program: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) chroot(&(0x7f0000000180)='./dbg/failslab/times\x00') sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "00000631f4e3000000001500"}}}]}, 0x48}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000680)=0x1130581, 0x4) write(r0, &(0x7f0000000140)='1000\x00', 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002700010007007000fedbdf250c000000"], 0x14}}, 0x24000004) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='1\x00', 0x1) unshare(0xa000400) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)={'#! ', './file0', [], 0xa, "14369afd9845f99c94b94f5a16b48fe862b18b5b6606"}, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bColorPrimaries\x00', 0x2, 0x0) [ 105.817518][ T5290] Bluetooth: hci0: command tx timeout [ 105.945674][ T5330] FAULT_INJECTION: forcing a failure. [ 105.945674][ T5330] name failslab, interval 1, probability 1, space 0, times 1000 [ 105.957311][ T1094] FAULT_INJECTION: forcing a failure. [ 105.957311][ T1094] name failslab, interval 1, probability 1, space 0, times 999 [ 105.963675][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 105.963689][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.963697][ T1094] Workqueue: ipv6_addrconf addrconf_dad_work [ 105.963788][ T1094] Call Trace: [ 105.963822][ T1094] [ 105.963828][ T1094] dump_stack_lvl+0xe8/0x150 [ 105.963842][ T1094] should_fail_ex+0x40c/0x560 [ 105.964031][ T1094] should_failslab+0xa8/0x100 [ 105.964047][ T1094] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 105.964056][ T1094] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 105.964063][ T1094] ? fib6_add_1+0x9fe/0x13e0 [ 105.964071][ T1094] ? fib6_add_1+0x9fe/0x13e0 [ 105.964082][ T1094] fib6_add_1+0x9fe/0x13e0 [ 105.964101][ T1094] fib6_add+0x211/0x1930 [ 105.964123][ T1094] ? __pfx_fib6_add+0x10/0x10 [ 105.964142][ T1094] ? consume_skb+0x89/0xb0 [ 105.964158][ T1094] ? ip6_ins_rt+0xc0/0x140 [ 105.964172][ T1094] ip6_ins_rt+0xd6/0x140 [ 105.964185][ T1094] ? __pfx_ip6_ins_rt+0x10/0x10 [ 105.964200][ T1094] ? nlmsg_notify+0xe3/0x1a0 [ 105.964210][ T1094] ? nlmsg_notify+0x142/0x1a0 [ 105.964223][ T1094] __ipv6_ifa_notify+0x4e8/0xc60 [ 105.964243][ T1094] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 105.964260][ T1094] ? __cancel_work+0x17f/0x230 [ 105.964274][ T1094] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.964291][ T1094] addrconf_dad_completed+0x1a1/0xe60 [ 105.964307][ T1094] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 105.964319][ T1094] ? addrconf_dad_work+0xe57/0x15c0 [ 105.964331][ T1094] ? __local_bh_enable_ip+0xd0/0x130 [ 105.964347][ T1094] addrconf_dad_work+0xcf8/0x15c0 [ 105.964365][ T1094] ? __pfx_addrconf_dad_work+0x10/0x10 [ 105.964378][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 105.964395][ T1094] ? rcu_is_watching+0x15/0xb0 [ 105.964405][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 105.964412][ T1094] process_scheduled_works+0xa8e/0x14e0 [ 105.964428][ T1094] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.964438][ T1094] ? assign_work+0x3cf/0x5d0 [ 105.964447][ T1094] worker_thread+0xa47/0xfb0 [ 105.964465][ T1094] ? __kthread_parkme+0x71/0x1f0 [ 105.964482][ T1094] kthread+0x388/0x470 [ 105.964497][ T1094] ? __pfx_worker_thread+0x10/0x10 [ 105.964508][ T1094] ? __pfx_kthread+0x10/0x10 [ 105.964522][ T1094] ret_from_fork+0x514/0xb70 [ 105.964541][ T1094] ? __pfx_ret_from_fork+0x10/0x10 [ 105.964556][ T1094] ? __switch_to+0xc89/0x1420 [ 105.964570][ T1094] ? __pfx_kthread+0x10/0x10 [ 105.964586][ T1094] ret_from_fork_asm+0x1a/0x30 [ 105.964606][ T1094] [ 105.965748][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 105.965766][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.965773][ T5330] Call Trace: [ 105.965776][ T5330] [ 105.965780][ T5330] dump_stack_lvl+0xe8/0x150 [ 105.965796][ T5330] should_fail_ex+0x40c/0x560 [ 105.965806][ T5330] should_failslab+0xa8/0x100 [ 105.965822][ T5330] __kmalloc_noprof+0xfe/0x720 [ 105.965835][ T5330] ? __register_sysctl_table+0xc02/0x1370 [ 105.965850][ T5330] ? __register_sysctl_table+0xc02/0x1370 [ 105.965870][ T5330] __register_sysctl_table+0xc02/0x1370 [ 105.965886][ T5330] setup_mq_sysctls+0x430/0x4b0 [ 105.965898][ T5330] copy_ipcs+0x47f/0x6c0 [ 105.965910][ T5330] create_new_namespaces+0x210/0x6b0 [ 105.965921][ T5330] ? security_capable+0x7e/0x2c0 [ 105.965934][ T5330] unshare_nsproxy_namespaces+0x149/0x190 [ 105.965943][ T5330] ksys_unshare+0x57d/0xa00 [ 105.965955][ T5330] ? __pfx_ksys_unshare+0x10/0x10 [ 105.965966][ T5330] ? rcu_is_watching+0x15/0xb0 [ 105.965976][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.965984][ T5330] __x64_sys_unshare+0x38/0x50 [ 105.965996][ T5330] do_syscall_64+0x174/0x580 [ 105.966009][ T5330] ? clear_bhb_loop+0x40/0x90 [ 105.966020][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.966032][ T5330] RIP: 0033:0x7f01b719df99 [ 105.966044][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.966053][ T5330] RSP: 002b:00007f01b8010fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.966065][ T5330] RAX: ffffffffffffffda RBX: 00007f01b7425fa0 RCX: 00007f01b719df99 [ 105.966094][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 105.966101][ T5330] RBP: 00007f01b7234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 105.966107][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.966112][ T5330] R13: 00007f01b7426038 R14: 00007f01b7425fa0 R15: 00007ffde61fcd18 [ 105.966123][ T5330] [ 105.966167][ T5330] sysctl could not get directory: /fs -12 [ 106.170074][ T1094] FAULT_INJECTION: forcing a failure. [ 106.170074][ T1094] name failslab, interval 1, probability 1, space 0, times 997 [ 106.177195][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 106.177214][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.177222][ T1094] Workqueue: ipv6_addrconf addrconf_dad_work [ 106.177246][ T1094] Call Trace: [ 106.177254][ T1094] [ 106.177260][ T1094] dump_stack_lvl+0xe8/0x150 [ 106.177280][ T1094] should_fail_ex+0x40c/0x560 [ 106.177298][ T1094] should_failslab+0xa8/0x100 [ 106.177316][ T1094] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 106.177330][ T1094] ? local_lock_release+0x9c/0x160 [ 106.177347][ T1094] ? __alloc_skb+0x1d7/0x7a0 [ 106.177361][ T1094] ? __alloc_skb+0x1d7/0x7a0 [ 106.177380][ T1094] __alloc_skb+0x1d7/0x7a0 [ 106.177398][ T1094] ? inet6_rt_notify+0xb4/0x470 [ 106.177414][ T1094] inet6_rt_notify+0x170/0x470 [ 106.177435][ T1094] fib6_add_rt2node+0x1858/0x3940 [ 106.177470][ T1094] ? trace_kmem_cache_alloc+0x29/0xe0 [ 106.177484][ T1094] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 106.177497][ T1094] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 106.177507][ T1094] ? fib6_add_1+0x9fe/0x13e0 [ 106.177521][ T1094] ? fib6_add_1+0x9fe/0x13e0 [ 106.177535][ T1094] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 106.177552][ T1094] ? fib6_add_1+0x101f/0x13e0 [ 106.177575][ T1094] fib6_add+0x952/0x1930 [ 106.177596][ T1094] ? __pfx_fib6_add+0x10/0x10 [ 106.177612][ T1094] ? consume_skb+0x89/0xb0 [ 106.177631][ T1094] ? ip6_ins_rt+0xc0/0x140 [ 106.177647][ T1094] ip6_ins_rt+0xd6/0x140 [ 106.177660][ T1094] ? __pfx_ip6_ins_rt+0x10/0x10 [ 106.177677][ T1094] ? nlmsg_notify+0xe3/0x1a0 [ 106.177689][ T1094] ? nlmsg_notify+0x142/0x1a0 [ 106.177701][ T1094] __ipv6_ifa_notify+0x4e8/0xc60 [ 106.177723][ T1094] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 106.177741][ T1094] ? __cancel_work+0x17f/0x230 [ 106.177757][ T1094] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.177776][ T1094] addrconf_dad_completed+0x1a1/0xe60 [ 106.177795][ T1094] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 106.177807][ T1094] ? addrconf_dad_work+0xe57/0x15c0 [ 106.177822][ T1094] ? __local_bh_enable_ip+0xd0/0x130 [ 106.177836][ T1094] addrconf_dad_work+0xcf8/0x15c0 [ 106.177853][ T1094] ? __pfx_addrconf_dad_work+0x10/0x10 [ 106.177866][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 106.177882][ T1094] ? rcu_is_watching+0x15/0xb0 [ 106.177895][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 106.177908][ T1094] process_scheduled_works+0xa8e/0x14e0 [ 106.177941][ T1094] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.177956][ T1094] ? assign_work+0x3cf/0x5d0 [ 106.177971][ T1094] worker_thread+0xa47/0xfb0 [ 106.177992][ T1094] ? __kthread_parkme+0x71/0x1f0 [ 106.178012][ T1094] kthread+0x388/0x470 [ 106.178029][ T1094] ? __pfx_worker_thread+0x10/0x10 [ 106.178041][ T1094] ? __pfx_kthread+0x10/0x10 [ 106.178057][ T1094] ret_from_fork+0x514/0xb70 [ 106.178077][ T1094] ? __pfx_ret_from_fork+0x10/0x10 [ 106.178092][ T1094] ? __switch_to+0xc89/0x1420 [ 106.178109][ T1094] ? __pfx_kthread+0x10/0x10 [ 106.178125][ T1094] ret_from_fork_asm+0x1a/0x30 [ 106.178146][ T1094] [ 106.308152][ T4692] FAULT_INJECTION: forcing a failure. [ 106.308152][ T4692] name failslab, interval 1, probability 1, space 0, times 994 [ 106.313843][ T4692] CPU: 0 UID: 0 PID: 4692 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 106.313861][ T4692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.313867][ T4692] Call Trace: [ 106.313872][ T4692] [ 106.313877][ T4692] dump_stack_lvl+0xe8/0x150 [ 106.313899][ T4692] should_fail_ex+0x40c/0x560 [ 106.313914][ T4692] should_failslab+0xa8/0x100 [ 106.313930][ T4692] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 106.313943][ T4692] ? local_lock_release+0x9c/0x160 [ 106.313959][ T4692] ? __alloc_skb+0x1d7/0x7a0 [ 106.313972][ T4692] ? __alloc_skb+0x1d7/0x7a0 [ 106.313989][ T4692] __alloc_skb+0x1d7/0x7a0 [ 106.314005][ T4692] alloc_skb_with_frags+0xc6/0x760 [ 106.314027][ T4692] sock_alloc_send_pskb+0x878/0x990 [ 106.314052][ T4692] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 106.314066][ T4692] ? sock_def_readable+0xae/0x550 [ 106.314082][ T4692] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 106.314096][ T4692] unix_dgram_sendmsg+0x4fe/0x1870 [ 106.314113][ T4692] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 106.314125][ T4692] ? aa_sock_msg_perm+0xda/0x1b0 [ 106.314144][ T4692] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 106.314155][ T4692] sock_sendmsg_nosec+0x13a/0x180 [ 106.314171][ T4692] __sys_sendto+0x408/0x5a0 [ 106.314186][ T4692] ? bpf_lsm_capable+0x9/0x20 [ 106.314222][ T4692] ? __pfx___sys_sendto+0x10/0x10 [ 106.314241][ T4692] ? ktime_get+0x1f5/0x220 [ 106.314262][ T4692] ? rcu_is_watching+0x15/0xb0 [ 106.314276][ T4692] __x64_sys_sendto+0xde/0x100 [ 106.314291][ T4692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.314303][ T4692] do_syscall_64+0x174/0x580 [ 106.314316][ T4692] ? clear_bhb_loop+0x40/0x90 [ 106.314328][ T4692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.314338][ T4692] RIP: 0033:0x7fc554eba407 [ 106.314349][ T4692] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.314357][ T4692] RSP: 002b:00007ffe54460d60 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 106.314369][ T4692] RAX: ffffffffffffffda RBX: 00007fc554d6ac80 RCX: 00007fc554eba407 [ 106.314376][ T4692] RDX: 000000000000004c RSI: 00007ffe54460ea0 RDI: 0000000000000003 [ 106.314383][ T4692] RBP: 00007ffe544612d0 R08: 0000000000000000 R09: 0000000000000000 [ 106.314389][ T4692] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe544612e8 [ 106.314396][ T4692] R13: 00007ffe54460ea0 R14: 0000000000000031 R15: 00007ffe54460ea0 [ 106.314413][ T4692] [ 106.317362][ T4692] FAULT_INJECTION: forcing a failure. [ 106.317362][ T4692] name failslab, interval 1, probability 1, space 0, times 993 [ 106.377808][ C0] FAULT_INJECTION: forcing a failure. [ 106.377808][ C0] name failslab, interval 1, probability 1, space 0, times 993 [ 106.377882][ C0] CPU: 0 UID: 0 PID: 4692 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 106.377894][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.377900][ C0] Call Trace: [ 106.377905][ C0] [ 106.377909][ C0] dump_stack_lvl+0xe8/0x150 [ 106.377929][ C0] should_fail_ex+0x40c/0x560 [ 106.377944][ C0] should_failslab+0xa8/0x100 [ 106.377959][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 106.377971][ C0] ? local_lock_release+0x9c/0x160 [ 106.377987][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 106.378000][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 106.378012][ C0] __alloc_skb+0x1d7/0x7a0 [ 106.378025][ C0] skb_copy+0x19d/0x870 [ 106.378037][ C0] ? kvm_clock_get_cycles+0x47/0x60 [ 106.378054][ C0] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 106.378079][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 106.378105][ C0] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 106.378124][ C0] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 106.378140][ C0] mac80211_hwsim_beacon_tx+0x396/0x820 [ 106.378152][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 106.378171][ C0] __iterate_interfaces+0x2af/0x5a0 [ 106.378185][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.378194][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 106.378211][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 106.378220][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 106.378235][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 106.378251][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 106.378264][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 106.378278][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 106.378301][ C0] hrtimer_run_softirq+0x17a/0x240 [ 106.378316][ C0] handle_softirqs+0x225/0x840 [ 106.378329][ C0] ? __irq_exit_rcu+0xca/0x220 [ 106.378343][ C0] __irq_exit_rcu+0xca/0x220 [ 106.378356][ C0] irq_exit_rcu+0x9/0x30 [ 106.378366][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 106.378377][ C0] [ 106.378380][ C0] [ 106.378385][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.378395][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 106.378409][ C0] Code: ff ff e8 81 3f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 73 3f 21 00 e8 3e 20 2d 0a 48 85 db 74 c0 e8 64 3f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 16 70 [ 106.378417][ C0] RSP: 0018:ffffc900025c73a0 EFLAGS: 00000293 [ 106.378429][ C0] RAX: ffffffff81a5e4ec RBX: ffffc900025c7500 RCX: ffff88801d3cca80 [ 106.378461][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.378469][ C0] RBP: ffffc900025c74b0 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 106.378477][ C0] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 106.378484][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f471c60 [ 106.378495][ C0] ? console_flush_all+0x7cc/0xaf0 [ 106.378510][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.378524][ C0] ? console_flush_all+0x123/0xaf0 [ 106.378538][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 106.378553][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 106.378568][ C0] console_unlock+0xd1/0x1c0 [ 106.378581][ C0] ? __pfx_console_unlock+0x10/0x10 [ 106.378592][ C0] ? _printk+0xdd/0x130 [ 106.378606][ C0] vprintk_emit+0x485/0x560 [ 106.378617][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 106.378631][ C0] _printk+0xdd/0x130 [ 106.378644][ C0] ? __pfx__printk+0x10/0x10 [ 106.378653][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 106.378665][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 106.378676][ C0] should_fail_ex+0x3ed/0x560 [ 106.378688][ C0] should_failslab+0xa8/0x100 [ 106.378700][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 106.378710][ C0] ? local_lock_release+0x9c/0x160 [ 106.378722][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 106.378732][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 106.378746][ C0] __alloc_skb+0x1d7/0x7a0 [ 106.378762][ C0] alloc_skb_with_frags+0xc6/0x760 [ 106.378775][ C0] ? __lock_acquire+0x683/0x2cf0 [ 106.378795][ C0] sock_alloc_send_pskb+0x878/0x990 [ 106.378817][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 106.378831][ C0] ? sock_def_readable+0xae/0x550 [ 106.378844][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 106.378852][ C0] unix_dgram_sendmsg+0x4fe/0x1870 [ 106.378873][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 106.378888][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 106.378906][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 106.378918][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 106.378931][ C0] __sys_sendto+0x408/0x5a0 [ 106.378944][ C0] ? bpf_lsm_capable+0x9/0x20 [ 106.378957][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 106.378976][ C0] ? __pfx___sys_connect+0x10/0x10 [ 106.378996][ C0] ? rcu_is_watching+0x15/0xb0 [ 106.379010][ C0] __x64_sys_sendto+0xde/0x100 [ 106.379024][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.379035][ C0] do_syscall_64+0x174/0x580 [ 106.379047][ C0] ? trace_irq_disable+0x3b/0x140 [ 106.379061][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.379074][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.379084][ C0] RIP: 0033:0x7fc554eba407 [ 106.379102][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.379109][ C0] RSP: 002b:00007ffe54460d60 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 106.379120][ C0] RAX: ffffffffffffffda RBX: 00007fc554d6ac80 RCX: 00007fc554eba407 [ 106.379127][ C0] RDX: 000000000000003d RSI: 00007ffe54460ea0 RDI: 0000000000000003 [ 106.379133][ C0] RBP: 00007ffe544612d0 R08: 0000000000000000 R09: 0000000000000000 [ 106.379146][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe544612e8 [ 106.379152][ C0] R13: 00007ffe54460ea0 R14: 0000000000000022 R15: 00007ffe54460ea0 [ 106.379170][ C0] [ 106.420280][ C0] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 106.578777][ C0] FAULT_INJECTION: forcing a failure. [ 106.578777][ C0] name failslab, interval 1, probability 1, space 0, times 991 [ 106.578806][ C0] CPU: 0 UID: 0 PID: 4692 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 106.578819][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.578827][ C0] Call Trace: [ 106.578832][ C0] [ 106.578837][ C0] dump_stack_lvl+0xe8/0x150 [ 106.578862][ C0] should_fail_ex+0x40c/0x560 [ 106.578881][ C0] should_failslab+0xa8/0x100 [ 106.578898][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 106.578912][ C0] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 106.578927][ C0] ? dst_alloc+0x105/0x170 [ 106.578942][ C0] ? dst_alloc+0x105/0x170 [ 106.578957][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 106.578970][ C0] dst_alloc+0x105/0x170 [ 106.578987][ C0] icmp6_dst_alloc+0x72/0x430 [ 106.579006][ C0] ndisc_send_skb+0x42f/0x1650 [ 106.579019][ C0] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 106.579033][ C0] ? rcu_is_watching+0x15/0xb0 [ 106.579046][ C0] ? ndisc_send_skb+0x203/0x1650 [ 106.579064][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 106.579077][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 106.579105][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 106.579123][ C0] ? call_timer_fn+0xd4/0x5e0 [ 106.579133][ C0] ? lock_acquire+0x106/0x350 [ 106.579152][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 106.579169][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.579189][ C0] call_timer_fn+0x192/0x5e0 [ 106.579200][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 106.579215][ C0] ? call_timer_fn+0xd4/0x5e0 [ 106.579226][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 106.579244][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.579262][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 106.579279][ C0] __run_timer_base+0x652/0x8b0 [ 106.579295][ C0] ? ktime_get+0x45/0x220 [ 106.579317][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 106.579336][ C0] ? ktime_get+0x1f5/0x220 [ 106.579352][ C0] ? lapic_next_event+0x11/0x20 [ 106.579369][ C0] run_timer_softirq+0xb7/0x170 [ 106.579386][ C0] handle_softirqs+0x225/0x840 [ 106.579404][ C0] ? __irq_exit_rcu+0xca/0x220 [ 106.579422][ C0] __irq_exit_rcu+0xca/0x220 [ 106.579437][ C0] irq_exit_rcu+0x9/0x30 [ 106.579450][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 106.579462][ C0] [ 106.579474][ C0] [ 106.579478][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.579493][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 106.579507][ C0] Code: ff ff e8 81 3f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 73 3f 21 00 e8 3e 20 2d 0a 48 85 db 74 c0 e8 64 3f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 16 70 [ 106.579516][ C0] RSP: 0018:ffffc900025c73a0 EFLAGS: 00000293 [ 106.579527][ C0] RAX: ffffffff81a5e4ec RBX: ffffc900025c7500 RCX: ffff88801d3cca80 [ 106.579534][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.579541][ C0] RBP: ffffc900025c74b0 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 106.579548][ C0] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 106.579556][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f471c60 [ 106.579567][ C0] ? console_flush_all+0x7cc/0xaf0 [ 106.579582][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.579595][ C0] ? console_flush_all+0x123/0xaf0 [ 106.579611][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 106.579626][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 106.579644][ C0] console_unlock+0xd1/0x1c0 [ 106.579658][ C0] ? __pfx_console_unlock+0x10/0x10 [ 106.579671][ C0] ? _printk+0xdd/0x130 [ 106.579689][ C0] vprintk_emit+0x485/0x560 [ 106.579704][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 106.579724][ C0] _printk+0xdd/0x130 [ 106.579738][ C0] ? __pfx__printk+0x10/0x10 [ 106.579751][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 106.579766][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 106.579810][ C0] should_fail_ex+0x3ed/0x560 [ 106.579825][ C0] should_failslab+0xa8/0x100 [ 106.579838][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 106.579848][ C0] ? local_lock_release+0x9c/0x160 [ 106.579865][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 106.579876][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 106.579894][ C0] __alloc_skb+0x1d7/0x7a0 [ 106.579910][ C0] alloc_skb_with_frags+0xc6/0x760 [ 106.579927][ C0] ? __lock_acquire+0x683/0x2cf0 [ 106.579946][ C0] sock_alloc_send_pskb+0x878/0x990 [ 106.579969][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 106.579983][ C0] ? sock_def_readable+0xae/0x550 [ 106.580000][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 106.580014][ C0] unix_dgram_sendmsg+0x4fe/0x1870 [ 106.580039][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 106.580054][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 106.580072][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 106.580082][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 106.580098][ C0] __sys_sendto+0x408/0x5a0 [ 106.580112][ C0] ? bpf_lsm_capable+0x9/0x20 [ 106.580125][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 106.580146][ C0] ? __pfx___sys_connect+0x10/0x10 [ 106.580168][ C0] ? rcu_is_watching+0x15/0xb0 [ 106.580183][ C0] __x64_sys_sendto+0xde/0x100 [ 106.580197][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.580208][ C0] do_syscall_64+0x174/0x580 [ 106.580219][ C0] ? trace_irq_disable+0x3b/0x140 [ 106.580232][ C0] ? clear_bhb_loop+0x40/0x90 [ 106.580245][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.580256][ C0] RIP: 0033:0x7fc554eba407 [ 106.580268][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.580275][ C0] RSP: 002b:00007ffe54460d60 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 106.580286][ C0] RAX: ffffffffffffffda RBX: 00007fc554d6ac80 RCX: 00007fc554eba407 [ 106.580293][ C0] RDX: 000000000000003d RSI: 00007ffe54460ea0 RDI: 0000000000000003 [ 106.580301][ C0] RBP: 00007ffe544612d0 R08: 0000000000000000 R09: 0000000000000000 [ 106.580307][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe544612e8 [ 106.580313][ C0] R13: 00007ffe54460ea0 R14: 0000000000000022 R15: 00007ffe54460ea0 [ 106.580330][ C0] [ 106.992407][ T5331] FAULT_INJECTION: forcing a failure. [ 106.992407][ T5331] name failslab, interval 1, probability 1, space 0, times 990 [ 107.001315][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.001335][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.001342][ T5331] Call Trace: [ 107.001347][ T5331] [ 107.001353][ T5331] dump_stack_lvl+0xe8/0x150 [ 107.001377][ T5331] should_fail_ex+0x40c/0x560 [ 107.001395][ T5331] should_failslab+0xa8/0x100 [ 107.001413][ T5331] __kmalloc_noprof+0xfe/0x720 [ 107.001425][ T5331] ? rcu_is_watching+0x15/0xb0 [ 107.001435][ T5331] ? tomoyo_realpath_from_path+0xef/0x640 [ 107.001443][ T5331] ? tomoyo_realpath_from_path+0xef/0x640 [ 107.001453][ T5331] tomoyo_realpath_from_path+0xef/0x640 [ 107.001469][ T5331] ? tomoyo_path_number_perm+0x219/0x5f0 [ 107.001483][ T5331] tomoyo_path_number_perm+0x246/0x5f0 [ 107.001498][ T5331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.001534][ T5331] ? __pfx_current_check_access_path+0x10/0x10 [ 107.001552][ T5331] ? d_splice_alias_ops+0x119/0x440 [ 107.001567][ T5331] ? d_splice_alias+0x12/0x30 [ 107.001608][ T5331] ? lookup_one_qstr_excl+0x1d4/0x360 [ 107.001628][ T5331] tomoyo_path_mkdir+0xb0/0xf0 [ 107.001642][ T5331] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 107.001656][ T5331] ? __pfx_filename_create+0x10/0x10 [ 107.001674][ T5331] security_path_mkdir+0x169/0x350 [ 107.001693][ T5331] filename_mkdirat+0x200/0x510 [ 107.001718][ T5331] ? __pfx_filename_mkdirat+0x10/0x10 [ 107.001736][ T5331] ? do_getname+0x151/0x250 [ 107.001747][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.001758][ T5331] __se_sys_mkdirat+0x35/0x150 [ 107.001774][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.001787][ T5331] do_syscall_64+0x174/0x580 [ 107.001799][ T5331] ? trace_irq_disable+0x3b/0x140 [ 107.001815][ T5331] ? clear_bhb_loop+0x40/0x90 [ 107.001831][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.001842][ T5331] RIP: 0033:0x7f01b719df99 [ 107.001855][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.001863][ T5331] RSP: 002b:00007f01b7feffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 107.001876][ T5331] RAX: ffffffffffffffda RBX: 00007f01b7426090 RCX: 00007f01b719df99 [ 107.001883][ T5331] RDX: 00000000000001ff RSI: 0000200000000800 RDI: ffffffffffffff9c [ 107.001890][ T5331] RBP: 00007f01b7234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 107.001897][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.001903][ T5331] R13: 00007f01b7426128 R14: 00007f01b7426090 R15: 00007ffde61fcd18 [ 107.001923][ T5331] [ 107.002167][ T5331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.120905][ T1094] FAULT_INJECTION: forcing a failure. [ 107.120905][ T1094] name failslab, interval 1, probability 1, space 0, times 989 [ 107.130777][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 107.130797][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.130805][ T1094] Workqueue: ipv6_addrconf addrconf_dad_work [ 107.130825][ T1094] Call Trace: [ 107.130830][ T1094] [ 107.130835][ T1094] dump_stack_lvl+0xe8/0x150 [ 107.130852][ T1094] should_fail_ex+0x40c/0x560 [ 107.130868][ T1094] should_failslab+0xa8/0x100 [ 107.130883][ T1094] __kmalloc_cache_noprof+0xa8/0x660 [ 107.130898][ T1094] ? dst_cow_metrics_generic+0x56/0x1c0 [ 107.130911][ T1094] ? dst_cow_metrics_generic+0x56/0x1c0 [ 107.130927][ T1094] dst_cow_metrics_generic+0x56/0x1c0 [ 107.130941][ T1094] icmp6_dst_alloc+0x265/0x430 [ 107.130959][ T1094] mld_sendpack+0x697/0xe10 [ 107.130983][ T1094] ? mld_sendpack+0x206/0xe10 [ 107.130995][ T1094] ? __pfx_mld_sendpack+0x10/0x10 [ 107.131019][ T1094] ? mld_send_initial_cr+0x352/0x550 [ 107.131034][ T1094] ipv6_mc_dad_complete+0x87/0x410 [ 107.131050][ T1094] addrconf_dad_completed+0x8af/0xe60 [ 107.131068][ T1094] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 107.131080][ T1094] ? addrconf_dad_work+0xe57/0x15c0 [ 107.131095][ T1094] ? __local_bh_enable_ip+0xd0/0x130 [ 107.131139][ T1094] addrconf_dad_work+0xcf8/0x15c0 [ 107.131159][ T1094] ? __pfx_addrconf_dad_work+0x10/0x10 [ 107.131171][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 107.131189][ T1094] ? rcu_is_watching+0x15/0xb0 [ 107.131202][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 107.131214][ T1094] process_scheduled_works+0xa8e/0x14e0 [ 107.131244][ T1094] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.131259][ T1094] ? assign_work+0x3cf/0x5d0 [ 107.131274][ T1094] worker_thread+0xa47/0xfb0 [ 107.131296][ T1094] ? __kthread_parkme+0x71/0x1f0 [ 107.131315][ T1094] kthread+0x388/0x470 [ 107.131330][ T1094] ? __pfx_worker_thread+0x10/0x10 [ 107.131342][ T1094] ? __pfx_kthread+0x10/0x10 [ 107.131358][ T1094] ret_from_fork+0x514/0xb70 [ 107.131377][ T1094] ? __pfx_ret_from_fork+0x10/0x10 [ 107.131392][ T1094] ? __switch_to+0xc89/0x1420 [ 107.131407][ T1094] ? __pfx_kthread+0x10/0x10 [ 107.131422][ T1094] ret_from_fork_asm+0x1a/0x30 [ 107.131443][ T1094] [ 107.252525][ T5331] FAULT_INJECTION: forcing a failure. [ 107.252525][ T5331] name failslab, interval 1, probability 1, space 0, times 985 [ 107.262316][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.262337][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.262344][ T5331] Call Trace: [ 107.262350][ T5331] [ 107.262356][ T5331] dump_stack_lvl+0xe8/0x150 [ 107.262379][ T5331] should_fail_ex+0x40c/0x560 [ 107.262398][ T5331] should_failslab+0xa8/0x100 [ 107.262416][ T5331] __kmalloc_cache_noprof+0xa8/0x660 [ 107.262431][ T5331] ? uvcg_config_create_children+0x114/0x280 [ 107.262444][ T5331] ? uvcg_config_create_children+0x114/0x280 [ 107.262461][ T5331] uvcg_config_create_children+0x114/0x280 [ 107.262481][ T5331] uvcg_attach_configfs+0x33/0x60 [ 107.262503][ T5331] uvc_alloc_inst+0x6f9/0xa90 [ 107.262544][ T5331] usb_get_function_instance+0xe3/0x2f0 [ 107.262560][ T5331] function_make+0x127/0x360 [ 107.262573][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 107.262587][ T5331] ? __pfx_function_make+0x10/0x10 [ 107.262598][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.262616][ T5331] ? do_raw_spin_unlock+0x4d/0x210 [ 107.262632][ T5331] configfs_mkdir+0x4f6/0x9e0 [ 107.262649][ T5331] ? d_splice_alias+0x12/0x30 [ 107.262667][ T5331] ? __pfx_configfs_mkdir+0x10/0x10 [ 107.262681][ T5331] ? generic_permission+0x2bf/0x670 [ 107.262700][ T5331] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 107.262718][ T5331] vfs_mkdir+0x406/0x620 [ 107.262739][ T5331] filename_mkdirat+0x285/0x510 [ 107.262759][ T5331] ? __pfx_filename_mkdirat+0x10/0x10 [ 107.262777][ T5331] ? do_getname+0x151/0x250 [ 107.262789][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.262800][ T5331] __se_sys_mkdirat+0x35/0x150 [ 107.262816][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.262827][ T5331] do_syscall_64+0x174/0x580 [ 107.262839][ T5331] ? trace_irq_disable+0x3b/0x140 [ 107.262854][ T5331] ? clear_bhb_loop+0x40/0x90 [ 107.262868][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.262879][ T5331] RIP: 0033:0x7f01b719df99 [ 107.262891][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.262901][ T5331] RSP: 002b:00007f01b7feffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 107.262914][ T5331] RAX: ffffffffffffffda RBX: 00007f01b7426090 RCX: 00007f01b719df99 [ 107.262919][ T5331] RDX: 00000000000001ff RSI: 0000200000000800 RDI: ffffffffffffff9c [ 107.262926][ T5331] RBP: 00007f01b7234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 107.262933][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.262940][ T5331] R13: 00007f01b7426128 R14: 00007f01b7426090 R15: 00007ffde61fcd18 [ 107.262957][ T5331] [ 107.263245][ T5331] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 107.380074][ T5331] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 107.384071][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 107.388097][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.392502][ T5331] RIP: 0010:usb_put_function_instance+0x54/0xb0 [ 107.395250][ T5331] Code: 8d b3 98 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ea 1b 7f fa 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 cd 1b 7f fa 4d 8b 36 48 8d bb a8 [ 107.403191][ T5331] RSP: 0018:ffffc9000f107a50 EFLAGS: 00010202 [ 107.405659][ T5331] RAX: 0000000000000001 RBX: ffff888013651000 RCX: 0000000000100000 [ 107.408882][ T5331] RDX: ffffc90020001000 RSI: 000000000001c3f0 RDI: 000000000001c3f1 [ 107.412106][ T5331] RBP: 1ffff110026ca200 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 107.415431][ T5331] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 107.419022][ T5331] R13: dffffc0000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 107.422323][ T5331] FS: 00007f01b7ff06c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 107.426173][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.429153][ T5331] CR2: 00007f01b7fcefe8 CR3: 0000000045413000 CR4: 0000000000352ef0 [ 107.432544][ T5331] Call Trace: [ 107.434003][ T5331] [ 107.435326][ T5331] ? __pfx_uvc_func_item_release+0x10/0x10 [ 107.437971][ T5331] config_item_release+0x13a/0x2d0 [ 107.440162][ T5331] uvcg_attach_configfs+0x56/0x60 [ 107.442278][ T5331] uvc_alloc_inst+0x6f9/0xa90 [ 107.444354][ T5331] usb_get_function_instance+0xe3/0x2f0 [ 107.446843][ T5331] function_make+0x127/0x360 [ 107.448931][ T5331] ? __pfx___mutex_lock+0x10/0x10 [ 107.451183][ T5331] ? __pfx_function_make+0x10/0x10 [ 107.453411][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.455592][ T5331] ? do_raw_spin_unlock+0x4d/0x210 [ 107.457869][ T5331] configfs_mkdir+0x4f6/0x9e0 [ 107.459779][ T5331] ? d_splice_alias+0x12/0x30 [ 107.461755][ T5331] ? __pfx_configfs_mkdir+0x10/0x10 [ 107.464102][ T5331] ? generic_permission+0x2bf/0x670 [ 107.466425][ T5331] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 107.468731][ T5331] vfs_mkdir+0x406/0x620 [ 107.470581][ T5331] filename_mkdirat+0x285/0x510 [ 107.472797][ T5331] ? __pfx_filename_mkdirat+0x10/0x10 [ 107.475107][ T5331] ? do_getname+0x151/0x250 [ 107.477199][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.479780][ T5331] __se_sys_mkdirat+0x35/0x150 [ 107.481826][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.484483][ T5331] do_syscall_64+0x174/0x580 [ 107.486456][ T5331] ? trace_irq_disable+0x3b/0x140 [ 107.488783][ T5331] ? clear_bhb_loop+0x40/0x90 [ 107.491023][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.493685][ T5331] RIP: 0033:0x7f01b719df99 [ 107.495658][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.503803][ T5331] RSP: 002b:00007f01b7feffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 107.507356][ T5331] RAX: ffffffffffffffda RBX: 00007f01b7426090 RCX: 00007f01b719df99 [ 107.510604][ T5331] RDX: 00000000000001ff RSI: 0000200000000800 RDI: ffffffffffffff9c [ 107.514071][ T5331] RBP: 00007f01b7234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 107.517554][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.521039][ T5331] R13: 00007f01b7426128 R14: 00007f01b7426090 R15: 00007ffde61fcd18 [ 107.524398][ T5331] [ 107.525687][ T5331] Modules linked in: [ 107.529123][ T5331] ---[ end trace 0000000000000000 ]--- [ 107.532311][ T4703] FAULT_INJECTION: forcing a failure. [ 107.532311][ T4703] name failslab, interval 1, probability 1, space 0, times 984 [ 107.538019][ T1094] FAULT_INJECTION: forcing a failure. [ 107.538019][ T1094] name failslab, interval 1, probability 1, space 0, times 984 [ 107.546656][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: udevd Tainted: G D syzkaller #0 PREEMPT(full) [ 107.546677][ T4703] Tainted: [D]=DIE [ 107.546680][ T4703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.546686][ T4703] Call Trace: [ 107.546691][ T4703] [ 107.546699][ T4703] dump_stack_lvl+0xe8/0x150 [ 107.546718][ T4703] should_fail_ex+0x40c/0x560 [ 107.546731][ T4703] should_failslab+0xa8/0x100 [ 107.546745][ T4703] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 107.546756][ T4703] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 107.546772][ T4703] ? alloc_task_exec_state+0x27/0x2e0 [ 107.546787][ T4703] ? alloc_task_exec_state+0x27/0x2e0 [ 107.546802][ T4703] alloc_task_exec_state+0x27/0x2e0 [ 107.546816][ T4703] task_exec_state_copy+0x6d/0x120 [ 107.546830][ T4703] copy_process+0x838/0x4390 [ 107.546841][ T4703] ? filemap_map_pages+0x1d8/0x2090 [ 107.546855][ T4703] ? __pfx___css_rstat_updated+0x10/0x10 [ 107.546869][ T4703] ? count_memcg_event_mm+0x21/0x260 [ 107.546884][ T4703] ? rcu_is_watching+0x15/0xb0 [ 107.546893][ T4703] ? count_memcg_event_mm+0x21/0x260 [ 107.546907][ T4703] ? __pfx_copy_process+0x10/0x10 [ 107.546917][ T4703] ? rcu_is_watching+0x15/0xb0 [ 107.546928][ T4703] kernel_clone+0x2d7/0x940 [ 107.546942][ T4703] ? __pfx_kernel_clone+0x10/0x10 [ 107.546958][ T4703] __x64_sys_clone+0x1b6/0x230 [ 107.546970][ T4703] ? __might_fault+0xcb/0x130 [ 107.546979][ T4703] ? __pfx___x64_sys_clone+0x10/0x10 [ 107.546996][ T4703] ? do_user_addr_fault+0xc4a/0x1340 [ 107.547011][ T4703] ? rcu_is_watching+0x15/0xb0 [ 107.547020][ T4703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.547031][ T4703] do_syscall_64+0x174/0x580 [ 107.547041][ T4703] ? trace_irq_disable+0x3b/0x140 [ 107.547058][ T4703] ? clear_bhb_loop+0x40/0x90 [ 107.547069][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.547078][ T4703] RIP: 0033:0x7f71378f1636 [ 107.547088][ T4703] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 107.547096][ T4703] RSP: 002b:00007fff64619130 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 107.547109][ T4703] RAX: ffffffffffffffda RBX: 00007fff64619138 RCX: 00007f71378f1636 [ 107.547123][ T4703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 107.547129][ T4703] RBP: 0000564f6b7fe910 R08: 0000000000000000 R09: 0000564f6b806a10 [ 107.547135][ T4703] R10: 00007f7137f41b50 R11: 0000000000000246 R12: 00007fff646194f0 [ 107.547141][ T4703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.547151][ T4703] [ 107.547247][ T4703] udevd[4703]: fork of child failed: Cannot allocate memory [ 107.662396][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u4:9 Tainted: G D syzkaller #0 PREEMPT(full) [ 107.662410][ T1094] Tainted: [D]=DIE [ 107.662413][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.662418][ T1094] Workqueue: events_unbound cfg80211_wiphy_work [ 107.662434][ T1094] Call Trace: [ 107.662439][ T1094] [ 107.662443][ T1094] dump_stack_lvl+0xe8/0x150 [ 107.662455][ T1094] should_fail_ex+0x40c/0x560 [ 107.662464][ T1094] should_failslab+0xa8/0x100 [ 107.662473][ T1094] __kmalloc_noprof+0xfe/0x720 [ 107.662482][ T1094] ? cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 107.662492][ T1094] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 107.662500][ T1094] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 107.662509][ T1094] cfg80211_inform_single_bss_data+0x990/0x1be0 [ 107.662518][ T1094] ? rcu_is_watching+0x15/0xb0 [ 107.662525][ T1094] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 107.662537][ T1094] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 107.662548][ T1094] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 107.662556][ T1094] cfg80211_inform_bss_data+0x25b/0x3d50 [ 107.662567][ T1094] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 107.662582][ T1094] ? cfg80211_defragment_element+0x3e/0x360 [ 107.662591][ T1094] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 107.662601][ T1094] ieee80211_bss_info_update+0x791/0xa50 [ 107.662610][ T1094] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 107.662619][ T1094] ? sta_info_get+0x4f/0x300 [ 107.662630][ T1094] ? rcu_is_watching+0x15/0xb0 [ 107.662640][ T1094] ? lock_release+0x4b/0x3c0 [ 107.662653][ T1094] ? ieee80211_mandatory_rates+0x1b9/0x230 [ 107.662665][ T1094] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 107.662677][ T1094] ? rcu_is_watching+0x15/0xb0 [ 107.662689][ T1094] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 107.662700][ T1094] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 107.662711][ T1094] ? __mutex_trylock_common+0x15f/0x270 [ 107.662722][ T1094] ? __pfx___mutex_trylock_common+0x10/0x10 [ 107.662732][ T1094] ? __mod_timer+0xb53/0xed0 [ 107.662746][ T1094] ? rcu_is_watching+0x15/0xb0 [ 107.662755][ T1094] ? trace_contention_end+0x3d/0x140 [ 107.662766][ T1094] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.662776][ T1094] ? rcu_is_watching+0x15/0xb0 [ 107.662782][ T1094] ? trace_irq_enable+0x3b/0x140 [ 107.662791][ T1094] ? skb_dequeue+0x124/0x160 [ 107.662799][ T1094] ieee80211_iface_work+0x78a/0x1010 [ 107.662809][ T1094] cfg80211_wiphy_work+0x29e/0x420 [ 107.662818][ T1094] ? process_scheduled_works+0xa20/0x14e0 [ 107.662827][ T1094] process_scheduled_works+0xa8e/0x14e0 [ 107.662842][ T1094] ? __pfx_process_scheduled_works+0x10/0x10 [ 107.662852][ T1094] ? do_raw_spin_lock+0x12b/0x2f0 [ 107.662863][ T1094] ? assign_work+0x3cf/0x5d0 [ 107.662874][ T1094] worker_thread+0xa47/0xfb0 [ 107.662888][ T1094] ? __kthread_parkme+0x71/0x1f0 [ 107.662901][ T1094] kthread+0x388/0x470 [ 107.662916][ T1094] ? __pfx_worker_thread+0x10/0x10 [ 107.662946][ T1094] ? __pfx_kthread+0x10/0x10 [ 107.662960][ T1094] ret_from_fork+0x514/0xb70 [ 107.662970][ T1094] ? __pfx_ret_from_fork+0x10/0x10 [ 107.662979][ T1094] ? __switch_to+0xc89/0x1420 [ 107.662988][ T1094] ? __pfx_kthread+0x10/0x10 [ 107.662999][ T1094] ret_from_fork_asm+0x1a/0x30 [ 107.663012][ T1094] [ 107.810466][ T4703] FAULT_INJECTION: forcing a failure. [ 107.810466][ T4703] name failslab, interval 1, probability 1, space 0, times 982 [ 107.818412][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: udevd Tainted: G D syzkaller #0 PREEMPT(full) [ 107.818433][ T4703] Tainted: [D]=DIE [ 107.818464][ T4703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.818479][ T4703] Call Trace: [ 107.818483][ T4703] [ 107.818488][ T4703] dump_stack_lvl+0xe8/0x150 [ 107.818507][ T4703] should_fail_ex+0x40c/0x560 [ 107.818520][ T4703] should_failslab+0xa8/0x100 [ 107.818534][ T4703] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 107.818546][ T4703] ? copy_mm+0xda/0x480 [ 107.818558][ T4703] ? copy_mm+0xda/0x480 [ 107.818569][ T4703] copy_mm+0xda/0x480 [ 107.818581][ T4703] ? copy_process+0xd3c/0x4390 [ 107.818592][ T4703] copy_process+0x1e3e/0x4390 [ 107.818605][ T4703] ? copy_process+0xd3c/0x4390 [ 107.818619][ T4703] ? __pfx_copy_process+0x10/0x10 [ 107.818631][ T4703] ? sk_setsockopt+0x287d/0x2f10 [ 107.818645][ T4703] ? sk_setsockopt+0x287d/0x2f10 [ 107.818660][ T4703] kernel_clone+0x2d7/0x940 [ 107.818674][ T4703] ? __pfx_kernel_clone+0x10/0x10 [ 107.818691][ T4703] __x64_sys_clone+0x1b6/0x230 [ 107.818704][ T4703] ? __might_fault+0xcb/0x130 [ 107.818714][ T4703] ? __pfx___x64_sys_clone+0x10/0x10 [ 107.818731][ T4703] ? rcu_is_watching+0x15/0xb0 [ 107.818742][ T4703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.818753][ T4703] do_syscall_64+0x174/0x580 [ 107.818763][ T4703] ? trace_irq_disable+0x3b/0x140 [ 107.818778][ T4703] ? clear_bhb_loop+0x40/0x90 [ 107.818788][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.818799][ T4703] RIP: 0033:0x7f71378f1636 [ 107.818809][ T4703] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 107.818817][ T4703] RSP: 002b:00007fff64619130 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 107.818830][ T4703] RAX: ffffffffffffffda RBX: 00007fff64619138 RCX: 00007f71378f1636 [ 107.818837][ T4703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 107.818843][ T4703] RBP: 0000564f6b7fe910 R08: 0000000000000000 R09: 0000564f6b806a10 [ 107.818850][ T4703] R10: 00007f7137f41b50 R11: 0000000000000246 R12: 00007fff646194f0 [ 107.818857][ T4703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.818867][ T4703] [ 107.921463][ T5331] RIP: 0010:usb_put_function_instance+0x54/0xb0 [ 107.924522][ T5331] Code: 8d b3 98 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ea 1b 7f fa 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 cd 1b 7f fa 4d 8b 36 48 8d bb a8 [ 107.932905][ T5331] RSP: 0018:ffffc9000f107a50 EFLAGS: 00010202 [ 107.935568][ T5331] RAX: 0000000000000001 RBX: ffff888013651000 RCX: 0000000000100000 [ 107.939091][ T5331] RDX: ffffc90020001000 RSI: 000000000001c3f0 RDI: 000000000001c3f1 [ 107.942628][ T5331] RBP: 1ffff110026ca200 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 107.946157][ T5331] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 107.949418][ T5331] R13: dffffc0000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 107.952729][ T5331] FS: 00007f01b7ff06c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 107.956422][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.962046][ T5331] CR2: 00007f71378f7910 CR3: 0000000045413000 CR4: 0000000000352ef0 [ 107.966401][ T5331] Kernel panic - not syncing: Fatal exception [ 107.969293][ T5331] Kernel Offset: disabled [ 107.971116][ T5331] Rebooting in 86400 seconds..