Warning: Permanently added '[localhost]:31889' (ED25519) to the list of known hosts. 2025/11/29 19:20:56 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 126.570473][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 130.571732][ T5595] chnl_net:caif_netlink_parms(): no params data found [ 130.635214][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.638512][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.641703][ T5595] bridge_slave_0: entered allmulticast mode [ 130.645466][ T5595] bridge_slave_0: entered promiscuous mode [ 130.650615][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.653761][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.656954][ T5595] bridge_slave_1: entered allmulticast mode [ 130.661301][ T5595] bridge_slave_1: entered promiscuous mode [ 130.682883][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.690541][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.711160][ T5595] team0: Port device team_slave_0 added [ 130.715716][ T5595] team0: Port device team_slave_1 added [ 130.736386][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.740003][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.751772][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.757811][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.760841][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.774783][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.809596][ T5595] hsr_slave_0: entered promiscuous mode [ 130.812549][ T5595] hsr_slave_1: entered promiscuous mode [ 131.208749][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.220178][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.238490][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.251307][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.298615][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.301752][ T5595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.305104][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.308287][ T5595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.400170][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.424144][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.438739][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.447083][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.465104][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.468072][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.481115][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.484017][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.800528][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.868804][ T5595] veth0_vlan: entered promiscuous mode [ 131.883572][ T5595] veth1_vlan: entered promiscuous mode [ 131.934299][ T5595] veth0_macvtap: entered promiscuous mode [ 131.950719][ T5595] veth1_macvtap: entered promiscuous mode [ 131.989905][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.011126][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.045167][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.051574][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.055406][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.080279][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.289029][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.374974][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.456057][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.562478][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.694032][ T5405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.700448][ T5405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.704150][ T5405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.708562][ T5405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.712171][ T5405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.376802][ T12] bridge_slave_1: left allmulticast mode [ 134.379439][ T12] bridge_slave_1: left promiscuous mode [ 134.382192][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.386849][ T12] bridge_slave_0: left allmulticast mode [ 134.397401][ T12] bridge_slave_0: left promiscuous mode [ 134.400051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.650323][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.655870][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.662319][ T12] bond0 (unregistering): Released all slaves [ 134.722647][ T12] hsr_slave_0: left promiscuous mode [ 134.773017][ T12] hsr_slave_1: left promiscuous mode [ 134.787670][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.791078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.810668][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.813548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.842485][ T12] veth1_macvtap: left promiscuous mode [ 134.844723][ T12] veth0_macvtap: left promiscuous mode [ 134.846939][ T12] veth1_vlan: left promiscuous mode [ 134.858953][ T12] veth0_vlan: left promiscuous mode [ 135.399060][ T12] team0 (unregistering): Port device team_slave_1 removed [ 135.431234][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.941447][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.944434][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.540526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.544569][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.571693][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.575148][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/29 19:21:13 executed programs: 0 [ 139.154194][ T4670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.160213][ T4670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.166486][ T4670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.174352][ T4670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.178781][ T4670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.361760][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 139.413799][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.416683][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.419858][ T5767] bridge_slave_0: entered allmulticast mode [ 139.424417][ T5767] bridge_slave_0: entered promiscuous mode [ 139.430128][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.433256][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.436234][ T5767] bridge_slave_1: entered allmulticast mode [ 139.440841][ T5767] bridge_slave_1: entered promiscuous mode [ 139.462810][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.469586][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.490527][ T5767] team0: Port device team_slave_0 added [ 139.495015][ T5767] team0: Port device team_slave_1 added [ 139.513364][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.516292][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.527908][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.533634][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.536637][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.548001][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.580634][ T5767] hsr_slave_0: entered promiscuous mode [ 139.583811][ T5767] hsr_slave_1: entered promiscuous mode [ 139.982671][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.001184][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.010984][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.021957][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.154192][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.176380][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.201428][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.204629][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.228513][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.231707][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.561452][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.630352][ T5767] veth0_vlan: entered promiscuous mode [ 140.653372][ T5767] veth1_vlan: entered promiscuous mode [ 140.699625][ T5767] veth0_macvtap: entered promiscuous mode [ 140.719455][ T5767] veth1_macvtap: entered promiscuous mode [ 140.749944][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.769975][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.790450][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.794214][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.807361][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.811100][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.908913][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.915484][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.968518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.972478][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.114914][ T5809] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 141.134902][ T5809] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.146218][ T5809] FAULT_INJECTION: forcing a failure. [ 141.146218][ T5809] name failslab, interval 1, probability 0, space 0, times 1 [ 141.167399][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 141.167418][ T5809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.167424][ T5809] Call Trace: [ 141.167429][ T5809] [ 141.167434][ T5809] dump_stack_lvl+0x189/0x250 [ 141.167560][ T5809] ? __pfx____ratelimit+0x10/0x10 [ 141.167605][ T5809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.167617][ T5809] ? __pfx__printk+0x10/0x10 [ 141.167626][ T5809] ? __pfx___might_resched+0x10/0x10 [ 141.167634][ T5809] ? fs_reclaim_acquire+0x7d/0x100 [ 141.167646][ T5809] should_fail_ex+0x414/0x560 [ 141.167682][ T5809] should_failslab+0xa8/0x100 [ 141.167693][ T5809] __kmalloc_noprof+0xcb/0x7f0 [ 141.167701][ T5809] ? ieee80211_ie_len_eht_cap+0x4fc/0x750 [ 141.167711][ T5809] ? ieee80211_mesh_build_beacon+0xc3/0x1b50 [ 141.167722][ T5809] ieee80211_mesh_build_beacon+0xc3/0x1b50 [ 141.167735][ T5809] ieee80211_mesh_rebuild_beacon+0xc7/0x170 [ 141.167744][ T5809] ieee80211_mesh_csa_beacon+0x140/0x2c0 [ 141.167754][ T5809] ieee80211_set_csa_beacon+0x3cc/0x9a0 [ 141.167763][ T5809] ? drv_pre_channel_switch+0x38c/0x690 [ 141.167772][ T5809] ieee80211_channel_switch+0x8ef/0xcb0 [ 141.167790][ T5809] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 141.167801][ T5809] ? cfg80211_chandef_dfs_required+0xcee/0xe70 [ 141.167828][ T5809] ? rcu_is_watching+0x15/0xb0 [ 141.167843][ T5809] rdev_channel_switch+0x108/0x290 [ 141.167856][ T5809] nl80211_channel_switch+0xac9/0xd70 [ 141.167868][ T5809] ? __rtnl_unlock+0x68/0xf0 [ 141.167885][ T5809] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 141.167901][ T5809] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 141.167912][ T5809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.167927][ T5809] ? rcu_is_watching+0x15/0xb0 [ 141.167965][ T5809] ? __nla_parse+0x40/0x60 [ 141.167976][ T5809] ? nl80211_pre_doit+0x4f1/0x930 [ 141.167993][ T5809] genl_family_rcv_msg_doit+0x215/0x300 [ 141.168013][ T5809] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.168033][ T5809] ? bpf_lsm_capable+0x9/0x20 [ 141.168046][ T5809] ? security_capable+0x7e/0x2e0 [ 141.168064][ T5809] genl_rcv_msg+0x60e/0x790 [ 141.168081][ T5809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.168091][ T5809] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 141.168103][ T5809] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 141.168112][ T5809] ? __pfx_nl80211_post_doit+0x10/0x10 [ 141.168124][ T5809] ? __asan_memcpy+0x40/0x70 [ 141.168136][ T5809] ? __pfx_ref_tracker_free+0x10/0x10 [ 141.168156][ T5809] netlink_rcv_skb+0x208/0x470 [ 141.168172][ T5809] ? __lock_acquire+0xab9/0xd20 [ 141.168183][ T5809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.168196][ T5809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.168224][ T5809] ? down_read+0x1ad/0x2e0 [ 141.168236][ T5809] genl_rcv+0x28/0x40 [ 141.168247][ T5809] netlink_unicast+0x82f/0x9e0 [ 141.168267][ T5809] ? __pfx_netlink_unicast+0x10/0x10 [ 141.168283][ T5809] ? netlink_sendmsg+0x642/0xb30 [ 141.168291][ T5809] ? skb_put+0x11b/0x210 [ 141.168309][ T5809] netlink_sendmsg+0x805/0xb30 [ 141.168325][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.168339][ T5809] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.168354][ T5809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.168367][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.168376][ T5809] __sock_sendmsg+0x21c/0x270 [ 141.168392][ T5809] ____sys_sendmsg+0x505/0x830 [ 141.168405][ T5809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.168422][ T5809] ? import_iovec+0x74/0xa0 [ 141.168436][ T5809] ___sys_sendmsg+0x21f/0x2a0 [ 141.168449][ T5809] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.168481][ T5809] ? __fget_files+0x2a/0x420 [ 141.168495][ T5809] ? __fget_files+0x3a0/0x420 [ 141.168513][ T5809] __x64_sys_sendmsg+0x19b/0x260 [ 141.168525][ T5809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.168540][ T5809] ? __pfx_ksys_write+0x10/0x10 [ 141.168575][ T5809] ? do_syscall_64+0xbe/0xfa0 [ 141.168606][ T5809] do_syscall_64+0xfa/0xfa0 [ 141.168620][ T5809] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.168634][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.168645][ T5809] ? clear_bhb_loop+0x60/0xb0 [ 141.168658][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.168668][ T5809] RIP: 0033:0x7f713538f6c9 [ 141.168680][ T5809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.168688][ T5809] RSP: 002b:00007f7136234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.168700][ T5809] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538f6c9 [ 141.168707][ T5809] RDX: 0000000000000000 RSI: 0000200000004180 RDI: 0000000000000003 [ 141.168714][ T5809] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 141.168720][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.168727][ T5809] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 141.168746][ T5809] [ 141.168804][ T5809] [ 141.369893][ T5809] ============================= [ 141.371943][ T5809] WARNING: suspicious RCU usage [ 141.374140][ T5809] syzkaller #0 Not tainted [ 141.376050][ T5809] ----------------------------- [ 141.378420][ T5809] net/mac80211/mesh.c:1571 suspicious rcu_dereference_check() usage! [ 141.381987][ T5809] [ 141.381987][ T5809] other info that might help us debug this: [ 141.381987][ T5809] [ 141.386500][ T5809] [ 141.386500][ T5809] rcu_scheduler_active = 2, debug_locks = 1 [ 141.390099][ T5809] 2 locks held by syz.0.17/5809: [ 141.392223][ T5809] #0: ffffffff8f334090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 141.395743][ T5809] #1: ffff8880551d8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x281/0x930 [ 141.400054][ T5809] [ 141.400054][ T5809] stack backtrace: [ 141.402632][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 141.402646][ T5809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.402653][ T5809] Call Trace: [ 141.402660][ T5809] [ 141.402666][ T5809] dump_stack_lvl+0x189/0x250 [ 141.402686][ T5809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.402700][ T5809] ? __pfx__printk+0x10/0x10 [ 141.402714][ T5809] ? print_lock_name+0xde/0x100 [ 141.402727][ T5809] lockdep_rcu_suspicious+0x140/0x1d0 [ 141.402742][ T5809] ieee80211_mesh_csa_beacon+0x280/0x2c0 [ 141.402759][ T5809] ieee80211_set_csa_beacon+0x3cc/0x9a0 [ 141.402773][ T5809] ? drv_pre_channel_switch+0x38c/0x690 [ 141.402787][ T5809] ieee80211_channel_switch+0x8ef/0xcb0 [ 141.402806][ T5809] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 141.402816][ T5809] ? cfg80211_chandef_dfs_required+0xcee/0xe70 [ 141.402842][ T5809] ? rcu_is_watching+0x15/0xb0 [ 141.402858][ T5809] rdev_channel_switch+0x108/0x290 [ 141.402870][ T5809] nl80211_channel_switch+0xac9/0xd70 [ 141.402882][ T5809] ? __rtnl_unlock+0x68/0xf0 [ 141.402892][ T5809] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 141.402903][ T5809] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 141.402912][ T5809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.402924][ T5809] ? rcu_is_watching+0x15/0xb0 [ 141.402959][ T5809] ? __nla_parse+0x40/0x60 [ 141.402971][ T5809] ? nl80211_pre_doit+0x4f1/0x930 [ 141.402987][ T5809] genl_family_rcv_msg_doit+0x215/0x300 [ 141.403005][ T5809] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.403025][ T5809] ? bpf_lsm_capable+0x9/0x20 [ 141.403035][ T5809] ? security_capable+0x7e/0x2e0 [ 141.403049][ T5809] genl_rcv_msg+0x60e/0x790 [ 141.403063][ T5809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.403073][ T5809] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 141.403083][ T5809] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 141.403092][ T5809] ? __pfx_nl80211_post_doit+0x10/0x10 [ 141.403104][ T5809] ? __asan_memcpy+0x40/0x70 [ 141.403116][ T5809] ? __pfx_ref_tracker_free+0x10/0x10 [ 141.403133][ T5809] netlink_rcv_skb+0x208/0x470 [ 141.403148][ T5809] ? __lock_acquire+0xab9/0xd20 [ 141.403159][ T5809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.403172][ T5809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.403198][ T5809] ? down_read+0x1ad/0x2e0 [ 141.403210][ T5809] genl_rcv+0x28/0x40 [ 141.403220][ T5809] netlink_unicast+0x82f/0x9e0 [ 141.403238][ T5809] ? __pfx_netlink_unicast+0x10/0x10 [ 141.403252][ T5809] ? netlink_sendmsg+0x642/0xb30 [ 141.403260][ T5809] ? skb_put+0x11b/0x210 [ 141.403276][ T5809] netlink_sendmsg+0x805/0xb30 [ 141.403291][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.403302][ T5809] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.403317][ T5809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.403330][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.403340][ T5809] __sock_sendmsg+0x21c/0x270 [ 141.403353][ T5809] ____sys_sendmsg+0x505/0x830 [ 141.403366][ T5809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.403382][ T5809] ? import_iovec+0x74/0xa0 [ 141.403395][ T5809] ___sys_sendmsg+0x21f/0x2a0 [ 141.403406][ T5809] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.403443][ T5809] ? __fget_files+0x2a/0x420 [ 141.403458][ T5809] ? __fget_files+0x3a0/0x420 [ 141.403477][ T5809] __x64_sys_sendmsg+0x19b/0x260 [ 141.403487][ T5809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.403503][ T5809] ? __pfx_ksys_write+0x10/0x10 [ 141.403519][ T5809] ? do_syscall_64+0xbe/0xfa0 [ 141.403535][ T5809] do_syscall_64+0xfa/0xfa0 [ 141.403548][ T5809] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.403561][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.403571][ T5809] ? clear_bhb_loop+0x60/0xb0 [ 141.403584][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.403594][ T5809] RIP: 0033:0x7f713538f6c9 [ 141.403605][ T5809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.403618][ T5809] RSP: 002b:00007f7136234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.403629][ T5809] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538f6c9 [ 141.403636][ T5809] RDX: 0000000000000000 RSI: 0000200000004180 RDI: 0000000000000003 [ 141.403643][ T5809] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 141.403649][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.403654][ T5809] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 141.403670][ T5809] [ 141.609855][ T4670] Bluetooth: hci0: command tx timeout [ 141.820562][ T5817] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 141.839486][ T5817] FAULT_INJECTION: forcing a failure. [ 141.839486][ T5817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.845110][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 141.845121][ T5817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.845126][ T5817] Call Trace: [ 141.845131][ T5817] [ 141.845135][ T5817] dump_stack_lvl+0x189/0x250 [ 141.845150][ T5817] ? __pfx____ratelimit+0x10/0x10 [ 141.845164][ T5817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.845177][ T5817] ? __pfx__printk+0x10/0x10 [ 141.845194][ T5817] should_fail_ex+0x414/0x560 [ 141.845209][ T5817] _copy_to_user+0x31/0xb0 [ 141.845218][ T5817] simple_read_from_buffer+0xe1/0x170 [ 141.845231][ T5817] proc_fail_nth_read+0x1b3/0x220 [ 141.845240][ T5817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.845251][ T5817] ? rw_verify_area+0x2a6/0x4d0 [ 141.845262][ T5817] ? __lock_acquire+0xab9/0xd20 [ 141.845272][ T5817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.845283][ T5817] vfs_read+0x200/0xa30 [ 141.845294][ T5817] ? fdget_pos+0x247/0x320 [ 141.845310][ T5817] ? __pfx___mutex_lock+0x10/0x10 [ 141.845325][ T5817] ? __pfx_vfs_read+0x10/0x10 [ 141.845337][ T5817] ? __fget_files+0x2a/0x420 [ 141.845352][ T5817] ? __fget_files+0x3a0/0x420 [ 141.845364][ T5817] ? __fget_files+0x2a/0x420 [ 141.845382][ T5817] ksys_read+0x145/0x250 [ 141.845395][ T5817] ? __pfx_ksys_read+0x10/0x10 [ 141.845407][ T5817] ? do_syscall_64+0xbe/0xfa0 [ 141.845418][ T5817] do_syscall_64+0xfa/0xfa0 [ 141.845426][ T5817] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.845435][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.845442][ T5817] ? clear_bhb_loop+0x60/0xb0 [ 141.845450][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.845457][ T5817] RIP: 0033:0x7f713538e0dc [ 141.845465][ T5817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.845471][ T5817] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.845479][ T5817] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 141.845484][ T5817] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 141.845488][ T5817] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 141.845492][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.845496][ T5817] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 141.845507][ T5817] [ 141.982081][ T5820] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 141.990455][ T5820] FAULT_INJECTION: forcing a failure. [ 141.990455][ T5820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.998722][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 141.998738][ T5820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.998745][ T5820] Call Trace: [ 141.998793][ T5820] [ 141.998797][ T5820] dump_stack_lvl+0x189/0x250 [ 141.998884][ T5820] ? __pfx____ratelimit+0x10/0x10 [ 141.998926][ T5820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.998940][ T5820] ? __pfx__printk+0x10/0x10 [ 141.998959][ T5820] should_fail_ex+0x414/0x560 [ 141.999005][ T5820] _copy_to_user+0x31/0xb0 [ 141.999019][ T5820] simple_read_from_buffer+0xe1/0x170 [ 141.999035][ T5820] proc_fail_nth_read+0x1b3/0x220 [ 141.999050][ T5820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.999063][ T5820] ? rw_verify_area+0x2a6/0x4d0 [ 141.999074][ T5820] ? __lock_acquire+0xab9/0xd20 [ 141.999084][ T5820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.999096][ T5820] vfs_read+0x200/0xa30 [ 141.999106][ T5820] ? fdget_pos+0x247/0x320 [ 141.999116][ T5820] ? __pfx___mutex_lock+0x10/0x10 [ 141.999127][ T5820] ? __pfx_vfs_read+0x10/0x10 [ 141.999135][ T5820] ? __fget_files+0x2a/0x420 [ 141.999146][ T5820] ? __fget_files+0x3a0/0x420 [ 141.999154][ T5820] ? __fget_files+0x2a/0x420 [ 141.999166][ T5820] ksys_read+0x145/0x250 [ 141.999178][ T5820] ? __pfx_ksys_read+0x10/0x10 [ 141.999192][ T5820] ? do_syscall_64+0xbe/0xfa0 [ 141.999208][ T5820] do_syscall_64+0xfa/0xfa0 [ 141.999220][ T5820] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.999234][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.999244][ T5820] ? clear_bhb_loop+0x60/0xb0 [ 141.999255][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.999265][ T5820] RIP: 0033:0x7f713538e0dc [ 141.999274][ T5820] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.999283][ T5820] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.999295][ T5820] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 141.999303][ T5820] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 141.999309][ T5820] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 141.999315][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.999321][ T5820] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 141.999338][ T5820] [ 142.129853][ T5822] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 142.134663][ T5822] FAULT_INJECTION: forcing a failure. [ 142.134663][ T5822] name failslab, interval 1, probability 0, space 0, times 0 [ 142.145026][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 142.145045][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.145052][ T5822] Call Trace: [ 142.145057][ T5822] [ 142.145063][ T5822] dump_stack_lvl+0x189/0x250 [ 142.145083][ T5822] ? __pfx____ratelimit+0x10/0x10 [ 142.145099][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.145115][ T5822] ? __pfx__printk+0x10/0x10 [ 142.145126][ T5822] ? netlink_sendmsg+0x805/0xb30 [ 142.145137][ T5822] ? __x64_sys_sendmsg+0x19b/0x260 [ 142.145148][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.145166][ T5822] should_fail_ex+0x414/0x560 [ 142.145186][ T5822] should_failslab+0xa8/0x100 [ 142.145204][ T5822] kmem_cache_alloc_noprof+0x74/0x6e0 [ 142.145219][ T5822] ? skb_clone+0x212/0x3a0 [ 142.145234][ T5822] skb_clone+0x212/0x3a0 [ 142.145247][ T5822] __netlink_deliver_tap+0x404/0x850 [ 142.145271][ T5822] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.145290][ T5822] netlink_deliver_tap+0x19c/0x1b0 [ 142.145307][ T5822] netlink_sendskb+0x68/0x140 [ 142.145324][ T5822] netlink_unicast+0x397/0x9e0 [ 142.145337][ T5822] ? __asan_memcpy+0x40/0x70 [ 142.145355][ T5822] ? __pfx_netlink_unicast+0x10/0x10 [ 142.145376][ T5822] netlink_rcv_skb+0x28c/0x470 [ 142.145391][ T5822] ? __lock_acquire+0xab9/0xd20 [ 142.145403][ T5822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.145418][ T5822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.145445][ T5822] ? down_read+0x1ad/0x2e0 [ 142.145458][ T5822] genl_rcv+0x28/0x40 [ 142.145471][ T5822] netlink_unicast+0x82f/0x9e0 [ 142.145490][ T5822] ? __pfx_netlink_unicast+0x10/0x10 [ 142.145507][ T5822] ? netlink_sendmsg+0x642/0xb30 [ 142.145515][ T5822] ? skb_put+0x11b/0x210 [ 142.145534][ T5822] netlink_sendmsg+0x805/0xb30 [ 142.145551][ T5822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.145563][ T5822] ? aa_sock_msg_perm+0xf1/0x1d0 [ 142.145594][ T5822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.145611][ T5822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.145622][ T5822] __sock_sendmsg+0x21c/0x270 [ 142.145638][ T5822] ____sys_sendmsg+0x505/0x830 [ 142.145652][ T5822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.145668][ T5822] ? import_iovec+0x74/0xa0 [ 142.145683][ T5822] ___sys_sendmsg+0x21f/0x2a0 [ 142.145695][ T5822] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.145728][ T5822] ? __fget_files+0x2a/0x420 [ 142.145744][ T5822] ? __fget_files+0x3a0/0x420 [ 142.145766][ T5822] __x64_sys_sendmsg+0x19b/0x260 [ 142.145779][ T5822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.145796][ T5822] ? __pfx_ksys_write+0x10/0x10 [ 142.145812][ T5822] ? do_syscall_64+0xbe/0xfa0 [ 142.145829][ T5822] do_syscall_64+0xfa/0xfa0 [ 142.145843][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.145858][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.145869][ T5822] ? clear_bhb_loop+0x60/0xb0 [ 142.145883][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.145894][ T5822] RIP: 0033:0x7f713538f6c9 [ 142.145907][ T5822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.145916][ T5822] RSP: 002b:00007f7136234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.145930][ T5822] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538f6c9 [ 142.145938][ T5822] RDX: 0000000000000000 RSI: 0000200000004180 RDI: 0000000000000003 [ 142.145944][ T5822] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 142.145950][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.145956][ T5822] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 142.145975][ T5822] [ 142.480648][ T5824] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 142.485150][ T5824] FAULT_INJECTION: forcing a failure. [ 142.485150][ T5824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.492890][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 142.492905][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.492946][ T5824] Call Trace: [ 142.492951][ T5824] [ 142.492956][ T5824] dump_stack_lvl+0x189/0x250 [ 142.492977][ T5824] ? __pfx____ratelimit+0x10/0x10 [ 142.492991][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.493004][ T5824] ? __pfx__printk+0x10/0x10 [ 142.493021][ T5824] should_fail_ex+0x414/0x560 [ 142.493038][ T5824] _copy_to_user+0x31/0xb0 [ 142.493051][ T5824] simple_read_from_buffer+0xe1/0x170 [ 142.493067][ T5824] proc_fail_nth_read+0x1b3/0x220 [ 142.493082][ T5824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.493095][ T5824] ? rw_verify_area+0x2a6/0x4d0 [ 142.493108][ T5824] ? __lock_acquire+0xab9/0xd20 [ 142.493117][ T5824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.493129][ T5824] vfs_read+0x200/0xa30 [ 142.493137][ T5824] ? fdget_pos+0x247/0x320 [ 142.493152][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 142.493166][ T5824] ? __pfx_vfs_read+0x10/0x10 [ 142.493179][ T5824] ? __fget_files+0x2a/0x420 [ 142.493195][ T5824] ? __fget_files+0x3a0/0x420 [ 142.493207][ T5824] ? __fget_files+0x2a/0x420 [ 142.493224][ T5824] ksys_read+0x145/0x250 [ 142.493238][ T5824] ? __pfx_ksys_read+0x10/0x10 [ 142.493252][ T5824] ? do_syscall_64+0xbe/0xfa0 [ 142.493268][ T5824] do_syscall_64+0xfa/0xfa0 [ 142.493280][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.493293][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.493303][ T5824] ? clear_bhb_loop+0x60/0xb0 [ 142.493315][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.493325][ T5824] RIP: 0033:0x7f713538e0dc [ 142.493334][ T5824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.493343][ T5824] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.493355][ T5824] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 142.493362][ T5824] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 142.493368][ T5824] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 142.493374][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.493380][ T5824] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 142.493397][ T5824] [ 142.730651][ T5832] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 142.734949][ T5832] FAULT_INJECTION: forcing a failure. [ 142.734949][ T5832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.741974][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 142.741988][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.741995][ T5832] Call Trace: [ 142.741999][ T5832] [ 142.742004][ T5832] dump_stack_lvl+0x189/0x250 [ 142.742024][ T5832] ? __pfx____ratelimit+0x10/0x10 [ 142.742039][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.742054][ T5832] ? __pfx__printk+0x10/0x10 [ 142.742074][ T5832] should_fail_ex+0x414/0x560 [ 142.742092][ T5832] _copy_to_user+0x31/0xb0 [ 142.742111][ T5832] simple_read_from_buffer+0xe1/0x170 [ 142.742128][ T5832] proc_fail_nth_read+0x1b3/0x220 [ 142.742141][ T5832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.742153][ T5832] ? rw_verify_area+0x2a6/0x4d0 [ 142.742168][ T5832] ? __lock_acquire+0xab9/0xd20 [ 142.742178][ T5832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.742194][ T5832] vfs_read+0x200/0xa30 [ 142.742209][ T5832] ? fdget_pos+0x247/0x320 [ 142.742225][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 142.742241][ T5832] ? __pfx_vfs_read+0x10/0x10 [ 142.742255][ T5832] ? __fget_files+0x2a/0x420 [ 142.742269][ T5832] ? __fget_files+0x3a0/0x420 [ 142.742283][ T5832] ? __fget_files+0x2a/0x420 [ 142.742305][ T5832] ksys_read+0x145/0x250 [ 142.742317][ T5832] ? __pfx_ksys_read+0x10/0x10 [ 142.742331][ T5832] ? do_syscall_64+0xbe/0xfa0 [ 142.742348][ T5832] do_syscall_64+0xfa/0xfa0 [ 142.742361][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.742375][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.742385][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 142.742397][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.742406][ T5832] RIP: 0033:0x7f713538e0dc [ 142.742416][ T5832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.742424][ T5832] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.742436][ T5832] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 142.742443][ T5832] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 142.742449][ T5832] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 142.742456][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.742461][ T5832] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 142.742477][ T5832] [ 142.945923][ T5838] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 142.951216][ T5838] FAULT_INJECTION: forcing a failure. [ 142.951216][ T5838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.961715][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 142.961726][ T5838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.961733][ T5838] Call Trace: [ 142.961738][ T5838] [ 142.961743][ T5838] dump_stack_lvl+0x189/0x250 [ 142.961763][ T5838] ? __pfx____ratelimit+0x10/0x10 [ 142.961777][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.961790][ T5838] ? __pfx__printk+0x10/0x10 [ 142.961808][ T5838] should_fail_ex+0x414/0x560 [ 142.961826][ T5838] _copy_to_user+0x31/0xb0 [ 142.961839][ T5838] simple_read_from_buffer+0xe1/0x170 [ 142.961856][ T5838] proc_fail_nth_read+0x1b3/0x220 [ 142.961870][ T5838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.961883][ T5838] ? rw_verify_area+0x2a6/0x4d0 [ 142.961894][ T5838] ? __lock_acquire+0xab9/0xd20 [ 142.961902][ T5838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.961914][ T5838] vfs_read+0x200/0xa30 [ 142.961925][ T5838] ? fdget_pos+0x247/0x320 [ 142.961943][ T5838] ? __pfx___mutex_lock+0x10/0x10 [ 142.961957][ T5838] ? __pfx_vfs_read+0x10/0x10 [ 142.961969][ T5838] ? __fget_files+0x2a/0x420 [ 142.961984][ T5838] ? __fget_files+0x3a0/0x420 [ 142.961997][ T5838] ? __fget_files+0x2a/0x420 [ 142.962017][ T5838] ksys_read+0x145/0x250 [ 142.962031][ T5838] ? __pfx_ksys_read+0x10/0x10 [ 142.962042][ T5838] ? do_syscall_64+0xbe/0xfa0 [ 142.962053][ T5838] do_syscall_64+0xfa/0xfa0 [ 142.962062][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.962071][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.962077][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 142.962085][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.962092][ T5838] RIP: 0033:0x7f713538e0dc [ 142.962100][ T5838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.962105][ T5838] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.962114][ T5838] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 142.962119][ T5838] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 142.962124][ T5838] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 142.962130][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.962136][ T5838] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 142.962153][ T5838] [ 143.105934][ T5841] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 143.110180][ T5841] FAULT_INJECTION: forcing a failure. [ 143.110180][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 143.116641][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 143.116656][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.116663][ T5841] Call Trace: [ 143.116668][ T5841] [ 143.116673][ T5841] dump_stack_lvl+0x189/0x250 [ 143.116691][ T5841] ? __pfx____ratelimit+0x10/0x10 [ 143.116706][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.116718][ T5841] ? __pfx__printk+0x10/0x10 [ 143.116726][ T5841] ? netlink_sendmsg+0x805/0xb30 [ 143.116736][ T5841] ? __x64_sys_sendmsg+0x19b/0x260 [ 143.116746][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.116760][ T5841] should_fail_ex+0x414/0x560 [ 143.116778][ T5841] should_failslab+0xa8/0x100 [ 143.116794][ T5841] kmem_cache_alloc_noprof+0x74/0x6e0 [ 143.116807][ T5841] ? skb_clone+0x212/0x3a0 [ 143.116821][ T5841] skb_clone+0x212/0x3a0 [ 143.116833][ T5841] __netlink_deliver_tap+0x404/0x850 [ 143.116857][ T5841] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.116873][ T5841] netlink_deliver_tap+0x19c/0x1b0 [ 143.116896][ T5841] netlink_sendskb+0x68/0x140 [ 143.116943][ T5841] netlink_unicast+0x397/0x9e0 [ 143.116956][ T5841] ? __asan_memcpy+0x40/0x70 [ 143.116972][ T5841] ? __pfx_netlink_unicast+0x10/0x10 [ 143.116991][ T5841] netlink_rcv_skb+0x28c/0x470 [ 143.117005][ T5841] ? __lock_acquire+0xab9/0xd20 [ 143.117015][ T5841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.117028][ T5841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.117055][ T5841] ? down_read+0x1ad/0x2e0 [ 143.117067][ T5841] genl_rcv+0x28/0x40 [ 143.117078][ T5841] netlink_unicast+0x82f/0x9e0 [ 143.117096][ T5841] ? __pfx_netlink_unicast+0x10/0x10 [ 143.117110][ T5841] ? netlink_sendmsg+0x642/0xb30 [ 143.117118][ T5841] ? skb_put+0x11b/0x210 [ 143.117134][ T5841] netlink_sendmsg+0x805/0xb30 [ 143.117167][ T5841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.117179][ T5841] ? aa_sock_msg_perm+0xf1/0x1d0 [ 143.117194][ T5841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.117208][ T5841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.117219][ T5841] __sock_sendmsg+0x21c/0x270 [ 143.117233][ T5841] ____sys_sendmsg+0x505/0x830 [ 143.117247][ T5841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.117263][ T5841] ? import_iovec+0x74/0xa0 [ 143.117277][ T5841] ___sys_sendmsg+0x21f/0x2a0 [ 143.117289][ T5841] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.117320][ T5841] ? __fget_files+0x2a/0x420 [ 143.117333][ T5841] ? __fget_files+0x3a0/0x420 [ 143.117353][ T5841] __x64_sys_sendmsg+0x19b/0x260 [ 143.117365][ T5841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.117379][ T5841] ? __pfx_ksys_write+0x10/0x10 [ 143.117393][ T5841] ? do_syscall_64+0xbe/0xfa0 [ 143.117410][ T5841] do_syscall_64+0xfa/0xfa0 [ 143.117422][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.117436][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.117447][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 143.117459][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.117469][ T5841] RIP: 0033:0x7f713538f6c9 [ 143.117480][ T5841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.117489][ T5841] RSP: 002b:00007f7136234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.117501][ T5841] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538f6c9 [ 143.117508][ T5841] RDX: 0000000000000000 RSI: 0000200000004180 RDI: 0000000000000003 [ 143.117514][ T5841] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 143.117521][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.117527][ T5841] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 143.117545][ T5841] [ 143.431212][ T5846] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 143.440409][ T5846] FAULT_INJECTION: forcing a failure. [ 143.440409][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.445910][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 143.445927][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.445934][ T5846] Call Trace: [ 143.445941][ T5846] [ 143.445947][ T5846] dump_stack_lvl+0x189/0x250 [ 143.445968][ T5846] ? __pfx____ratelimit+0x10/0x10 [ 143.445982][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.445995][ T5846] ? __pfx__printk+0x10/0x10 [ 143.446015][ T5846] should_fail_ex+0x414/0x560 [ 143.446034][ T5846] _copy_to_user+0x31/0xb0 [ 143.446047][ T5846] simple_read_from_buffer+0xe1/0x170 [ 143.446064][ T5846] proc_fail_nth_read+0x1b3/0x220 [ 143.446078][ T5846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.446091][ T5846] ? rw_verify_area+0x2a6/0x4d0 [ 143.446103][ T5846] ? __lock_acquire+0xab9/0xd20 [ 143.446112][ T5846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.446124][ T5846] vfs_read+0x200/0xa30 [ 143.446136][ T5846] ? fdget_pos+0x247/0x320 [ 143.446152][ T5846] ? __pfx___mutex_lock+0x10/0x10 [ 143.446168][ T5846] ? __pfx_vfs_read+0x10/0x10 [ 143.446181][ T5846] ? __fget_files+0x2a/0x420 [ 143.446197][ T5846] ? __fget_files+0x3a0/0x420 [ 143.446210][ T5846] ? __fget_files+0x2a/0x420 [ 143.446229][ T5846] ksys_read+0x145/0x250 [ 143.446243][ T5846] ? __pfx_ksys_read+0x10/0x10 [ 143.446257][ T5846] ? do_syscall_64+0xbe/0xfa0 [ 143.446275][ T5846] do_syscall_64+0xfa/0xfa0 [ 143.446288][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.446302][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.446312][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 143.446326][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.446336][ T5846] RIP: 0033:0x7f713538e0dc [ 143.446349][ T5846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.446357][ T5846] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.446369][ T5846] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 143.446377][ T5846] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 143.446383][ T5846] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 143.446390][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.446396][ T5846] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 143.446415][ T5846] [ 143.566194][ T5848] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 143.571257][ T5848] FAULT_INJECTION: forcing a failure. [ 143.571257][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.586539][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(full) [ 143.586555][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.586561][ T5848] Call Trace: [ 143.586566][ T5848] [ 143.586571][ T5848] dump_stack_lvl+0x189/0x250 [ 143.586600][ T5848] ? __pfx____ratelimit+0x10/0x10 [ 143.586614][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.586629][ T5848] ? __pfx__printk+0x10/0x10 [ 143.586648][ T5848] should_fail_ex+0x414/0x560 [ 143.586667][ T5848] _copy_to_user+0x31/0xb0 [ 143.586681][ T5848] simple_read_from_buffer+0xe1/0x170 [ 143.586698][ T5848] proc_fail_nth_read+0x1b3/0x220 [ 143.586713][ T5848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.586726][ T5848] ? rw_verify_area+0x2a6/0x4d0 [ 143.586737][ T5848] ? __lock_acquire+0xab9/0xd20 [ 143.586748][ T5848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.586760][ T5848] vfs_read+0x200/0xa30 [ 143.586772][ T5848] ? fdget_pos+0x247/0x320 [ 143.586788][ T5848] ? __pfx___mutex_lock+0x10/0x10 [ 143.586804][ T5848] ? __pfx_vfs_read+0x10/0x10 [ 143.586817][ T5848] ? __fget_files+0x2a/0x420 [ 143.586834][ T5848] ? __fget_files+0x3a0/0x420 [ 143.586847][ T5848] ? __fget_files+0x2a/0x420 [ 143.586865][ T5848] ksys_read+0x145/0x250 [ 143.586880][ T5848] ? __pfx_ksys_read+0x10/0x10 [ 143.586894][ T5848] ? do_syscall_64+0xbe/0xfa0 [ 143.586910][ T5848] do_syscall_64+0xfa/0xfa0 [ 143.586923][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.586935][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.586944][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 143.586956][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.586966][ T5848] RIP: 0033:0x7f713538e0dc [ 143.586976][ T5848] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.586984][ T5848] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.586995][ T5848] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 143.587002][ T5848] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 143.587009][ T5848] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 143.587015][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.587020][ T5848] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 143.587038][ T5848] [ 143.691861][ T4670] Bluetooth: hci0: command tx timeout [ 143.823391][ T5852] FAULT_INJECTION: forcing a failure. [ 143.823391][ T5852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.837448][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 143.837467][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.837473][ T5852] Call Trace: [ 143.837479][ T5852] [ 143.837484][ T5852] dump_stack_lvl+0x189/0x250 [ 143.837502][ T5852] ? __pfx____ratelimit+0x10/0x10 [ 143.837516][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.837532][ T5852] ? __pfx__printk+0x10/0x10 [ 143.837550][ T5852] should_fail_ex+0x414/0x560 [ 143.837569][ T5852] _copy_to_user+0x31/0xb0 [ 143.837585][ T5852] simple_read_from_buffer+0xe1/0x170 [ 143.837614][ T5852] proc_fail_nth_read+0x1b3/0x220 [ 143.837628][ T5852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.837641][ T5852] ? rw_verify_area+0x2a6/0x4d0 [ 143.837654][ T5852] ? __lock_acquire+0xab9/0xd20 [ 143.837664][ T5852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.837677][ T5852] vfs_read+0x200/0xa30 [ 143.837689][ T5852] ? fdget_pos+0x247/0x320 [ 143.837707][ T5852] ? __pfx___mutex_lock+0x10/0x10 [ 143.837723][ T5852] ? __pfx_vfs_read+0x10/0x10 [ 143.837735][ T5852] ? __fget_files+0x2a/0x420 [ 143.837751][ T5852] ? __fget_files+0x3a0/0x420 [ 143.837762][ T5852] ? __fget_files+0x2a/0x420 [ 143.837780][ T5852] ksys_read+0x145/0x250 [ 143.837793][ T5852] ? __pfx_ksys_read+0x10/0x10 [ 143.837806][ T5852] ? do_syscall_64+0xbe/0xfa0 [ 143.837822][ T5852] do_syscall_64+0xfa/0xfa0 [ 143.837834][ T5852] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.837848][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.837858][ T5852] ? clear_bhb_loop+0x60/0xb0 [ 143.837871][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.837880][ T5852] RIP: 0033:0x7f713538e0dc [ 143.837888][ T5852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.837894][ T5852] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.837902][ T5852] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 143.837907][ T5852] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 143.837911][ T5852] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 143.837915][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.837919][ T5852] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 143.837930][ T5852] [ 143.979943][ T5856] FAULT_INJECTION: forcing a failure. [ 143.979943][ T5856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.991362][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 143.991380][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.991386][ T5856] Call Trace: [ 143.991391][ T5856] [ 143.991396][ T5856] dump_stack_lvl+0x189/0x250 [ 143.991414][ T5856] ? __pfx____ratelimit+0x10/0x10 [ 143.991428][ T5856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.991442][ T5856] ? __pfx__printk+0x10/0x10 [ 143.991461][ T5856] should_fail_ex+0x414/0x560 [ 143.991478][ T5856] _copy_to_user+0x31/0xb0 [ 143.991497][ T5856] simple_read_from_buffer+0xe1/0x170 [ 143.991514][ T5856] proc_fail_nth_read+0x1b3/0x220 [ 143.991527][ T5856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.991540][ T5856] ? rw_verify_area+0x2a6/0x4d0 [ 143.991554][ T5856] ? __lock_acquire+0xab9/0xd20 [ 143.991562][ T5856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.991573][ T5856] vfs_read+0x200/0xa30 [ 143.991583][ T5856] ? fdget_pos+0x247/0x320 [ 143.991603][ T5856] ? __pfx___mutex_lock+0x10/0x10 [ 143.991627][ T5856] ? __pfx_vfs_read+0x10/0x10 [ 143.991640][ T5856] ? __fget_files+0x2a/0x420 2025/11/29 19:21:18 executed programs: 15 [ 143.991654][ T5856] ? __fget_files+0x3a0/0x420 [ 143.991669][ T5856] ? __fget_files+0x2a/0x420 [ 143.991686][ T5856] ksys_read+0x145/0x250 [ 143.991697][ T5856] ? __pfx_ksys_read+0x10/0x10 [ 143.991709][ T5856] ? do_syscall_64+0xbe/0xfa0 [ 143.991723][ T5856] do_syscall_64+0xfa/0xfa0 [ 143.991738][ T5856] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.991750][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.991759][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 143.991770][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.991778][ T5856] RIP: 0033:0x7f713538e0dc [ 143.991788][ T5856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.991795][ T5856] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.991805][ T5856] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 143.991812][ T5856] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 143.991818][ T5856] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 143.991823][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.991828][ T5856] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 143.991844][ T5856] [ 144.047058][ T5858] FAULT_INJECTION: forcing a failure. [ 144.047058][ T5858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.047093][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full) [ 144.047106][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.047113][ T5858] Call Trace: [ 144.047118][ T5858] [ 144.047123][ T5858] dump_stack_lvl+0x189/0x250 [ 144.047164][ T5858] ? __pfx____ratelimit+0x10/0x10 [ 144.047182][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.047196][ T5858] ? __pfx__printk+0x10/0x10 [ 144.047217][ T5858] should_fail_ex+0x414/0x560 [ 144.047237][ T5858] _copy_to_user+0x31/0xb0 [ 144.047252][ T5858] simple_read_from_buffer+0xe1/0x170 [ 144.047270][ T5858] proc_fail_nth_read+0x1b3/0x220 [ 144.047284][ T5858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.047297][ T5858] ? rw_verify_area+0x2a6/0x4d0 [ 144.047310][ T5858] ? __lock_acquire+0xab9/0xd20 [ 144.047320][ T5858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.047332][ T5858] vfs_read+0x200/0xa30 [ 144.047345][ T5858] ? fdget_pos+0x247/0x320 [ 144.047362][ T5858] ? __pfx___mutex_lock+0x10/0x10 [ 144.047376][ T5858] ? __pfx_vfs_read+0x10/0x10 [ 144.047389][ T5858] ? __fget_files+0x2a/0x420 [ 144.047404][ T5858] ? __fget_files+0x3a0/0x420 [ 144.047414][ T5858] ? __fget_files+0x2a/0x420 [ 144.047433][ T5858] ksys_read+0x145/0x250 [ 144.047447][ T5858] ? __pfx_ksys_read+0x10/0x10 [ 144.047462][ T5858] ? do_syscall_64+0xbe/0xfa0 [ 144.047479][ T5858] do_syscall_64+0xfa/0xfa0 [ 144.047492][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.047507][ T5858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.047518][ T5858] ? clear_bhb_loop+0x60/0xb0 [ 144.047529][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.047539][ T5858] RIP: 0033:0x7f713538e0dc [ 144.047548][ T5858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.047556][ T5858] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.047568][ T5858] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.047577][ T5858] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.047584][ T5858] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.047589][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.047594][ T5858] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.047613][ T5858] [ 144.120283][ T5860] FAULT_INJECTION: forcing a failure. [ 144.120283][ T5860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.120306][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 144.120319][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.120326][ T5860] Call Trace: [ 144.120340][ T5860] [ 144.120345][ T5860] dump_stack_lvl+0x189/0x250 [ 144.120379][ T5860] ? __pfx____ratelimit+0x10/0x10 [ 144.120404][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.120419][ T5860] ? __pfx__printk+0x10/0x10 [ 144.120439][ T5860] should_fail_ex+0x414/0x560 [ 144.120464][ T5860] _copy_to_user+0x31/0xb0 [ 144.120479][ T5860] simple_read_from_buffer+0xe1/0x170 [ 144.120498][ T5860] proc_fail_nth_read+0x1b3/0x220 [ 144.120513][ T5860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.120527][ T5860] ? rw_verify_area+0x2a6/0x4d0 [ 144.120540][ T5860] ? __lock_acquire+0xab9/0xd20 [ 144.120550][ T5860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.120562][ T5860] vfs_read+0x200/0xa30 [ 144.120574][ T5860] ? fdget_pos+0x247/0x320 [ 144.120593][ T5860] ? __pfx___mutex_lock+0x10/0x10 [ 144.120610][ T5860] ? __pfx_vfs_read+0x10/0x10 [ 144.120625][ T5860] ? __fget_files+0x2a/0x420 [ 144.120643][ T5860] ? __fget_files+0x3a0/0x420 [ 144.120656][ T5860] ? __fget_files+0x2a/0x420 [ 144.120678][ T5860] ksys_read+0x145/0x250 [ 144.120693][ T5860] ? __pfx_ksys_read+0x10/0x10 [ 144.120709][ T5860] ? do_syscall_64+0xbe/0xfa0 [ 144.120727][ T5860] do_syscall_64+0xfa/0xfa0 [ 144.120741][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.120756][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.120767][ T5860] ? clear_bhb_loop+0x60/0xb0 [ 144.120781][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.120791][ T5860] RIP: 0033:0x7f713538e0dc [ 144.120802][ T5860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.120821][ T5860] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.120834][ T5860] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.120842][ T5860] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.120848][ T5860] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.120855][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.120861][ T5860] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.120882][ T5860] [ 144.184579][ T5862] FAULT_INJECTION: forcing a failure. [ 144.184579][ T5862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.184605][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 144.184618][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.184626][ T5862] Call Trace: [ 144.184631][ T5862] [ 144.184636][ T5862] dump_stack_lvl+0x189/0x250 [ 144.184657][ T5862] ? __pfx____ratelimit+0x10/0x10 [ 144.184673][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.184688][ T5862] ? __pfx__printk+0x10/0x10 [ 144.184709][ T5862] should_fail_ex+0x414/0x560 [ 144.184729][ T5862] _copy_to_user+0x31/0xb0 [ 144.184744][ T5862] simple_read_from_buffer+0xe1/0x170 [ 144.184764][ T5862] proc_fail_nth_read+0x1b3/0x220 [ 144.184780][ T5862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.184794][ T5862] ? rw_verify_area+0x2a6/0x4d0 [ 144.184807][ T5862] ? __lock_acquire+0xab9/0xd20 [ 144.184817][ T5862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.184831][ T5862] vfs_read+0x200/0xa30 [ 144.184844][ T5862] ? fdget_pos+0x247/0x320 [ 144.184863][ T5862] ? __pfx___mutex_lock+0x10/0x10 [ 144.184881][ T5862] ? __pfx_vfs_read+0x10/0x10 [ 144.184896][ T5862] ? __fget_files+0x2a/0x420 [ 144.184952][ T5862] ? __fget_files+0x3a0/0x420 [ 144.184967][ T5862] ? __fget_files+0x2a/0x420 [ 144.184989][ T5862] ksys_read+0x145/0x250 [ 144.185005][ T5862] ? __pfx_ksys_read+0x10/0x10 [ 144.185020][ T5862] ? do_syscall_64+0xbe/0xfa0 [ 144.185039][ T5862] do_syscall_64+0xfa/0xfa0 [ 144.185053][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.185068][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.185079][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 144.185093][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.185104][ T5862] RIP: 0033:0x7f713538e0dc [ 144.185115][ T5862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.185124][ T5862] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.185138][ T5862] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.185146][ T5862] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.185153][ T5862] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.185160][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.185166][ T5862] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.185187][ T5862] [ 144.295352][ T5864] FAULT_INJECTION: forcing a failure. [ 144.295352][ T5864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.295379][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 144.295392][ T5864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.295399][ T5864] Call Trace: [ 144.295404][ T5864] [ 144.295409][ T5864] dump_stack_lvl+0x189/0x250 [ 144.295430][ T5864] ? __pfx____ratelimit+0x10/0x10 [ 144.295446][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.295461][ T5864] ? __pfx__printk+0x10/0x10 [ 144.295482][ T5864] should_fail_ex+0x414/0x560 [ 144.295501][ T5864] _copy_to_user+0x31/0xb0 [ 144.295522][ T5864] simple_read_from_buffer+0xe1/0x170 [ 144.295542][ T5864] proc_fail_nth_read+0x1b3/0x220 [ 144.295564][ T5864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.295579][ T5864] ? rw_verify_area+0x2a6/0x4d0 [ 144.295593][ T5864] ? __lock_acquire+0xab9/0xd20 [ 144.295603][ T5864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.295617][ T5864] vfs_read+0x200/0xa30 [ 144.295630][ T5864] ? fdget_pos+0x247/0x320 [ 144.295649][ T5864] ? __pfx___mutex_lock+0x10/0x10 [ 144.295666][ T5864] ? __pfx_vfs_read+0x10/0x10 [ 144.295681][ T5864] ? __fget_files+0x2a/0x420 [ 144.295700][ T5864] ? __fget_files+0x3a0/0x420 [ 144.295714][ T5864] ? __fget_files+0x2a/0x420 [ 144.295736][ T5864] ksys_read+0x145/0x250 [ 144.295753][ T5864] ? __pfx_ksys_read+0x10/0x10 [ 144.295769][ T5864] ? do_syscall_64+0xbe/0xfa0 [ 144.295787][ T5864] do_syscall_64+0xfa/0xfa0 [ 144.295800][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.295815][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.295826][ T5864] ? clear_bhb_loop+0x60/0xb0 [ 144.295840][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.295850][ T5864] RIP: 0033:0x7f713538e0dc [ 144.295861][ T5864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.295870][ T5864] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.295883][ T5864] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.295891][ T5864] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.295898][ T5864] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.295904][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.295911][ T5864] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.295932][ T5864] [ 144.384153][ T5867] FAULT_INJECTION: forcing a failure. [ 144.384153][ T5867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.384177][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 144.384189][ T5867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.384195][ T5867] Call Trace: [ 144.384200][ T5867] [ 144.384206][ T5867] dump_stack_lvl+0x189/0x250 [ 144.384224][ T5867] ? __pfx____ratelimit+0x10/0x10 [ 144.384240][ T5867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.384253][ T5867] ? __pfx__printk+0x10/0x10 [ 144.384271][ T5867] should_fail_ex+0x414/0x560 [ 144.384290][ T5867] _copy_to_user+0x31/0xb0 [ 144.384305][ T5867] simple_read_from_buffer+0xe1/0x170 [ 144.384321][ T5867] proc_fail_nth_read+0x1b3/0x220 [ 144.384338][ T5867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.384350][ T5867] ? rw_verify_area+0x2a6/0x4d0 [ 144.384364][ T5867] ? __lock_acquire+0xab9/0xd20 [ 144.384373][ T5867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.384384][ T5867] vfs_read+0x200/0xa30 [ 144.384398][ T5867] ? fdget_pos+0x247/0x320 [ 144.384414][ T5867] ? __pfx___mutex_lock+0x10/0x10 [ 144.384431][ T5867] ? __pfx_vfs_read+0x10/0x10 [ 144.384443][ T5867] ? __fget_files+0x2a/0x420 [ 144.384461][ T5867] ? __fget_files+0x3a0/0x420 [ 144.384473][ T5867] ? __fget_files+0x2a/0x420 [ 144.384493][ T5867] ksys_read+0x145/0x250 [ 144.384507][ T5867] ? __pfx_ksys_read+0x10/0x10 [ 144.384523][ T5867] ? do_syscall_64+0xbe/0xfa0 [ 144.384540][ T5867] do_syscall_64+0xfa/0xfa0 [ 144.384560][ T5867] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.384575][ T5867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.384585][ T5867] ? clear_bhb_loop+0x60/0xb0 [ 144.384597][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.384608][ T5867] RIP: 0033:0x7f713538e0dc [ 144.384618][ T5867] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.384627][ T5867] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.384639][ T5867] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.384646][ T5867] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.384652][ T5867] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.384657][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.384662][ T5867] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.384679][ T5867] [ 144.470041][ T5869] FAULT_INJECTION: forcing a failure. [ 144.470041][ T5869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.470066][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 144.470078][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.470085][ T5869] Call Trace: [ 144.470090][ T5869] [ 144.470095][ T5869] dump_stack_lvl+0x189/0x250 [ 144.470115][ T5869] ? __pfx____ratelimit+0x10/0x10 [ 144.470131][ T5869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.470145][ T5869] ? __pfx__printk+0x10/0x10 [ 144.470166][ T5869] should_fail_ex+0x414/0x560 [ 144.470186][ T5869] _copy_to_user+0x31/0xb0 [ 144.470202][ T5869] simple_read_from_buffer+0xe1/0x170 [ 144.470221][ T5869] proc_fail_nth_read+0x1b3/0x220 [ 144.470237][ T5869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.470252][ T5869] ? rw_verify_area+0x2a6/0x4d0 [ 144.470265][ T5869] ? __lock_acquire+0xab9/0xd20 [ 144.470275][ T5869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.470288][ T5869] vfs_read+0x200/0xa30 [ 144.470301][ T5869] ? fdget_pos+0x247/0x320 [ 144.470320][ T5869] ? __pfx___mutex_lock+0x10/0x10 [ 144.470337][ T5869] ? __pfx_vfs_read+0x10/0x10 [ 144.470351][ T5869] ? __fget_files+0x2a/0x420 [ 144.470370][ T5869] ? __fget_files+0x3a0/0x420 [ 144.470384][ T5869] ? __fget_files+0x2a/0x420 [ 144.470405][ T5869] ksys_read+0x145/0x250 [ 144.470421][ T5869] ? __pfx_ksys_read+0x10/0x10 [ 144.470438][ T5869] ? do_syscall_64+0xbe/0xfa0 [ 144.470456][ T5869] do_syscall_64+0xfa/0xfa0 [ 144.470468][ T5869] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.470480][ T5869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.470489][ T5869] ? clear_bhb_loop+0x60/0xb0 [ 144.470502][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.470512][ T5869] RIP: 0033:0x7f713538e0dc [ 144.470523][ T5869] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.470533][ T5869] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.470555][ T5869] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.470563][ T5869] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.470570][ T5869] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.470576][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.470583][ T5869] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.470604][ T5869] [ 144.558192][ T5872] FAULT_INJECTION: forcing a failure. [ 144.558192][ T5872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.558216][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 144.558229][ T5872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.558235][ T5872] Call Trace: [ 144.558240][ T5872] [ 144.558246][ T5872] dump_stack_lvl+0x189/0x250 [ 144.558266][ T5872] ? __pfx____ratelimit+0x10/0x10 [ 144.558283][ T5872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.558298][ T5872] ? __pfx__printk+0x10/0x10 [ 144.558319][ T5872] should_fail_ex+0x414/0x560 [ 144.558339][ T5872] _copy_to_user+0x31/0xb0 [ 144.558354][ T5872] simple_read_from_buffer+0xe1/0x170 [ 144.558373][ T5872] proc_fail_nth_read+0x1b3/0x220 [ 144.558388][ T5872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.558403][ T5872] ? rw_verify_area+0x2a6/0x4d0 [ 144.558416][ T5872] ? __lock_acquire+0xab9/0xd20 [ 144.558426][ T5872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.558440][ T5872] vfs_read+0x200/0xa30 [ 144.558453][ T5872] ? fdget_pos+0x247/0x320 [ 144.558472][ T5872] ? __pfx___mutex_lock+0x10/0x10 [ 144.558489][ T5872] ? __pfx_vfs_read+0x10/0x10 [ 144.558504][ T5872] ? __fget_files+0x2a/0x420 [ 144.558522][ T5872] ? __fget_files+0x3a0/0x420 [ 144.558537][ T5872] ? __fget_files+0x2a/0x420 [ 144.558570][ T5872] ksys_read+0x145/0x250 [ 144.558586][ T5872] ? __pfx_ksys_read+0x10/0x10 [ 144.558602][ T5872] ? do_syscall_64+0xbe/0xfa0 [ 144.558621][ T5872] do_syscall_64+0xfa/0xfa0 [ 144.558635][ T5872] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.558650][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.558661][ T5872] ? clear_bhb_loop+0x60/0xb0 [ 144.558675][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.558686][ T5872] RIP: 0033:0x7f713538e0dc [ 144.558697][ T5872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.558706][ T5872] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.558719][ T5872] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.558727][ T5872] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.558734][ T5872] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.558740][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.558747][ T5872] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.558768][ T5872] [ 144.644367][ T5874] FAULT_INJECTION: forcing a failure. [ 144.644367][ T5874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.644393][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(full) [ 144.644406][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.644413][ T5874] Call Trace: [ 144.644417][ T5874] [ 144.644423][ T5874] dump_stack_lvl+0x189/0x250 [ 144.644443][ T5874] ? __pfx____ratelimit+0x10/0x10 [ 144.644458][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.644473][ T5874] ? __pfx__printk+0x10/0x10 [ 144.644494][ T5874] should_fail_ex+0x414/0x560 [ 144.644514][ T5874] _copy_to_user+0x31/0xb0 [ 144.644529][ T5874] simple_read_from_buffer+0xe1/0x170 [ 144.644555][ T5874] proc_fail_nth_read+0x1b3/0x220 [ 144.644571][ T5874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.644585][ T5874] ? rw_verify_area+0x2a6/0x4d0 [ 144.644598][ T5874] ? __lock_acquire+0xab9/0xd20 [ 144.644608][ T5874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.644622][ T5874] vfs_read+0x200/0xa30 [ 144.644635][ T5874] ? fdget_pos+0x247/0x320 [ 144.644653][ T5874] ? __pfx___mutex_lock+0x10/0x10 [ 144.644670][ T5874] ? __pfx_vfs_read+0x10/0x10 [ 144.644685][ T5874] ? __fget_files+0x2a/0x420 [ 144.644703][ T5874] ? __fget_files+0x3a0/0x420 [ 144.644717][ T5874] ? __fget_files+0x2a/0x420 [ 144.644739][ T5874] ksys_read+0x145/0x250 [ 144.644754][ T5874] ? __pfx_ksys_read+0x10/0x10 [ 144.644770][ T5874] ? do_syscall_64+0xbe/0xfa0 [ 144.644787][ T5874] do_syscall_64+0xfa/0xfa0 [ 144.644800][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.644815][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.644825][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 144.644837][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.644846][ T5874] RIP: 0033:0x7f713538e0dc [ 144.644855][ T5874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.644865][ T5874] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.644878][ T5874] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.644886][ T5874] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.644892][ T5874] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.644931][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.644938][ T5874] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.644958][ T5874] [ 144.703090][ T5876] FAULT_INJECTION: forcing a failure. [ 144.703090][ T5876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.703116][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 144.703130][ T5876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.703137][ T5876] Call Trace: [ 144.703142][ T5876] [ 144.703147][ T5876] dump_stack_lvl+0x189/0x250 [ 144.703166][ T5876] ? __pfx____ratelimit+0x10/0x10 [ 144.703182][ T5876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.703197][ T5876] ? __pfx__printk+0x10/0x10 [ 144.703218][ T5876] should_fail_ex+0x414/0x560 [ 144.703238][ T5876] _copy_to_user+0x31/0xb0 [ 144.703253][ T5876] simple_read_from_buffer+0xe1/0x170 [ 144.703273][ T5876] proc_fail_nth_read+0x1b3/0x220 [ 144.703288][ T5876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.703303][ T5876] ? rw_verify_area+0x2a6/0x4d0 [ 144.703316][ T5876] ? __lock_acquire+0xab9/0xd20 [ 144.703326][ T5876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.703340][ T5876] vfs_read+0x200/0xa30 [ 144.703353][ T5876] ? fdget_pos+0x247/0x320 [ 144.703371][ T5876] ? __pfx___mutex_lock+0x10/0x10 [ 144.703389][ T5876] ? __pfx_vfs_read+0x10/0x10 [ 144.703404][ T5876] ? __fget_files+0x2a/0x420 [ 144.703422][ T5876] ? __fget_files+0x3a0/0x420 [ 144.703437][ T5876] ? __fget_files+0x2a/0x420 [ 144.703467][ T5876] ksys_read+0x145/0x250 [ 144.703481][ T5876] ? __pfx_ksys_read+0x10/0x10 [ 144.703495][ T5876] ? do_syscall_64+0xbe/0xfa0 [ 144.703511][ T5876] do_syscall_64+0xfa/0xfa0 [ 144.703524][ T5876] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.703539][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.703556][ T5876] ? clear_bhb_loop+0x60/0xb0 [ 144.703570][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.703581][ T5876] RIP: 0033:0x7f713538e0dc [ 144.703591][ T5876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.703600][ T5876] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.703613][ T5876] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.703621][ T5876] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.703628][ T5876] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.703635][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.703641][ T5876] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.703662][ T5876] [ 144.773265][ T5878] FAULT_INJECTION: forcing a failure. [ 144.773265][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.773291][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 144.773304][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.773311][ T5878] Call Trace: [ 144.773316][ T5878] [ 144.773321][ T5878] dump_stack_lvl+0x189/0x250 [ 144.773341][ T5878] ? __pfx____ratelimit+0x10/0x10 [ 144.773356][ T5878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.773372][ T5878] ? __pfx__printk+0x10/0x10 [ 144.773392][ T5878] should_fail_ex+0x414/0x560 [ 144.773412][ T5878] _copy_to_user+0x31/0xb0 [ 144.773427][ T5878] simple_read_from_buffer+0xe1/0x170 [ 144.773447][ T5878] proc_fail_nth_read+0x1b3/0x220 [ 144.773462][ T5878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.773477][ T5878] ? rw_verify_area+0x2a6/0x4d0 [ 144.773490][ T5878] ? __lock_acquire+0xab9/0xd20 [ 144.773500][ T5878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.773513][ T5878] vfs_read+0x200/0xa30 [ 144.773526][ T5878] ? fdget_pos+0x247/0x320 [ 144.773552][ T5878] ? __pfx___mutex_lock+0x10/0x10 [ 144.773570][ T5878] ? __pfx_vfs_read+0x10/0x10 [ 144.773585][ T5878] ? __fget_files+0x2a/0x420 [ 144.773603][ T5878] ? __fget_files+0x3a0/0x420 [ 144.773617][ T5878] ? __fget_files+0x2a/0x420 [ 144.773638][ T5878] ksys_read+0x145/0x250 [ 144.773654][ T5878] ? __pfx_ksys_read+0x10/0x10 [ 144.773671][ T5878] ? do_syscall_64+0xbe/0xfa0 [ 144.773689][ T5878] do_syscall_64+0xfa/0xfa0 [ 144.773703][ T5878] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.773717][ T5878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.773729][ T5878] ? clear_bhb_loop+0x60/0xb0 [ 144.773743][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.773753][ T5878] RIP: 0033:0x7f713538e0dc [ 144.773765][ T5878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.773773][ T5878] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.773787][ T5878] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.773795][ T5878] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.773801][ T5878] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.773808][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.773814][ T5878] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.773835][ T5878] [ 144.894972][ T5882] FAULT_INJECTION: forcing a failure. [ 144.894972][ T5882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.894998][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(full) [ 144.895011][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.895018][ T5882] Call Trace: [ 144.895023][ T5882] [ 144.895028][ T5882] dump_stack_lvl+0x189/0x250 [ 144.895049][ T5882] ? __pfx____ratelimit+0x10/0x10 [ 144.895065][ T5882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.895080][ T5882] ? __pfx__printk+0x10/0x10 [ 144.895101][ T5882] should_fail_ex+0x414/0x560 [ 144.895122][ T5882] _copy_to_user+0x31/0xb0 [ 144.895137][ T5882] simple_read_from_buffer+0xe1/0x170 [ 144.895156][ T5882] proc_fail_nth_read+0x1b3/0x220 [ 144.895172][ T5882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.895187][ T5882] ? rw_verify_area+0x2a6/0x4d0 [ 144.895201][ T5882] ? __lock_acquire+0xab9/0xd20 [ 144.895211][ T5882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.895224][ T5882] vfs_read+0x200/0xa30 [ 144.895236][ T5882] ? fdget_pos+0x247/0x320 [ 144.895253][ T5882] ? __pfx___mutex_lock+0x10/0x10 [ 144.895271][ T5882] ? __pfx_vfs_read+0x10/0x10 [ 144.895286][ T5882] ? __fget_files+0x2a/0x420 [ 144.895305][ T5882] ? __fget_files+0x3a0/0x420 [ 144.895320][ T5882] ? __fget_files+0x2a/0x420 [ 144.895341][ T5882] ksys_read+0x145/0x250 [ 144.895357][ T5882] ? __pfx_ksys_read+0x10/0x10 [ 144.895373][ T5882] ? do_syscall_64+0xbe/0xfa0 [ 144.895392][ T5882] do_syscall_64+0xfa/0xfa0 [ 144.895406][ T5882] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.895421][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.895433][ T5882] ? clear_bhb_loop+0x60/0xb0 [ 144.895447][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.895458][ T5882] RIP: 0033:0x7f713538e0dc [ 144.895469][ T5882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.895479][ T5882] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.895492][ T5882] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.895500][ T5882] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.895507][ T5882] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.895514][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.895526][ T5882] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.895557][ T5882] [ 144.965928][ T5884] FAULT_INJECTION: forcing a failure. [ 144.965928][ T5884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.965952][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 144.965965][ T5884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.965972][ T5884] Call Trace: [ 144.965977][ T5884] [ 144.965982][ T5884] dump_stack_lvl+0x189/0x250 [ 144.966003][ T5884] ? __pfx____ratelimit+0x10/0x10 [ 144.966019][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.966034][ T5884] ? __pfx__printk+0x10/0x10 [ 144.966055][ T5884] should_fail_ex+0x414/0x560 [ 144.966075][ T5884] _copy_to_user+0x31/0xb0 [ 144.966090][ T5884] simple_read_from_buffer+0xe1/0x170 [ 144.966111][ T5884] proc_fail_nth_read+0x1b3/0x220 [ 144.966126][ T5884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.966141][ T5884] ? rw_verify_area+0x2a6/0x4d0 [ 144.966155][ T5884] ? __lock_acquire+0xab9/0xd20 [ 144.966164][ T5884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.966178][ T5884] vfs_read+0x200/0xa30 [ 144.966191][ T5884] ? fdget_pos+0x247/0x320 [ 144.966210][ T5884] ? __pfx___mutex_lock+0x10/0x10 [ 144.966227][ T5884] ? __pfx_vfs_read+0x10/0x10 [ 144.966240][ T5884] ? __fget_files+0x2a/0x420 [ 144.966257][ T5884] ? __fget_files+0x3a0/0x420 [ 144.966271][ T5884] ? __fget_files+0x2a/0x420 [ 144.966290][ T5884] ksys_read+0x145/0x250 [ 144.966303][ T5884] ? __pfx_ksys_read+0x10/0x10 [ 144.966318][ T5884] ? do_syscall_64+0xbe/0xfa0 [ 144.966334][ T5884] do_syscall_64+0xfa/0xfa0 [ 144.966347][ T5884] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.966360][ T5884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.966371][ T5884] ? clear_bhb_loop+0x60/0xb0 [ 144.966384][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.966393][ T5884] RIP: 0033:0x7f713538e0dc [ 144.966404][ T5884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.966412][ T5884] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.966425][ T5884] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 144.966433][ T5884] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 144.966440][ T5884] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 144.966447][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.966453][ T5884] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 144.966474][ T5884] [ 145.026073][ T5886] FAULT_INJECTION: forcing a failure. [ 145.026073][ T5886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.026098][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 145.026111][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.026118][ T5886] Call Trace: [ 145.026123][ T5886] [ 145.026128][ T5886] dump_stack_lvl+0x189/0x250 [ 145.026148][ T5886] ? __pfx____ratelimit+0x10/0x10 [ 145.026162][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.026175][ T5886] ? __pfx__printk+0x10/0x10 [ 145.026192][ T5886] should_fail_ex+0x414/0x560 [ 145.026213][ T5886] _copy_to_user+0x31/0xb0 [ 145.026225][ T5886] simple_read_from_buffer+0xe1/0x170 [ 145.026243][ T5886] proc_fail_nth_read+0x1b3/0x220 [ 145.026257][ T5886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.026271][ T5886] ? rw_verify_area+0x2a6/0x4d0 [ 145.026282][ T5886] ? __lock_acquire+0xab9/0xd20 [ 145.026293][ T5886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.026306][ T5886] vfs_read+0x200/0xa30 [ 145.026318][ T5886] ? fdget_pos+0x247/0x320 [ 145.026335][ T5886] ? __pfx___mutex_lock+0x10/0x10 [ 145.026349][ T5886] ? __pfx_vfs_read+0x10/0x10 [ 145.026362][ T5886] ? __fget_files+0x2a/0x420 [ 145.026377][ T5886] ? __fget_files+0x3a0/0x420 [ 145.026389][ T5886] ? __fget_files+0x2a/0x420 [ 145.026408][ T5886] ksys_read+0x145/0x250 [ 145.026422][ T5886] ? __pfx_ksys_read+0x10/0x10 [ 145.026438][ T5886] ? do_syscall_64+0xbe/0xfa0 [ 145.026457][ T5886] do_syscall_64+0xfa/0xfa0 [ 145.026469][ T5886] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.026482][ T5886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.026493][ T5886] ? clear_bhb_loop+0x60/0xb0 [ 145.026506][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.026516][ T5886] RIP: 0033:0x7f713538e0dc [ 145.026527][ T5886] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.026536][ T5886] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.026549][ T5886] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.026558][ T5886] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.026565][ T5886] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.026579][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.026586][ T5886] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.026626][ T5886] [ 145.094317][ T5888] FAULT_INJECTION: forcing a failure. [ 145.094317][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.094342][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(full) [ 145.094355][ T5888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 2025/11/29 19:21:23 executed programs: 100 [ 145.094361][ T5888] Call Trace: [ 145.094367][ T5888] [ 145.094372][ T5888] dump_stack_lvl+0x189/0x250 [ 145.094393][ T5888] ? __pfx____ratelimit+0x10/0x10 [ 145.094409][ T5888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.094424][ T5888] ? __pfx__printk+0x10/0x10 [ 145.094445][ T5888] should_fail_ex+0x414/0x560 [ 145.094466][ T5888] _copy_to_user+0x31/0xb0 [ 145.094481][ T5888] simple_read_from_buffer+0xe1/0x170 [ 145.094501][ T5888] proc_fail_nth_read+0x1b3/0x220 [ 145.094516][ T5888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.094531][ T5888] ? rw_verify_area+0x2a6/0x4d0 [ 145.094544][ T5888] ? __lock_acquire+0xab9/0xd20 [ 145.094554][ T5888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.094576][ T5888] vfs_read+0x200/0xa30 [ 145.094590][ T5888] ? fdget_pos+0x247/0x320 [ 145.094608][ T5888] ? __pfx___mutex_lock+0x10/0x10 [ 145.094626][ T5888] ? __pfx_vfs_read+0x10/0x10 [ 145.094640][ T5888] ? __fget_files+0x2a/0x420 [ 145.094659][ T5888] ? __fget_files+0x3a0/0x420 [ 145.094673][ T5888] ? __fget_files+0x2a/0x420 [ 145.094695][ T5888] ksys_read+0x145/0x250 [ 145.094710][ T5888] ? __pfx_ksys_read+0x10/0x10 [ 145.094727][ T5888] ? do_syscall_64+0xbe/0xfa0 [ 145.094745][ T5888] do_syscall_64+0xfa/0xfa0 [ 145.094757][ T5888] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.094771][ T5888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.094782][ T5888] ? clear_bhb_loop+0x60/0xb0 [ 145.094796][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.094807][ T5888] RIP: 0033:0x7f713538e0dc [ 145.094818][ T5888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.094826][ T5888] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.094840][ T5888] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.094848][ T5888] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.094855][ T5888] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.094862][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.094868][ T5888] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.094890][ T5888] [ 145.151143][ T5890] FAULT_INJECTION: forcing a failure. [ 145.151143][ T5890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.151169][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 145.151182][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.151189][ T5890] Call Trace: [ 145.151194][ T5890] [ 145.151200][ T5890] dump_stack_lvl+0x189/0x250 [ 145.151219][ T5890] ? __pfx____ratelimit+0x10/0x10 [ 145.151235][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.151249][ T5890] ? __pfx__printk+0x10/0x10 [ 145.151270][ T5890] should_fail_ex+0x414/0x560 [ 145.151289][ T5890] _copy_to_user+0x31/0xb0 [ 145.151304][ T5890] simple_read_from_buffer+0xe1/0x170 [ 145.151323][ T5890] proc_fail_nth_read+0x1b3/0x220 [ 145.151340][ T5890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.151355][ T5890] ? rw_verify_area+0x2a6/0x4d0 [ 145.151368][ T5890] ? __lock_acquire+0xab9/0xd20 [ 145.151378][ T5890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.151391][ T5890] vfs_read+0x200/0xa30 [ 145.151404][ T5890] ? fdget_pos+0x247/0x320 [ 145.151422][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 145.151440][ T5890] ? __pfx_vfs_read+0x10/0x10 [ 145.151455][ T5890] ? __fget_files+0x2a/0x420 [ 145.151473][ T5890] ? __fget_files+0x3a0/0x420 [ 145.151487][ T5890] ? __fget_files+0x2a/0x420 [ 145.151509][ T5890] ksys_read+0x145/0x250 [ 145.151523][ T5890] ? __pfx_ksys_read+0x10/0x10 [ 145.151539][ T5890] ? do_syscall_64+0xbe/0xfa0 [ 145.151558][ T5890] do_syscall_64+0xfa/0xfa0 [ 145.151579][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.151595][ T5890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.151606][ T5890] ? clear_bhb_loop+0x60/0xb0 [ 145.151619][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.151630][ T5890] RIP: 0033:0x7f713538e0dc [ 145.151641][ T5890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.151650][ T5890] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.151663][ T5890] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.151671][ T5890] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.151678][ T5890] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.151684][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.151691][ T5890] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.151711][ T5890] [ 145.212741][ T5892] FAULT_INJECTION: forcing a failure. [ 145.212741][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.212766][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) [ 145.212779][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.212786][ T5892] Call Trace: [ 145.212791][ T5892] [ 145.212796][ T5892] dump_stack_lvl+0x189/0x250 [ 145.212817][ T5892] ? __pfx____ratelimit+0x10/0x10 [ 145.212832][ T5892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.212847][ T5892] ? __pfx__printk+0x10/0x10 [ 145.212867][ T5892] should_fail_ex+0x414/0x560 [ 145.212889][ T5892] _copy_to_user+0x31/0xb0 [ 145.212931][ T5892] simple_read_from_buffer+0xe1/0x170 [ 145.212950][ T5892] proc_fail_nth_read+0x1b3/0x220 [ 145.212966][ T5892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.212981][ T5892] ? rw_verify_area+0x2a6/0x4d0 [ 145.212995][ T5892] ? __lock_acquire+0xab9/0xd20 [ 145.213005][ T5892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.213018][ T5892] vfs_read+0x200/0xa30 [ 145.213031][ T5892] ? fdget_pos+0x247/0x320 [ 145.213050][ T5892] ? __pfx___mutex_lock+0x10/0x10 [ 145.213067][ T5892] ? __pfx_vfs_read+0x10/0x10 [ 145.213082][ T5892] ? __fget_files+0x2a/0x420 [ 145.213100][ T5892] ? __fget_files+0x3a0/0x420 [ 145.213115][ T5892] ? __fget_files+0x2a/0x420 [ 145.213136][ T5892] ksys_read+0x145/0x250 [ 145.213152][ T5892] ? __pfx_ksys_read+0x10/0x10 [ 145.213168][ T5892] ? do_syscall_64+0xbe/0xfa0 [ 145.213187][ T5892] do_syscall_64+0xfa/0xfa0 [ 145.213201][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.213217][ T5892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.213228][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 145.213242][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.213253][ T5892] RIP: 0033:0x7f713538e0dc [ 145.213264][ T5892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.213273][ T5892] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.213286][ T5892] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.213294][ T5892] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.213300][ T5892] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.213307][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.213313][ T5892] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.213333][ T5892] [ 145.277025][ T5894] FAULT_INJECTION: forcing a failure. [ 145.277025][ T5894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.277049][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 145.277062][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.277069][ T5894] Call Trace: [ 145.277074][ T5894] [ 145.277079][ T5894] dump_stack_lvl+0x189/0x250 [ 145.277099][ T5894] ? __pfx____ratelimit+0x10/0x10 [ 145.277115][ T5894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.277130][ T5894] ? __pfx__printk+0x10/0x10 [ 145.277169][ T5894] should_fail_ex+0x414/0x560 [ 145.277190][ T5894] _copy_to_user+0x31/0xb0 [ 145.277205][ T5894] simple_read_from_buffer+0xe1/0x170 [ 145.277225][ T5894] proc_fail_nth_read+0x1b3/0x220 [ 145.277241][ T5894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.277255][ T5894] ? rw_verify_area+0x2a6/0x4d0 [ 145.277268][ T5894] ? __lock_acquire+0xab9/0xd20 [ 145.277278][ T5894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.277292][ T5894] vfs_read+0x200/0xa30 [ 145.277305][ T5894] ? fdget_pos+0x247/0x320 [ 145.277323][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 145.277341][ T5894] ? __pfx_vfs_read+0x10/0x10 [ 145.277356][ T5894] ? __fget_files+0x2a/0x420 [ 145.277374][ T5894] ? __fget_files+0x3a0/0x420 [ 145.277389][ T5894] ? __fget_files+0x2a/0x420 [ 145.277410][ T5894] ksys_read+0x145/0x250 [ 145.277426][ T5894] ? __pfx_ksys_read+0x10/0x10 [ 145.277442][ T5894] ? do_syscall_64+0xbe/0xfa0 [ 145.277460][ T5894] do_syscall_64+0xfa/0xfa0 [ 145.277473][ T5894] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.277488][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.277499][ T5894] ? clear_bhb_loop+0x60/0xb0 [ 145.277513][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.277524][ T5894] RIP: 0033:0x7f713538e0dc [ 145.277534][ T5894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.277543][ T5894] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.277556][ T5894] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.277563][ T5894] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.277576][ T5894] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.277583][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.277589][ T5894] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.277610][ T5894] [ 145.335695][ T5896] FAULT_INJECTION: forcing a failure. [ 145.335695][ T5896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.335720][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT(full) [ 145.335732][ T5896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.335739][ T5896] Call Trace: [ 145.335744][ T5896] [ 145.335749][ T5896] dump_stack_lvl+0x189/0x250 [ 145.335768][ T5896] ? __pfx____ratelimit+0x10/0x10 [ 145.335784][ T5896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.335799][ T5896] ? __pfx__printk+0x10/0x10 [ 145.335819][ T5896] should_fail_ex+0x414/0x560 [ 145.335840][ T5896] _copy_to_user+0x31/0xb0 [ 145.335856][ T5896] simple_read_from_buffer+0xe1/0x170 [ 145.335875][ T5896] proc_fail_nth_read+0x1b3/0x220 [ 145.335891][ T5896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.335906][ T5896] ? rw_verify_area+0x2a6/0x4d0 [ 145.335919][ T5896] ? __lock_acquire+0xab9/0xd20 [ 145.335930][ T5896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.335943][ T5896] vfs_read+0x200/0xa30 [ 145.335957][ T5896] ? fdget_pos+0x247/0x320 [ 145.335976][ T5896] ? __pfx___mutex_lock+0x10/0x10 [ 145.335993][ T5896] ? __pfx_vfs_read+0x10/0x10 [ 145.336007][ T5896] ? __fget_files+0x2a/0x420 [ 145.336026][ T5896] ? __fget_files+0x3a0/0x420 [ 145.336040][ T5896] ? __fget_files+0x2a/0x420 [ 145.336061][ T5896] ksys_read+0x145/0x250 [ 145.336076][ T5896] ? __pfx_ksys_read+0x10/0x10 [ 145.336092][ T5896] ? do_syscall_64+0xbe/0xfa0 [ 145.336110][ T5896] do_syscall_64+0xfa/0xfa0 [ 145.336124][ T5896] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.336139][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.336151][ T5896] ? clear_bhb_loop+0x60/0xb0 [ 145.336164][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.336173][ T5896] RIP: 0033:0x7f713538e0dc [ 145.336183][ T5896] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.336191][ T5896] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.336205][ T5896] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.336213][ T5896] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.336219][ T5896] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.336226][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.336232][ T5896] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.336248][ T5896] [ 145.403605][ T5898] FAULT_INJECTION: forcing a failure. [ 145.403605][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.403630][ T5898] CPU: 0 UID: 0 PID: 5898 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 145.403642][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.403649][ T5898] Call Trace: [ 145.403655][ T5898] [ 145.403660][ T5898] dump_stack_lvl+0x189/0x250 [ 145.403679][ T5898] ? __pfx____ratelimit+0x10/0x10 [ 145.403695][ T5898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.403710][ T5898] ? __pfx__printk+0x10/0x10 [ 145.403730][ T5898] should_fail_ex+0x414/0x560 [ 145.403750][ T5898] _copy_to_user+0x31/0xb0 [ 145.403765][ T5898] simple_read_from_buffer+0xe1/0x170 [ 145.403784][ T5898] proc_fail_nth_read+0x1b3/0x220 [ 145.403800][ T5898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.403815][ T5898] ? rw_verify_area+0x2a6/0x4d0 [ 145.403827][ T5898] ? __lock_acquire+0xab9/0xd20 [ 145.403837][ T5898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.403851][ T5898] vfs_read+0x200/0xa30 [ 145.403864][ T5898] ? fdget_pos+0x247/0x320 [ 145.403883][ T5898] ? __pfx___mutex_lock+0x10/0x10 [ 145.403900][ T5898] ? __pfx_vfs_read+0x10/0x10 [ 145.403914][ T5898] ? __fget_files+0x2a/0x420 [ 145.403932][ T5898] ? __fget_files+0x3a0/0x420 [ 145.403947][ T5898] ? __fget_files+0x2a/0x420 [ 145.403968][ T5898] ksys_read+0x145/0x250 [ 145.403984][ T5898] ? __pfx_ksys_read+0x10/0x10 [ 145.404001][ T5898] ? do_syscall_64+0xbe/0xfa0 [ 145.404019][ T5898] do_syscall_64+0xfa/0xfa0 [ 145.404033][ T5898] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.404048][ T5898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.404060][ T5898] ? clear_bhb_loop+0x60/0xb0 [ 145.404074][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.404085][ T5898] RIP: 0033:0x7f713538e0dc [ 145.404095][ T5898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.404104][ T5898] RSP: 002b:00007f7136234030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.404117][ T5898] RAX: ffffffffffffffda RBX: 00007f71355e5fa0 RCX: 00007f713538e0dc [ 145.404125][ T5898] RDX: 000000000000000f RSI: 00007f71362340a0 RDI: 0000000000000009 [ 145.404132][ T5898] RBP: 00007f7136234090 R08: 0000000000000000 R09: 0000000000000000 [ 145.404139][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.404145][ T5898] R13: 00007f71355e6038 R14: 00007f71355e5fa0 R15: 00007ffc5b1ea218 [ 145.404166][ T5898] [ 145.460433][ T5900] FAULT_INJECTION: forcing a failure. [ 145.460433][ T5900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.460459][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full)