100.555586][ T5143] [ 100.555594][ T5143] dump_stack_lvl+0x100/0x190 [ 100.555620][ T5143] should_fail_ex.cold+0x5/0xa [ 100.555643][ T5143] should_failslab+0xc2/0x120 [ 100.555667][ T5143] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.555687][ T5143] ? trace_kmem_cache_alloc+0xdd/0x100 [ 100.555709][ T5143] ? security_file_alloc+0x34/0x2c0 [ 100.555731][ T5143] security_file_alloc+0x34/0x2c0 [ 100.555748][ T5143] init_file+0x95/0x480 [ 100.555770][ T5143] alloc_empty_file+0x79/0x1c0 [ 100.555792][ T5143] path_openat+0xe7/0x4280 [ 100.555810][ T5143] ? __kasan_slab_alloc+0x89/0x90 [ 100.555830][ T5143] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 100.555847][ T5143] ? do_getname+0x35/0x390 [ 100.555867][ T5143] ? do_sys_openat2+0xc7/0x1e0 [ 100.555887][ T5143] ? __x64_sys_openat+0x12d/0x210 [ 100.555907][ T5143] ? do_syscall_64+0x115/0x870 [ 100.555926][ T5143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.555950][ T5143] ? __pfx_path_openat+0x10/0x10 [ 100.555975][ T5143] do_file_open+0x20e/0x430 [ 100.555996][ T5143] ? __pfx_do_file_open+0x10/0x10 [ 100.556030][ T5143] ? alloc_fd+0x471/0x7a0 [ 100.556051][ T5143] ? do_getname+0x191/0x390 [ 100.556075][ T5143] do_sys_openat2+0x10f/0x1e0 [ 100.556095][ T5143] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.556116][ T5143] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 100.556147][ T5143] __x64_sys_openat+0x12d/0x210 [ 100.556168][ T5143] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.556187][ T5143] ? find_held_lock+0x2b/0x80 [ 100.556234][ T5143] ? trace_syscall_enter+0xd9/0x110 [ 100.556260][ T5143] do_syscall_64+0x115/0x870 [ 100.556276][ T5143] ? clear_bhb_loop+0x40/0x90 [ 100.556293][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.556307][ T5143] RIP: 0033:0x7f6303d15c3a [ 100.556320][ T5143] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 100.556334][ T5143] RSP: 002b:00007ffffd8df438 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 100.556348][ T5143] RAX: ffffffffffffffda RBX: 00005596b4d6c4e0 RCX: 00007f6303d15c3a [ 100.556358][ T5143] RDX: 0000000000090800 RSI: 00005596b4d67950 RDI: 00000000ffffff9c [ 100.556367][ T5143] RBP: 00005596b4d67950 R08: 00000000000001d0 R09: 0000000000000000 [ 100.556375][ T5143] R10: 0000000000000000 R11: 0000000000000206 R12: 00005596b4d6d170 [ 100.556384][ T5143] R13: 0000000000000100 R14: 0000000000000000 R15: 00007ffffd8df680 [ 100.556402][ T5143] [ 100.559979][ C2] FAULT_INJECTION: forcing a failure. [ 100.559979][ C2] name failslab, interval 1, probability 1, space 0, times 6 [ 100.560001][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 100.560014][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.560021][ C2] Call Trace: [ 100.560025][ C2] [ 100.560030][ C2] dump_stack_lvl+0x100/0x190 [ 100.560047][ C2] should_fail_ex.cold+0x5/0xa [ 100.560062][ C2] should_failslab+0xc2/0x120 [ 100.560076][ C2] __kmalloc_noprof+0xfc/0x820 [ 100.560089][ C2] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 100.560111][ C2] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 100.560130][ C2] ? kasan_save_stack+0x3f/0x50 [ 100.560143][ C2] ? kasan_save_stack+0x30/0x50 [ 100.560156][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 100.560167][ C2] ? __kmalloc_noprof+0x322/0x820 [ 100.560181][ C2] ? lock_acquire+0x1b9/0x370 [ 100.560195][ C2] ? find_held_lock+0x2b/0x80 [ 100.560217][ C2] ? __kfree_rcu_sheaf+0x195/0x730 [ 100.560231][ C2] ? __kfree_rcu_sheaf+0x195/0x730 [ 100.560244][ C2] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 100.560266][ C2] ? kvfree_call_rcu+0x1be/0x4f0 [ 100.560284][ C2] ? __asan_memcpy+0x3c/0x60 [ 100.560296][ C2] ieee80211_inform_bss+0x159/0x1170 [ 100.560313][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 100.560331][ C2] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 100.560348][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 100.560364][ C2] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 100.560378][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.560394][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 100.560417][ C2] ? unwind_next_frame+0x3c8/0x2090 [ 100.560429][ C2] ? common_startup_64+0x13e/0x158 [ 100.560448][ C2] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 100.560462][ C2] cfg80211_inform_bss_data+0x230/0x3b60 [ 100.560479][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.560494][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 100.560513][ C2] ? lock_acquire+0x1b9/0x370 [ 100.560526][ C2] ? find_held_lock+0x2b/0x80 [ 100.560542][ C2] ? unwind_next_frame+0x3be/0x2090 [ 100.560552][ C2] ? unwind_next_frame+0x3be/0x2090 [ 100.560569][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.560583][ C2] ? common_startup_64+0x13e/0x158 [ 100.560603][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 100.560621][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 100.560638][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 100.560654][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.560668][ C2] ? do_idle+0x3a7/0x5b0 [ 100.560682][ C2] ? cpu_startup_entry+0x4f/0x60 [ 100.560697][ C2] ? common_startup_64+0x13e/0x158 [ 100.560713][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 100.560727][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 100.560742][ C2] ? __lock_acquire+0x49f/0x1a40 [ 100.560757][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 100.560777][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 100.560795][ C2] ? do_raw_spin_lock+0x128/0x260 [ 100.560813][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 100.560826][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 100.560842][ C2] ieee80211_rx_list+0xf19/0x2160 [ 100.560862][ C2] ? lock_acquire+0x1b9/0x370 [ 100.560875][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 100.560895][ C2] ieee80211_rx_napi+0xdc/0x400 [ 100.560911][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 100.560928][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 100.560939][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.560953][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 100.560969][ C2] tasklet_action_common+0x2de/0x3d0 [ 100.560987][ C2] handle_softirqs+0x1ea/0x9b0 [ 100.561003][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 100.561018][ C2] ? _raw_spin_unlock+0x28/0x50 [ 100.561034][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 100.561047][ C2] __irq_exit_rcu+0x162/0x210 [ 100.561061][ C2] irq_exit_rcu+0x9/0x30 [ 100.561074][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.561086][ C2] [ 100.561090][ C2] [ 100.561094][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.561106][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 100.561119][ C2] Code: e6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 7f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 100.561130][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000206 [ 100.561139][ C2] RAX: 00000000000c6d99 RBX: ffff88801f294a80 RCX: ffffffff8bbb22d5 [ 100.561146][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffffffff8c402680 [ 100.561152][ C2] RBP: ffffed1003e52950 R08: 0000000000000001 R09: ffffed100d4c678d [ 100.561159][ C2] R10: ffff88806a633c6b R11: 0000000000000000 R12: 0000000000000000 [ 100.561165][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 100.561175][ C2] ? ct_kernel_exit+0x125/0x180 [ 100.561190][ C2] default_idle+0x9/0x10 [ 100.561206][ C2] default_idle_call+0x6c/0xb0 [ 100.561219][ C2] do_idle+0x3a7/0x5b0 [ 100.561234][ C2] ? __pfx_do_idle+0x10/0x10 [ 100.561252][ C2] cpu_startup_entry+0x4f/0x60 [ 100.561268][ C2] start_secondary+0x21d/0x2d0 [ 100.561283][ C2] ? __pfx_start_secondary+0x10/0x10 [ 100.561299][ C2] common_startup_64+0x13e/0x158 [ 100.561321][ C2] [ 100.565581][ T61] FAULT_INJECTION: forcing a failure. [ 100.565581][ T61] name failslab, interval 1, probability 1, space 0, times 5 [ 100.566257][ T1175] CPU: 1 UID: 0 PID: 1175 Comm: kworker/u33:13 Not tainted syzkaller #0 PREEMPT(full) [ 100.566273][ T1175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.566281][ T1175] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.566298][ T1175] Call Trace: [ 100.566304][ T1175] [ 100.566309][ T1175] dump_stack_lvl+0x100/0x190 [ 100.566325][ T1175] should_fail_ex.cold+0x5/0xa [ 100.566340][ T1175] should_failslab+0xc2/0x120 [ 100.566356][ T1175] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.566370][ T1175] ? __alloc_skb+0x140/0x710 [ 100.566387][ T1175] __alloc_skb+0x140/0x710 [ 100.566399][ T1175] ? __alloc_skb+0x5b7/0x710 [ 100.566412][ T1175] ? __pfx___alloc_skb+0x10/0x10 [ 100.566426][ T1175] ? kfree_skbmem+0x19f/0x210 [ 100.566446][ T1175] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.566466][ T1175] process_one_work+0xa23/0x1940 [ 100.566484][ T1175] ? __pfx_process_one_work+0x10/0x10 [ 100.566500][ T1175] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.566516][ T1175] worker_thread+0x5ef/0xe50 [ 100.566532][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.566545][ T1175] ? kthread+0x13a/0x450 [ 100.566556][ T1175] ? __pfx_worker_thread+0x10/0x10 [ 100.566568][ T1175] kthread+0x370/0x450 [ 100.566578][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.566590][ T1175] ret_from_fork+0x72b/0xd50 [ 100.566607][ T1175] ? __pfx_ret_from_fork+0x10/0x10 [ 100.566624][ T1175] ? __switch_to+0x800/0x10f0 [ 100.566639][ T1175] ? __pfx_kthread+0x10/0x10 [ 100.566651][ T1175] ret_from_fork_asm+0x1a/0x30 [ 100.566674][ T1175] [ 100.785622][ T224] FAULT_INJECTION: forcing a failure. [ 100.785622][ T224] name failslab, interval 1, probability 1, space 0, times 1 [ 100.788365][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 100.788389][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.788402][ T61] Workqueue: events_unbound cfg80211_wiphy_work [ 100.788432][ T61] Call Trace: [ 100.788439][ T61] [ 100.788449][ T61] dump_stack_lvl+0x100/0x190 [ 100.788472][ T61] should_fail_ex.cold+0x5/0xa [ 100.788495][ T61] should_failslab+0xc2/0x120 [ 100.788518][ T61] __kmalloc_noprof+0xfc/0x820 [ 100.788537][ T61] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 100.788567][ T61] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 100.788622][ T61] ? __lock_acquire+0x49f/0x1a40 [ 100.788646][ T61] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 100.788678][ T61] ? rcu_is_watching+0x12/0xc0 [ 100.788708][ T61] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 100.788736][ T61] ? do_raw_spin_lock+0x128/0x260 [ 100.788759][ T61] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 100.788783][ T61] ieee80211_iface_work+0xa9a/0x1070 [ 100.788803][ T61] cfg80211_wiphy_work+0x2b7/0x550 [ 100.788822][ T61] process_one_work+0xa23/0x1940 [ 100.788841][ T61] ? __pfx_process_one_work+0x10/0x10 [ 100.788857][ T61] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 100.788875][ T61] worker_thread+0x5ef/0xe50 [ 100.788890][ T61] ? __pfx_worker_thread+0x10/0x10 [ 100.788904][ T61] ? kthread+0x13a/0x450 [ 100.788914][ T61] ? __pfx_worker_thread+0x10/0x10 [ 100.788925][ T61] kthread+0x370/0x450 [ 100.788936][ T61] ? __pfx_kthread+0x10/0x10 [ 100.788947][ T61] ret_from_fork+0x72b/0xd50 [ 100.788964][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 100.788981][ T61] ? __switch_to+0x800/0x10f0 [ 100.788993][ T61] ? __pfx_kthread+0x10/0x10 [ 100.789004][ T61] ret_from_fork_asm+0x1a/0x30 [ 100.789028][ T61] [ 100.960986][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.962722][ T224] CPU: 2 UID: 0 PID: 224 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 100.962738][ T224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.962745][ T224] Workqueue: events_unbound nsim_dev_trap_report_work [ 100.962764][ T224] Call Trace: [ 100.962769][ T224] [ 100.962776][ T224] dump_stack_lvl+0x100/0x190 [ 100.962799][ T224] should_fail_ex.cold+0x5/0xa [ 100.962820][ T224] should_failslab+0xc2/0x120 [ 100.962844][ T224] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 100.962867][ T224] ? __alloc_skb+0x140/0x710 [ 100.962888][ T224] __alloc_skb+0x140/0x710 [ 100.962900][ T224] ? __alloc_skb+0x5b7/0x710 [ 100.962913][ T224] ? __pfx___alloc_skb+0x10/0x10 [ 100.962927][ T224] ? kfree_skbmem+0x19f/0x210 [ 100.962946][ T224] nsim_dev_trap_report_work+0x2af/0xd20 [ 100.962967][ T224] process_one_work+0xa23/0x1940 [ 100.962985][ T224] ? __pfx_process_one_work+0x10/0x10 [ 100.963001][ T224] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 100.963017][ T224] worker_thread+0x5ef/0xe50 [ 100.963034][ T224] ? kthread+0x13a/0x450 [ 100.963045][ T224] ? __pfx_worker_thread+0x10/0x10 [ 100.963061][ T224] kthread+0x370/0x450 [ 100.963072][ T224] ? __pfx_kthread+0x10/0x10 [ 100.963083][ T224] ret_from_fork+0x72b/0xd50 [ 100.963100][ T224] ? __pfx_ret_from_fork+0x10/0x10 [ 100.963118][ T224] ? __switch_to+0x800/0x10f0 [ 100.963129][ T224] ? __pfx_kthread+0x10/0x10 [ 100.963141][ T224] ret_from_fork_asm+0x1a/0x30 [ 100.963164][ T224] [ 102.997145][ T5749] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 104.388003][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.394413][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.399656][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.408499][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.415699][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.438713][ T37] smc: removing ib device syz1 [ 104.461875][ T5814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.471223][ T5821] syz1: Port: 1 Link DOWN [ 104.489717][ T37] smbdirect: ib_dev[syz1] removed [ 104.611431][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.617780][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.621968][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.630531][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.634742][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.676797][ T5814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.815776][ T5814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.904711][ T5814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.038470][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.041032][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.043598][ T8112] bridge_slave_0: entered allmulticast mode [ 105.046667][ T8112] bridge_slave_0: entered promiscuous mode [ 105.055939][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.060765][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.063193][ T8112] bridge_slave_1: entered allmulticast mode [ 105.066675][ T8112] bridge_slave_1: entered promiscuous mode [ 105.108024][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.115454][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.121442][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.124392][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.127791][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.130280][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.133927][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.199500][ T8112] team0: Port device team_slave_0 added [ 105.204798][ T8112] team0: Port device team_slave_1 added [ 105.243198][ T5814] bridge_slave_1: left allmulticast mode [ 105.247433][ T5814] bridge_slave_1: left promiscuous mode [ 105.249920][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.256732][ T5814] bridge_slave_0: left allmulticast mode [ 105.258505][ T5814] bridge_slave_0: left promiscuous mode [ 105.261029][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.366956][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.371476][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.377785][ T5814] bond0 (unregistering): Released all slaves [ 105.385714][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.388034][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.396828][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.402729][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.405881][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.415867][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.464444][ T8112] hsr_slave_0: entered promiscuous mode [ 105.467332][ T8112] hsr_slave_1: entered promiscuous mode [ 105.469630][ T8112] debugfs: 'hsr0' already exists in 'hsr' [ 105.471442][ T8112] Cannot create hsr debugfs directory [ 105.537839][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 105.537860][ T42] audit: type=1400 audit(1785407586.981:543): avc: denied { write } for pid=8182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.550511][ T42] audit: type=1400 audit(1785407586.981:544): avc: denied { create } for pid=8182 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.560420][ T42] audit: type=1400 audit(1785407586.981:545): avc: denied { write } for pid=8182 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=5372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.568977][ T42] audit: type=1400 audit(1785407586.981:546): avc: denied { append } for pid=8182 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=5372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.583269][ T42] audit: type=1400 audit(1785407587.021:547): avc: denied { write } for pid=8186 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.590130][ T42] audit: type=1400 audit(1785407587.031:548): avc: denied { unlink } for pid=8186 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=5372 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.631682][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 105.686222][ T42] audit: type=1400 audit(1785407587.131:549): avc: denied { create } for pid=8193 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 105.695579][ T42] audit: type=1400 audit(1785407587.131:550): avc: denied { bind } for pid=8193 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 105.710006][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.713393][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.718216][ T8142] bridge_slave_0: entered allmulticast mode [ 105.721947][ T8142] bridge_slave_0: entered promiscuous mode [ 105.725973][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.728337][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.730641][ T8142] bridge_slave_1: entered allmulticast mode [ 105.732177][ T42] audit: type=1400 audit(1785407587.171:551): avc: denied { write } for pid=8195 comm="syz.0.754" name="dlm" dev="configfs" ino=2099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.733328][ T8142] bridge_slave_1: entered promiscuous mode [ 105.771563][ T42] audit: type=1400 audit(1785407587.211:552): avc: denied { write } for pid=8197 comm="syz.0.755" name="functions" dev="configfs" ino=9640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.772173][ T8198] [ 105.779300][ T8198] ====================================================== [ 105.781480][ T8198] WARNING: possible circular locking dependency detected [ 105.783670][ T8198] syzkaller #0 Not tainted [ 105.785246][ T8198] ------------------------------------------------------ [ 105.787450][ T8198] syz.0.755/8198 is trying to acquire lock: [ 105.789314][ T8198] ffff8880202443c0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 105.789935][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.792877][ T8198] [ 105.792877][ T8198] but task is already holding lock: [ 105.792884][ T8198] ffff8880494bad18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 105.792914][ T8198] [ 105.792914][ T8198] which lock already depends on the new lock. [ 105.792914][ T8198] [ 105.798841][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.801383][ T8198] [ 105.801383][ T8198] the existing dependency chain (in reverse order) is: [ 105.801391][ T8198] [ 105.801391][ T8198] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 105.801411][ T8198] lock_acquire+0x1b9/0x370 [ 105.801430][ T8198] __mutex_lock+0x1a4/0x1bd0 [ 105.816485][ T8198] tcm_set_name+0x29/0xb0 [ 105.818044][ T8198] function_make+0x21c/0x3f0 [ 105.819330][ T8142] team0: Port device team_slave_0 added [ 105.819667][ T8198] configfs_mkdir+0x51e/0xb70 [ 105.819685][ T8198] vfs_mkdir+0x361/0x850 [ 105.822486][ T8142] team0: Port device team_slave_1 added [ 105.823113][ T8198] filename_mkdirat+0x48b/0x5e0 [ 105.828519][ T8198] __x64_sys_mkdir+0x6b/0x90 [ 105.830340][ T8198] do_syscall_64+0x115/0x870 [ 105.832145][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.833871][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.834166][ T8198] [ 105.834166][ T8198] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 105.836506][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.838992][ T8198] lock_acquire+0x1b9/0x370 [ 105.839010][ T8198] __mutex_lock+0x1a4/0x1bd0 [ 105.839023][ T8198] uvcg_streaming_header_allow_link+0x7c/0x650 [ 105.847906][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.849300][ T8198] configfs_symlink+0x540/0x11f0 [ 105.852015][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.853039][ T8198] vfs_symlink+0x178/0x4d0 [ 105.856447][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.858077][ T8198] filename_symlinkat+0x2a6/0x560 [ 105.858093][ T8198] __x64_sys_symlink+0x79/0xb0 [ 105.858105][ T8198] do_syscall_64+0x115/0x870 [ 105.860744][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.862611][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.882305][ T8198] [ 105.882305][ T8198] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 105.885018][ T8198] check_prev_add+0xeb/0xe60 [ 105.886621][ T8198] __lock_acquire+0x136c/0x1a40 [ 105.888312][ T8198] lock_acquire+0x1b9/0x370 [ 105.889328][ T8142] hsr_slave_0: entered promiscuous mode [ 105.889897][ T8198] down_write+0x8b/0x1f0 [ 105.892556][ T8142] hsr_slave_1: entered promiscuous mode [ 105.893376][ T8198] configfs_depend_item_unlocked+0xf3/0x6a0 [ 105.895637][ T8142] debugfs: 'hsr0' already exists in 'hsr' [ 105.897148][ T8198] usbg_make_tpg+0x261/0x620 [ 105.899007][ T8142] Cannot create hsr debugfs directory [ 105.900534][ T8198] target_fabric_make_tpg+0xab/0x8c0 [ 105.903900][ T8198] configfs_mkdir+0x51e/0xb70 [ 105.905447][ T8198] vfs_mkdir+0x361/0x850 [ 105.906926][ T8198] filename_mkdirat+0x48b/0x5e0 [ 105.908588][ T8198] __x64_sys_mkdir+0x6b/0x90 [ 105.910142][ T8198] do_syscall_64+0x115/0x870 [ 105.911712][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.913617][ T8198] [ 105.913617][ T8198] other info that might help us debug this: [ 105.913617][ T8198] [ 105.916619][ T8198] Chain exists of: [ 105.916619][ T8198] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 105.916619][ T8198] [ 105.920916][ T8198] Possible unsafe locking scenario: [ 105.920916][ T8198] [ 105.923126][ T8198] CPU0 CPU1 [ 105.924737][ T8198] ---- ---- [ 105.926332][ T8198] lock(&opts->dep_lock); [ 105.927676][ T8198] lock(gadget_subsys.su_mutex); [ 105.929932][ T8198] lock(&opts->dep_lock); [ 105.931939][ T8198] lock(&sb->s_type->i_mutex_key#24); [ 105.933576][ T8198] [ 105.933576][ T8198] *** DEADLOCK *** [ 105.933576][ T8198] [ 105.935986][ T8198] 5 locks held by syz.0.755/8198: [ 105.937510][ T8198] #0: ffff888023dde450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 105.940368][ T8198] #1: ffff888056b6c3c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 105.943581][ T8198] #2: ffffffff8fd87a68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 105.946478][ T8198] #3: ffffffff90252b60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 105.949360][ T8198] #4: ffff8880494bad18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 105.952149][ T8198] [ 105.952149][ T8198] stack backtrace: [ 105.953960][ T8198] CPU: 3 UID: 0 PID: 8198 Comm: syz.0.755 Not tainted syzkaller #0 PREEMPT(full) [ 105.953975][ T8198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.953982][ T8198] Call Trace: [ 105.953987][ T8198] [ 105.953992][ T8198] dump_stack_lvl+0x100/0x190 [ 105.954007][ T8198] print_circular_bug.cold+0x178/0x1c7 [ 105.954026][ T8198] check_noncircular+0x146/0x160 [ 105.954041][ T8198] check_prev_add+0xeb/0xe60 [ 105.954054][ T8198] __lock_acquire+0x136c/0x1a40 [ 105.954069][ T8198] ? rcu_is_watching+0x12/0xc0 [ 105.954087][ T8198] lock_acquire+0x1b9/0x370 [ 105.954100][ T8198] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 105.954116][ T8198] ? __pfx___might_resched+0x10/0x10 [ 105.954131][ T8198] down_write+0x8b/0x1f0 [ 105.954146][ T8198] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 105.954160][ T8198] ? __pfx_down_write+0x10/0x10 [ 105.954175][ T8198] configfs_depend_item_unlocked+0xf3/0x6a0 [ 105.954189][ T8198] ? __lock_acquire+0x49f/0x1a40 [ 105.954208][ T8198] usbg_make_tpg+0x261/0x620 [ 105.954221][ T8198] ? __pfx_usbg_make_tpg+0x10/0x10 [ 105.954235][ T8198] ? find_held_lock+0x2b/0x80 [ 105.954252][ T8198] ? __pfx_usbg_make_tpg+0x10/0x10 [ 105.954264][ T8198] target_fabric_make_tpg+0xab/0x8c0 [ 105.954281][ T8198] configfs_mkdir+0x51e/0xb70 [ 105.954296][ T8198] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 105.954311][ T8198] ? __pfx_configfs_mkdir+0x10/0x10 [ 105.954327][ T8198] ? inode_permission+0x374/0x620 [ 105.954343][ T8198] vfs_mkdir+0x361/0x850 [ 105.954359][ T8198] filename_mkdirat+0x48b/0x5e0 [ 105.954372][ T8198] ? __pfx_filename_mkdirat+0x10/0x10 [ 105.954384][ T8198] ? strncpy_from_user+0x19d/0x2d0 [ 105.954399][ T8198] ? do_getname+0x191/0x390 [ 105.954414][ T8198] __x64_sys_mkdir+0x6b/0x90 [ 105.954426][ T8198] do_syscall_64+0x115/0x870 [ 105.954438][ T8198] ? clear_bhb_loop+0x40/0x90 [ 105.954451][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.954463][ T8198] RIP: 0033:0x7f4844d9df99 [ 105.954473][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.954484][ T8198] RSP: 002b:00007f4845c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 105.954495][ T8198] RAX: ffffffffffffffda RBX: 00007f4845025fa0 RCX: 00007f4844d9df99 [ 105.954502][ T8198] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 105.954509][ T8198] RBP: 00007f4844e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 105.954516][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.954523][ T8198] R13: 00007f4845026038 R14: 00007f4845025fa0 R15: 00007fffb61659e8 [ 105.954533][ T8198] [ 106.061194][ T5814] hsr_slave_0: left promiscuous mode [ 106.063953][ T5814] hsr_slave_1: left promiscuous mode [ 106.065991][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.074489][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.078316][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.082161][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.087160][ T5814] veth1_macvtap: left promiscuous mode [ 106.088862][ T5814] veth0_macvtap: left promiscuous mode [ 106.090624][ T5814] veth1_vlan: left promiscuous mode [ 106.093212][ T5814] veth0_vlan: left promiscuous mode [ 106.164943][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 106.169876][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 106.206985][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 106.518196][ T5740] Bluetooth: hci0: command tx timeout [ 106.573680][ T8142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.675510][ T5740] Bluetooth: hci1: command tx timeout [ 106.680828][ T8142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.829049][ T8142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.882182][ T5814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.918720][ T8142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.979585][ T5814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.145523][ T5814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.289313][ T5814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.368635][ T5814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.440389][ T5814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.490229][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.530642][ T5814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.609164][ T5814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.618733][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 107.694081][ T5814] bridge_slave_1: left allmulticast mode [ 107.696131][ T5814] bridge_slave_1: left promiscuous mode [ 107.697986][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.700812][ T5814] bridge_slave_0: left allmulticast mode [ 107.702578][ T5814] bridge_slave_0: left promiscuous mode [ 107.704374][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.708792][ T5814] bridge_slave_1: left allmulticast mode [ 107.710695][ T5814] bridge_slave_1: left promiscuous mode [ 107.712467][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.715296][ T5814] bridge_slave_0: left allmulticast mode [ 107.718343][ T5814] bridge_slave_0: left promiscuous mode [ 107.720241][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.727743][ T5814] bridge_slave_1: left allmulticast mode [ 107.730021][ T5814] bridge_slave_1: left promiscuous mode [ 107.732315][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.738527][ T5814] bridge_slave_0: left allmulticast mode [ 107.740812][ T5814] bridge_slave_0: left promiscuous mode [ 107.743081][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.750034][ T5814] bridge_slave_1: left allmulticast mode [ 107.752329][ T5814] bridge_slave_1: left promiscuous mode [ 107.754588][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.760634][ T5814] bridge_slave_0: left allmulticast mode [ 107.762767][ T5814] bridge_slave_0: left promiscuous mode [ 107.764789][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.827070][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.831982][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.835468][ T5814] bond0 (unregistering): Released all slaves [ 107.847929][ T5814] bond0 (unregistering): Released all slaves [ 107.866864][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.872353][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.875928][ T5814] bond0 (unregistering): Released all slaves [ 107.905164][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.910102][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.914380][ T5814] bond0 (unregistering): Released all slaves [ 107.952413][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.957837][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.962053][ T5814] bond0 (unregistering): Released all slaves [ 107.967051][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 108.104038][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 108.244426][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 108.379649][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 108.504292][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 108.611397][ T5814] hsr_slave_0: left promiscuous mode [ 108.613526][ T5814] hsr_slave_1: left promiscuous mode [ 108.615996][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.619139][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.624202][ T5814] hsr_slave_0: left promiscuous mode [ 108.626771][ T5814] hsr_slave_1: left promiscuous mode [ 108.629206][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.632065][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.635421][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.638434][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.643593][ T5814] hsr_slave_0: left promiscuous mode [ 108.646129][ T5814] hsr_slave_1: left promiscuous mode [ 108.648483][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.651341][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.654659][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.659046][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.663258][ T5814] hsr_slave_0: left promiscuous mode [ 108.665152][ T5814] hsr_slave_1: left promiscuous mode [ 108.666941][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.669136][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.671562][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.673821][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.680343][ T5814] veth1_macvtap: left promiscuous mode [ 108.682021][ T5814] veth0_macvtap: left promiscuous mode [ 108.683699][ T5814] veth1_vlan: left promiscuous mode [ 108.685253][ T5814] veth0_vlan: left promiscuous mode [ 108.687715][ T5814] veth1_macvtap: left promiscuous mode [ 108.689324][ T5814] veth0_macvtap: left promiscuous mode [ 108.690964][ T5814] veth1_vlan: left promiscuous mode [ 108.692508][ T5814] veth0_vlan: left promiscuous mode [ 108.694629][ T5814] veth1_macvtap: left promiscuous mode [ 108.696799][ T5814] veth0_macvtap: left promiscuous mode [ 108.698505][ T5814] veth1_vlan: left promiscuous mode [ 108.700104][ T5814] veth0_vlan: left promiscuous mode [ 108.780145][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 108.784704][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 108.852313][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 108.856713][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 108.912858][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 108.923662][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 109.003366][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 109.009532][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 109.079966][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 110.428138][ T5814] bridge_slave_1: left allmulticast mode [ 110.430448][ T5814] bridge_slave_1: left promiscuous mode [ 110.432706][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.436510][ T5814] bridge_slave_0: left allmulticast mode [ 110.438690][ T5814] bridge_slave_0: left promiscuous mode [ 110.440954][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.465052][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.469591][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.473729][ T5814] bond0 (unregistering): Released all slaves [ 110.627544][ T5814] hsr_slave_0: left promiscuous mode [ 110.629575][ T5814] hsr_slave_1: left promiscuous mode [ 110.631361][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.633773][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.658515][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 110.664926][ T5814] team0 (unregistering): Port device team_slave_0 removed