last executing test programs: 28.559378933s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000051c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x5dc}], 0x1}, 0x4) 27.535958065s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x1ff) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x1ff) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) 27.535785769s ago: executing program 0 (id=1): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xe23, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x5, 0xf, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xbed27f4c}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 27.463328587s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x1000}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') 27.251763468s ago: executing program 3 (id=7): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) nanosleep(&(0x7f00000000c0)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_RESET={{0x1}}}}, 0x7) nanosleep(&(0x7f0000000140)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1}, {0x0, '\x00\x00\x00\x00@\x00'}}}}, 0xf) nanosleep(&(0x7f00000001c0)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x1}, {0x0, 0x6, 0x0, 0x6}}}}, 0xf) nanosleep(&(0x7f0000000240)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_read_bd_addr={{0x1}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) nanosleep(&(0x7f00000002c0)={0x0, 0x8f0d180}, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x1}}}}, 0x47) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, '@\x00'}}}}, 0xf) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x1}}}}, 0xa) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x1}}}}, 0xf) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0x1, 0xc01}}}}, 0x7) 21.849417557s ago: executing program 0 (id=10): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='1', 0x1) 21.689634222s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='md0', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='7:0', 0x3) 16.576849644s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./myconfig/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./myconfig/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='0x0525', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./myconfig/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='0xa4a6', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000002100)='./mydev\x00', &(0x7f0000002200)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./mydev/ttyACM0\x00', 0x802, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./mydev/kmsg\x00', 0x1, 0x0) write(r5, &(0x7f0000002500)='hello world\n', 0xc) write(r4, &(0x7f0000002500)='hello world\n', 0xc) 16.518687726s ago: executing program 32 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./myconfig/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./myconfig/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='0x0525', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./myconfig/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000001000)='0xa4a6', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='dummy_udc.0', 0xb) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000002100)='./mydev\x00', &(0x7f0000002200)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./mydev/ttyACM0\x00', 0x802, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./mydev/kmsg\x00', 0x1, 0x0) write(r5, &(0x7f0000002500)='hello world\n', 0xc) write(r4, &(0x7f0000002500)='hello world\n', 0xc) 16.476859936s ago: executing program 3 (id=18): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f0000000700), 0x8, 0xd000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000840), 0x8, 0x30000) pread64(r0, &(0x7f0000000880), 0x8, 0x40000) pread64(r0, &(0x7f00000008c0), 0x8, 0x50000) pread64(r0, &(0x7f0000000900), 0x8, 0x60000) pread64(r0, &(0x7f0000000940), 0x8, 0x70000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f00000009c0), 0x8, 0x90000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) 16.476690426s ago: executing program 33 (id=18): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f0000000700), 0x8, 0xd000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) pread64(r0, &(0x7f0000000840), 0x8, 0x30000) pread64(r0, &(0x7f0000000880), 0x8, 0x40000) pread64(r0, &(0x7f00000008c0), 0x8, 0x50000) pread64(r0, &(0x7f0000000900), 0x8, 0x60000) pread64(r0, &(0x7f0000000940), 0x8, 0x70000) pread64(r0, &(0x7f0000000980), 0x8, 0x80000) pread64(r0, &(0x7f00000009c0), 0x8, 0x90000) pread64(r0, &(0x7f0000000a00), 0x8, 0xa0000) pread64(r0, &(0x7f0000000a40), 0x8, 0xb0000) 14.406630616s ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r2, &(0x7f00000003f0)='-1\n\x00', 0x3) close(r2) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r3) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x0, 0x2) write$midi(r4, &(0x7f0000000900)='12345678', 0x8) nanosleep(&(0x7f0000000700)={0x0, 0xbebc200}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000b00)='\n\x00', 0x1) close(r5) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 13.803380318s ago: executing program 1 (id=41): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f0000000700), 0x8, 0xd000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) 13.601086554s ago: executing program 1 (id=43): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f0000000700), 0x8, 0xd000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) 13.432185519s ago: executing program 1 (id=44): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000005c0), 0x8, 0x8000) pread64(r0, &(0x7f0000000600), 0x8, 0x9000) pread64(r0, &(0x7f0000000640), 0x8, 0xa000) pread64(r0, &(0x7f0000000680), 0x8, 0xb000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f0000000700), 0x8, 0xd000) pread64(r0, &(0x7f0000000740), 0x8, 0xe000) pread64(r0, &(0x7f0000000780), 0x8, 0xf000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) pread64(r0, &(0x7f0000000800), 0x8, 0x20000) 13.391406271s ago: executing program 2 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x1000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') 13.255191687s ago: executing program 1 (id=46): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 13.214267823s ago: executing program 2 (id=47): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000440), 0x8, 0x2000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) 8.086383244s ago: executing program 2 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 7.96037226s ago: executing program 2 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x1000}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') 7.856933091s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x1000}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') 3.802436473s ago: executing program 4 (id=25): mount(0x0, 0x0, 0x0, 0x8024, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x48001, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x3, 'lblcr\x00', 0x13, 0x0, 0xc}, 0x2c) 3.566018649s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_ud', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello again\n', 0xc) close(r2) 3.52281608s ago: executing program 34 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_ud', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello again\n', 0xc) close(r2) 3.465282141s ago: executing program 2 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_ud', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello wo', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello again', 0xb) close(r2) 3.465143741s ago: executing program 35 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_ud', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello wo', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='hello again', 0xb) close(r2) 1.791292032s ago: executing program 5 (id=57): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='bfq\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) syz_clone(0x10f00, &(0x7f00000002c0), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) pread64(r0, &(0x7f00000003c0), 0x8, 0x0) pread64(r0, &(0x7f0000000400), 0x8, 0x1000) pread64(r0, &(0x7f0000000480), 0x8, 0x3000) pread64(r0, &(0x7f00000004c0), 0x8, 0x4000) pread64(r0, &(0x7f0000000500), 0x8, 0x5000) pread64(r0, &(0x7f0000000540), 0x8, 0x6000) pread64(r0, &(0x7f0000000580), 0x8, 0x7000) pread64(r0, &(0x7f00000006c0), 0x8, 0xc000) pread64(r0, &(0x7f00000007c0), 0x8, 0x10000) 1.582110034s ago: executing program 5 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 1.20619442s ago: executing program 5 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pfn\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='468c2e68-0a1f-4b0d-b770-07e324ef6d9d\x00', 0x25) write(0xffffffffffffffff, &(0x7f0000000900)='1073741824\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='pmem\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='namespace0.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='pfn0.0\x00', 0x7) 963.863935ms ago: executing program 5 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file3\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./file3\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./reg_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./fifo_file\x00', 0x1000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x0, 0x0, [{}]}) 888.757981ms ago: executing program 5 (id=62): mount(0x0, 0x0, 0x0, 0x8024, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x48001, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='100', 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x3, 'lblcr\x00', 0x13, 0x0, 0xc}, 0x2c) 0s ago: executing program 5 (id=63): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x3) kernel console output (not intermixed with test programs): ? __pfx_process_one_work+0x10/0x10 [ 77.068735][ T171] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.068763][ T171] worker_thread+0x5ef/0xe50 [ 77.068796][ T171] ? __pfx_worker_thread+0x10/0x10 [ 77.068823][ T171] ? kthread+0x13a/0x450 [ 77.068844][ T171] ? __pfx_worker_thread+0x10/0x10 [ 77.068868][ T171] kthread+0x370/0x450 [ 77.068891][ T171] ? __pfx_kthread+0x10/0x10 [ 77.068916][ T171] ret_from_fork+0x72b/0xd50 [ 77.068942][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 77.068966][ T171] ? __switch_to+0x800/0x10f0 [ 77.068994][ T171] ? __pfx_kthread+0x10/0x10 [ 77.069020][ T171] ret_from_fork_asm+0x1a/0x30 [ 77.069058][ T171] [ 77.073102][ T5971] FAULT_INJECTION: forcing a failure. [ 77.073102][ T5971] name failslab, interval 1, probability 10, space 0, times 16 [ 77.074087][ T1165] CPU: 2 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 77.074102][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.074110][ T1165] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.074144][ T1165] Call Trace: [ 77.074150][ T1165] [ 77.074155][ T1165] dump_stack_lvl+0x100/0x190 [ 77.074171][ T1165] should_fail_ex.cold+0x5/0xa [ 77.074185][ T1165] should_failslab+0xc2/0x120 [ 77.074201][ T1165] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.074218][ T1165] ? __alloc_skb+0x140/0x710 [ 77.074235][ T1165] __alloc_skb+0x140/0x710 [ 77.074248][ T1165] ? __alloc_skb+0x5b7/0x710 [ 77.074262][ T1165] ? __pfx___alloc_skb+0x10/0x10 [ 77.074277][ T1165] ? kfree_skbmem+0x19f/0x210 [ 77.074289][ T1165] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.074310][ T1165] process_one_work+0xa23/0x1940 [ 77.074333][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 77.074353][ T1165] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.074369][ T1165] worker_thread+0x5ef/0xe50 [ 77.074390][ T1165] ? kthread+0x13a/0x450 [ 77.074405][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 77.074420][ T1165] kthread+0x370/0x450 [ 77.074433][ T1165] ? __pfx_kthread+0x10/0x10 [ 77.074448][ T1165] ret_from_fork+0x72b/0xd50 [ 77.074464][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 77.074478][ T1165] ? __switch_to+0x800/0x10f0 [ 77.074496][ T1165] ? __pfx_kthread+0x10/0x10 [ 77.074512][ T1165] ret_from_fork_asm+0x1a/0x30 [ 77.074534][ T1165] [ 77.074774][ T1165] FAULT_INJECTION: forcing a failure. [ 77.074774][ T1165] name failslab, interval 1, probability 10, space 0, times 15 [ 77.076162][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 77.076198][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.076209][ T5971] Call Trace: [ 77.076215][ T5971] [ 77.076222][ T5971] dump_stack_lvl+0x100/0x190 [ 77.076258][ T5971] should_fail_ex.cold+0x5/0xa [ 77.076280][ T5971] should_failslab+0xc2/0x120 [ 77.076303][ T5971] __kmalloc_cache_noprof+0x91/0x6c0 [ 77.076322][ T5971] ? netdevice_event+0x308/0x9a0 [ 77.076343][ T5971] netdevice_event+0x308/0x9a0 [ 77.076362][ T5971] ? __pfx_netdevice_event+0x10/0x10 [ 77.076375][ T5971] ? __pfx_del_netdev_ips+0x10/0x10 [ 77.076399][ T5971] ? __pfx_pass_all_filter+0x10/0x10 [ 77.076431][ T5971] ? lockdep_rtnl_is_held+0x26/0x40 [ 77.076453][ T5971] notifier_call_chain+0x99/0x3f0 [ 77.076480][ T5971] call_netdevice_notifiers_info+0xbe/0x110 [ 77.076508][ T5971] unregister_netdevice_many_notify+0x1141/0x2140 [ 77.076541][ T5971] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 77.076565][ T5971] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.076583][ T5971] ? linkwatch_fire_event+0x211/0x270 [ 77.076600][ T5971] ? netif_carrier_off+0xa8/0xc0 [ 77.076631][ T5971] unregister_netdevice_queue+0x30b/0x3c0 [ 77.076654][ T5971] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 77.076677][ T5971] ? linkwatch_schedule_work+0x16f/0x1a0 [ 77.076696][ T5971] ? linkwatch_fire_event+0x74/0x270 [ 77.076729][ T5971] __tun_detach+0x1371/0x16e0 [ 77.076752][ T5971] ? __pfx_tun_chr_close+0x10/0x10 [ 77.076770][ T5971] tun_chr_close+0xc2/0x220 [ 77.076787][ T5971] ? __pfx_tun_chr_close+0x10/0x10 [ 77.076803][ T5971] __fput+0x3ff/0xb50 [ 77.076829][ T5971] task_work_run+0x150/0x240 [ 77.076855][ T5971] ? __pfx_task_work_run+0x10/0x10 [ 77.076885][ T5971] do_exit+0x951/0x2ae0 [ 77.076911][ T5971] ? do_raw_spin_lock+0x128/0x260 [ 77.076930][ T5971] ? __pfx_do_exit+0x10/0x10 [ 77.076950][ T5971] ? do_group_exit+0x1bd/0x2a0 [ 77.076973][ T5971] ? rcu_is_watching+0x12/0xc0 [ 77.077002][ T5971] do_group_exit+0xd5/0x2a0 [ 77.077027][ T5971] __ia32_sys_exit_group+0x3e/0x50 [ 77.077049][ T5971] ia32_sys_call+0x19ea/0x19f0 [ 77.077073][ T5971] __do_fast_syscall_32+0xe7/0x970 [ 77.077095][ T5971] ? lockdep_hardirqs_on+0x78/0x100 [ 77.077116][ T5971] do_fast_syscall_32+0x32/0x70 [ 77.077137][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.077159][ T5971] RIP: 0023:0xf700efec [ 77.077173][ T5971] Code: Unable to access opcode bytes at 0xf700efc2. [ 77.077181][ T5971] RSP: 002b:00000000ff80fddc EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 77.077197][ T5971] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ff80fe28 [ 77.077208][ T5971] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00000000f714f936 [ 77.077218][ T5971] RBP: 00000000f73d6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 77.077228][ T5971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.077238][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.077260][ T5971] [ 77.077342][ T48] FAULT_INJECTION: forcing a failure. [ 77.077342][ T48] name failslab, interval 1, probability 10, space 0, times 15 [ 77.077509][ T50] FAULT_INJECTION: forcing a failure. [ 77.077509][ T50] name failslab, interval 1, probability 10, space 0, times 15 [ 77.077719][ T1165] CPU: 2 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 77.077734][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.077741][ T1165] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.077758][ T1165] Call Trace: [ 77.077761][ T1165] [ 77.077766][ T1165] dump_stack_lvl+0x100/0x190 [ 77.077779][ T1165] should_fail_ex.cold+0x5/0xa [ 77.077791][ T1165] should_failslab+0xc2/0x120 [ 77.077807][ T1165] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.077822][ T1165] ? __alloc_skb+0x140/0x710 [ 77.077838][ T1165] __alloc_skb+0x140/0x710 [ 77.077851][ T1165] ? __alloc_skb+0x5b7/0x710 [ 77.077865][ T1165] ? __pfx___alloc_skb+0x10/0x10 [ 77.077880][ T1165] ? kfree_skbmem+0x19f/0x210 [ 77.077893][ T1165] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.077913][ T1165] process_one_work+0xa23/0x1940 [ 77.077935][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 77.077954][ T1165] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.077970][ T1165] worker_thread+0x5ef/0xe50 [ 77.077990][ T1165] ? kthread+0x13a/0x450 [ 77.078003][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 77.078018][ T1165] kthread+0x370/0x450 [ 77.078032][ T1165] ? __pfx_kthread+0x10/0x10 [ 77.078047][ T1165] ret_from_fork+0x72b/0xd50 [ 77.078061][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 77.078075][ T1165] ? __switch_to+0x800/0x10f0 [ 77.078092][ T1165] ? __pfx_kthread+0x10/0x10 [ 77.078107][ T1165] ret_from_fork_asm+0x1a/0x30 [ 77.078127][ T1165] [ 77.079294][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 77.079316][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.079327][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.079354][ T48] Call Trace: [ 77.079361][ T48] [ 77.079369][ T48] dump_stack_lvl+0x100/0x190 [ 77.079389][ T48] should_fail_ex.cold+0x5/0xa [ 77.079408][ T48] should_failslab+0xc2/0x120 [ 77.079431][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.079454][ T48] ? __alloc_skb+0x140/0x710 [ 77.079481][ T48] __alloc_skb+0x140/0x710 [ 77.079500][ T48] ? __alloc_skb+0x5b7/0x710 [ 77.079520][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 77.079539][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.079555][ T5745] FAULT_INJECTION: forcing a failure. [ 77.079555][ T5745] name failslab, interval 1, probability 10, space 0, times 13 [ 77.079561][ T48] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.079586][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.079629][ T48] process_one_work+0xa23/0x1940 [ 77.079665][ T48] ? __pfx_process_one_work+0x10/0x10 [ 77.079696][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.079718][ T48] worker_thread+0x5ef/0xe50 [ 77.079739][ T48] ? kthread+0x13a/0x450 [ 77.079753][ T48] ? __pfx_worker_thread+0x10/0x10 [ 77.079767][ T48] kthread+0x370/0x450 [ 77.079781][ T48] ? __pfx_kthread+0x10/0x10 [ 77.079796][ T48] ret_from_fork+0x72b/0xd50 [ 77.079810][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 77.079824][ T48] ? __switch_to+0x800/0x10f0 [ 77.079841][ T48] ? __pfx_kthread+0x10/0x10 [ 77.079855][ T48] ret_from_fork_asm+0x1a/0x30 [ 77.079876][ T48] [ 77.080029][ T48] FAULT_INJECTION: forcing a failure. [ 77.080029][ T48] name failslab, interval 1, probability 10, space 0, times 10 [ 77.080043][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 77.080055][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.080062][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.080077][ T48] Call Trace: [ 77.080081][ T48] [ 77.080085][ T48] dump_stack_lvl+0x100/0x190 [ 77.080097][ T48] should_fail_ex.cold+0x5/0xa [ 77.080111][ T48] should_failslab+0xc2/0x120 [ 77.080126][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.080140][ T48] ? __alloc_skb+0x140/0x710 [ 77.080156][ T48] __alloc_skb+0x140/0x710 [ 77.080168][ T48] ? __alloc_skb+0x5b7/0x710 [ 77.080181][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 77.080196][ T48] ? kfree_skbmem+0x19f/0x210 [ 77.080209][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.080229][ T48] process_one_work+0xa23/0x1940 [ 77.080249][ T48] ? __pfx_process_one_work+0x10/0x10 [ 77.080269][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.080285][ T48] worker_thread+0x5ef/0xe50 [ 77.080305][ T48] ? kthread+0x13a/0x450 [ 77.080319][ T48] ? __pfx_worker_thread+0x10/0x10 [ 77.080340][ T48] kthread+0x370/0x450 [ 77.080361][ T48] ? __pfx_kthread+0x10/0x10 [ 77.080386][ T48] ret_from_fork+0x72b/0xd50 [ 77.080403][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 77.080417][ T48] ? __switch_to+0x800/0x10f0 [ 77.080434][ T48] ? __pfx_kthread+0x10/0x10 [ 77.080448][ T48] ret_from_fork_asm+0x1a/0x30 [ 77.080469][ T48] [ 77.080485][ T48] FAULT_INJECTION: forcing a failure. [ 77.080485][ T48] name failslab, interval 1, probability 10, space 0, times 8 [ 77.080497][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 77.080509][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.080516][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.080530][ T48] Call Trace: [ 77.080534][ T48] [ 77.080538][ T48] dump_stack_lvl+0x100/0x190 [ 77.080549][ T48] should_fail_ex.cold+0x5/0xa [ 77.080561][ T48] should_failslab+0xc2/0x120 [ 77.080576][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.080590][ T48] ? __alloc_skb+0x140/0x710 [ 77.080610][ T48] __alloc_skb+0x140/0x710 [ 77.080623][ T48] ? __alloc_skb+0x5b7/0x710 [ 77.080636][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 77.080651][ T48] ? kfree_skbmem+0x19f/0x210 [ 77.080663][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.080684][ T48] process_one_work+0xa23/0x1940 [ 77.080705][ T48] ? __pfx_process_one_work+0x10/0x10 [ 77.080724][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.080740][ T48] worker_thread+0x5ef/0xe50 [ 77.080760][ T48] ? kthread+0x13a/0x450 [ 77.080773][ T48] ? __pfx_worker_thread+0x10/0x10 [ 77.080788][ T48] kthread+0x370/0x450 [ 77.080801][ T48] ? __pfx_kthread+0x10/0x10 [ 77.080816][ T48] ret_from_fork+0x72b/0xd50 [ 77.080830][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 77.080844][ T48] ? __switch_to+0x800/0x10f0 [ 77.080860][ T48] ? __pfx_kthread+0x10/0x10 [ 77.080875][ T48] ret_from_fork_asm+0x1a/0x30 [ 77.080895][ T48] [ 77.080901][ T48] FAULT_INJECTION: forcing a failure. [ 77.080901][ T48] name failslab, interval 1, probability 10, space 0, times 6 [ 77.081027][ T5971] FAULT_INJECTION: forcing a failure. [ 77.081027][ T5971] name failslab, interval 1, probability 10, space 0, times 6 [ 77.081072][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 77.081085][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.081092][ T5971] Call Trace: [ 77.081095][ T5971] [ 77.081100][ T5971] dump_stack_lvl+0x100/0x190 [ 77.081114][ T5971] should_fail_ex.cold+0x5/0xa [ 77.081126][ T5971] should_failslab+0xc2/0x120 [ 77.081141][ T5971] __kmalloc_cache_noprof+0x91/0x6c0 [ 77.081152][ T5971] ? __lock_acquire+0x49f/0x1a40 [ 77.081170][ T5971] ? nsim_fib_event_nb+0x1a8/0xe40 [ 77.081189][ T5971] nsim_fib_event_nb+0x1a8/0xe40 [ 77.081209][ T5971] notifier_call_chain+0x99/0x3f0 [ 77.081227][ T5971] atomic_notifier_call_chain+0x71/0x1c0 [ 77.081243][ T5971] call_fib_notifiers+0x33/0x70 [ 77.081260][ T5971] fib_notify_alias_delete+0x2b6/0x390 [ 77.081279][ T5971] ? __pfx_fib_notify_alias_delete+0x10/0x10 [ 77.081299][ T5971] ? lockdep_rtnl_is_held+0x26/0x40 [ 77.081311][ T5971] ? fib_find_node+0x209/0x280 [ 77.081325][ T5971] ? fib_find_alias+0x1f7/0x260 [ 77.081341][ T5971] fib_table_delete+0x5b8/0x8e0 [ 77.081356][ T5971] ? __pfx_fib_table_delete+0x10/0x10 [ 77.081365][ T5971] ? find_held_lock+0x2b/0x80 [ 77.081378][ T5971] ? fib_magic+0x1a7/0x5c0 [ 77.081389][ T5971] ? fib_magic+0x1a7/0x5c0 [ 77.081401][ T5971] ? fib_new_table+0xff/0x430 [ 77.081414][ T5971] fib_magic+0x362/0x5c0 [ 77.081432][ T5971] ? __pfx_fib_magic+0x10/0x10 [ 77.081456][ T5971] ? queue_work_on+0x11b/0x1e0 [ 77.081478][ T5971] ? lockdep_hardirqs_on+0x78/0x100 [ 77.081503][ T5971] fib_del_ifaddr+0xcdf/0x14d0 [ 77.081526][ T5971] ? inetaddr_event+0xf3/0x150 [ 77.081553][ T5971] ? __pfx_inetaddr_event+0x10/0x10 [ 77.081583][ T5971] fib_inetaddr_event+0xb9/0x270 [ 77.081606][ T5971] notifier_call_chain+0x99/0x3f0 [ 77.081634][ T5971] blocking_notifier_call_chain+0x69/0xa0 [ 77.081660][ T5971] __inet_del_ifa+0x3df/0xf40 [ 77.081685][ T5971] inetdev_event+0x3e1/0x17f0 [ 77.081706][ T5971] ? ib_netdevice_event+0xfc/0x330 [ 77.081724][ T5971] ? __pfx_inetdev_event+0x10/0x10 [ 77.081745][ T5971] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.081772][ T5971] notifier_call_chain+0x99/0x3f0 [ 77.081798][ T5971] call_netdevice_notifiers_info+0xbe/0x110 [ 77.081827][ T5971] unregister_netdevice_many_notify+0x1141/0x2140 [ 77.081859][ T5971] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 77.081883][ T5971] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.081901][ T5971] ? linkwatch_fire_event+0x211/0x270 [ 77.081918][ T5971] ? netif_carrier_off+0xa8/0xc0 [ 77.081949][ T5971] unregister_netdevice_queue+0x30b/0x3c0 [ 77.081980][ T5971] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 77.082003][ T5971] ? linkwatch_schedule_work+0x16f/0x1a0 [ 77.082022][ T5971] ? linkwatch_fire_event+0x74/0x270 [ 77.082044][ T5971] __tun_detach+0x1371/0x16e0 [ 77.082067][ T5971] ? __pfx_tun_chr_close+0x10/0x10 [ 77.082085][ T5971] tun_chr_close+0xc2/0x220 [ 77.082101][ T5971] ? __pfx_tun_chr_close+0x10/0x10 [ 77.082118][ T5971] __fput+0x3ff/0xb50 [ 77.082144][ T5971] task_work_run+0x150/0x240 [ 77.082168][ T5971] ? __pfx_task_work_run+0x10/0x10 [ 77.082198][ T5971] do_exit+0x951/0x2ae0 [ 77.082222][ T5971] ? do_raw_spin_lock+0x128/0x260 [ 77.082241][ T5971] ? __pfx_do_exit+0x10/0x10 [ 77.082261][ T5971] ? do_group_exit+0x1bd/0x2a0 [ 77.082284][ T5971] ? rcu_is_watching+0x12/0xc0 [ 77.082308][ T5971] do_group_exit+0xd5/0x2a0 [ 77.082332][ T5971] __ia32_sys_exit_group+0x3e/0x50 [ 77.082355][ T5971] ia32_sys_call+0x19ea/0x19f0 [ 77.082379][ T5971] __do_fast_syscall_32+0xe7/0x970 [ 77.082400][ T5971] ? lockdep_hardirqs_on+0x78/0x100 [ 77.082419][ T5971] do_fast_syscall_32+0x32/0x70 [ 77.082439][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.082460][ T5971] RIP: 0023:0xf700efec [ 77.082474][ T5971] Code: Unable to access opcode bytes at 0xf700efc2. [ 77.082482][ T5971] RSP: 002b:00000000ff80fddc EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 77.082497][ T5971] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ff80fe28 [ 77.082511][ T5971] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00000000f714f936 [ 77.082521][ T5971] RBP: 00000000f73d6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 77.082531][ T5971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.082541][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.082563][ T5971] [ 77.082877][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 77.082892][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.082899][ T5745] Call Trace: [ 77.082902][ T5745] [ 77.082907][ T5745] dump_stack_lvl+0x100/0x190 [ 77.082921][ T5745] should_fail_ex.cold+0x5/0xa [ 77.082933][ T5745] should_failslab+0xc2/0x120 [ 77.082949][ T5745] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.082963][ T5745] ? __alloc_skb+0x140/0x710 [ 77.082980][ T5745] __alloc_skb+0x140/0x710 [ 77.082992][ T5745] ? __alloc_skb+0x5b7/0x710 [ 77.083006][ T5745] ? __pfx___alloc_skb+0x10/0x10 [ 77.083020][ T5745] ? netlink_has_listeners+0x21b/0x430 [ 77.083031][ T5745] ? netlink_has_listeners+0x21b/0x430 [ 77.083044][ T5745] alloc_uevent_skb+0x7d/0x210 [ 77.083057][ T5745] kobject_uevent_env+0xd2d/0x18b0 [ 77.083077][ T5745] ? bus_to_subsys+0x114/0x150 [ 77.083098][ T5745] device_del+0x605/0x9b0 [ 77.083122][ T5745] ? __pfx_device_del+0x10/0x10 [ 77.083144][ T5745] ? _raw_read_unlock+0x28/0x50 [ 77.083162][ T5745] ? hci_sock_dev_event+0xb6/0x630 [ 77.083186][ T5745] rfkill_unregister+0xde/0x2c0 [ 77.083203][ T5745] hci_unregister_dev+0x34f/0x690 [ 77.083225][ T5745] vhci_release+0x17d/0x230 [ 77.083243][ T5745] ? __pfx_vhci_release+0x10/0x10 [ 77.083261][ T5745] __fput+0x3ff/0xb50 [ 77.083284][ T5745] task_work_run+0x150/0x240 [ 77.083307][ T5745] ? __pfx_task_work_run+0x10/0x10 [ 77.083336][ T5745] do_exit+0x951/0x2ae0 [ 77.083358][ T5745] ? do_raw_spin_lock+0x128/0x260 [ 77.083375][ T5745] ? __pfx_do_exit+0x10/0x10 [ 77.083395][ T5745] ? do_group_exit+0x1bd/0x2a0 [ 77.083418][ T5745] ? rcu_is_watching+0x12/0xc0 [ 77.083442][ T5745] do_group_exit+0xd5/0x2a0 [ 77.083469][ T5745] __ia32_sys_exit_group+0x3e/0x50 [ 77.083493][ T5745] ia32_sys_call+0x19ea/0x19f0 [ 77.083518][ T5745] __do_fast_syscall_32+0xe7/0x970 [ 77.083540][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 77.083562][ T5745] do_fast_syscall_32+0x32/0x70 [ 77.083582][ T5745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.083601][ T5745] RIP: 0023:0xf702efec [ 77.083614][ T5745] Code: Unable to access opcode bytes at 0xf702efc2. [ 77.083620][ T5745] RSP: 002b:00000000ffaef6ec EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 77.083634][ T5745] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 77.083644][ T5745] RDX: 00000000f7155037 RSI: 00000000f73fd300 RDI: 00000000f72314d9 [ 77.083653][ T5745] RBP: 00000000ffaef748 R08: 0000000000000000 R09: 0000000000000000 [ 77.083662][ T5745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.083671][ T5745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.083692][ T5745] [ 77.084003][ T5971] FAULT_INJECTION: forcing a failure. [ 77.084003][ T5971] name failslab, interval 1, probability 10, space 0, times 4 [ 77.085034][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 77.085056][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.085069][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.085094][ T48] Call Trace: [ 77.085101][ T48] [ 77.085108][ T48] dump_stack_lvl+0x100/0x190 [ 77.085129][ T48] should_fail_ex.cold+0x5/0xa [ 77.085150][ T48] should_failslab+0xc2/0x120 [ 77.085173][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.085197][ T48] ? __alloc_skb+0x140/0x710 [ 77.085223][ T48] __alloc_skb+0x140/0x710 [ 77.085245][ T48] ? __alloc_skb+0x5b7/0x710 [ 77.085266][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 77.085287][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.085308][ T48] ? __pfx___might_resched+0x10/0x10 [ 77.085342][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.085380][ T48] process_one_work+0xa23/0x1940 [ 77.085418][ T48] ? __pfx_process_one_work+0x10/0x10 [ 77.085452][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.085481][ T48] worker_thread+0x5ef/0xe50 [ 77.085518][ T48] ? kthread+0x13a/0x450 [ 77.085540][ T48] ? __pfx_worker_thread+0x10/0x10 [ 77.085565][ T48] kthread+0x370/0x450 [ 77.085587][ T48] ? __pfx_kthread+0x10/0x10 [ 77.085619][ T48] ret_from_fork+0x72b/0xd50 [ 77.085643][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 77.085666][ T48] ? __switch_to+0x800/0x10f0 [ 77.085695][ T48] ? __pfx_kthread+0x10/0x10 [ 77.085721][ T48] ret_from_fork_asm+0x1a/0x30 [ 77.085759][ T48] [ 77.085769][ T48] FAULT_INJECTION: forcing a failure. [ 77.085769][ T48] name failslab, interval 1, probability 10, space 0, times 3 [ 77.085790][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 77.085809][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.085821][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 77.085845][ T48] Call Trace: [ 77.085851][ T48] [ 77.085857][ T48] dump_stack_lvl+0x100/0x190 [ 77.085878][ T48] should_fail_ex.cold+0x5/0xa [ 77.085899][ T48] should_failslab+0xc2/0x120 [ 77.085921][ T5157] FAULT_INJECTION: forcing a failure. [ 77.085921][ T5157] name failslab, interval 1, probability 10, space 0, times 3 [ 77.085924][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 77.085949][ T48] ? __alloc_skb+0x140/0x710 [ 77.085976][ T48] __alloc_skb+0x140/0x710 [ 77.085998][ T48] ? __alloc_skb+0x5b7/0x710 [ 77.086021][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 77.086042][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.086062][ T48] ? __pfx___might_resched+0x10/0x10 [ 77.086095][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 77.086131][ T48] process_one_work+0xa23/0x1940 [ 77.086166][ T6124] FAULT_INJECTION: forcing a failure. [ 77.086166][ T6124] name failslab, interval 1, probability 10, space 0, times 3 [ 77.086168][ T48] ? __pfx_process_one_work+0x10/0x10 [ 77.086203][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 77.086232][ T48] worker_thread+0x5ef/0xe50 [ 77.086268][ T48] ? kthread+0x13a/0x450 [ 77.086289][ T48] ? __pfx_worker_thread+0x10/0x10 [ 77.086314][ T48] kthread+0x370/0x450 [ 77.086337][ T48] ? __pfx_kthread+0x10/0x10 [ 77.086363][ T48] ret_from_fork+0x72b/0xd50 [ 77.086387][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 77.086411][ T48] ? __switch_to+0x800/0x10f0 [ 77.086438][ T48] ? __pfx_kthread+0x10/0x10 [ 77.086464][ T48] ret_from_fork_asm+0x1a/0x30 [ 77.086501][ T48] [ 77.086511][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 77.086532][ T6124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.086543][ T6124] Call Trace: [ 77.086549][ T6124] [ 77.086556][ T6124] dump_stack_lvl+0x100/0x190 [ 77.086578][ T6124] should_fail_ex.cold+0x5/0xa [ 77.086598][ T6124] should_failslab+0xc2/0x120 [ 77.086622][ T6124] kmem_cache_alloc_noprof+0x91/0x6a0 [ 77.086642][ T6124] ? stack_trace_save+0x8e/0xc0 [ 77.086669][ T6124] ? alloc_empty_file+0x5b/0x1c0 [ 77.086695][ T6124] alloc_empty_file+0x5b/0x1c0 [ 77.086718][ T6124] path_openat+0xe7/0x4280 [ 77.086736][ T6124] ? __kasan_slab_alloc+0x89/0x90 [ 77.086759][ T6124] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 77.086779][ T6124] ? do_getname+0x35/0x390 [ 77.086823][ T6124] ? do_sys_openat2+0xc7/0x1e0 [ 77.086842][ T6124] ? __x64_sys_openat+0x12d/0x210 [ 77.086862][ T6124] ? do_syscall_64+0x115/0x840 [ 77.086884][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.086910][ T6124] ? __pfx_path_openat+0x10/0x10 [ 77.086935][ T6124] do_file_open+0x20e/0x430 [ 77.086956][ T6124] ? __pfx_do_file_open+0x10/0x10 [ 77.086990][ T6124] ? alloc_fd+0x471/0x7a0 [ 77.087011][ T6124] ? do_getname+0x191/0x390 [ 77.087036][ T6124] do_sys_openat2+0x10f/0x1e0 [ 77.087058][ T6124] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.087093][ T6124] ? __x64_sys_recvmsg+0x1b9/0x260 [ 77.087120][ T6124] __x64_sys_openat+0x12d/0x210 [ 77.087161][ T6124] ? __pfx___x64_sys_openat+0x10/0x10 [ 77.087194][ T6124] do_syscall_64+0x115/0x840 [ 77.087214][ T6124] ? clear_bhb_loop+0x40/0x90 [ 77.087236][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.087253][ T6124] RIP: 0033:0x7fdaebaa7407 [ 77.087269][ T6124] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 77.087287][ T6124] RSP: 002b:00007ffe73b8cc80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 77.087304][ T6124] RAX: ffffffffffffffda RBX: 00007fdaec156880 RCX: 00007fdaebaa7407 [ 77.087316][ T6124] RDX: 0000000000080000 RSI: 00007ffe73b8cdf0 RDI: ffffffffffffff9c [ 77.087326][ T6124] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 77.087335][ T6124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564741bc27f5 [ 77.087344][ T6124] R13: 0000564741bc27f5 R14: 0000000000000001 R15: 0000564741bdd140 [ 77.087366][ T6124] [ 77.087377][ T5157] CPU: 3 UID: 0 PID: 5157 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 77.087398][ T5157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.087408][ T5157] Call Trace: [ 77.087415][ T5157] [ 77.087423][ T5157] dump_stack_lvl+0x100/0x190 [ 77.087446][ T5157] should_fail_ex.cold+0x5/0xa [ 77.087468][ T5157] should_failslab+0xc2/0x120 [ 77.087494][ T5157] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 77.087517][ T5157] ? find_held_lock+0x2b/0x80 [ 77.087540][ T5157] ? __d_alloc+0x35/0xa50 [ 77.087566][ T5157] __d_alloc+0x35/0xa50 [ 77.087584][ T5157] ? __lock_acquire+0x49f/0x1a40 [ 77.087619][ T5157] d_alloc_parallel+0x105/0x14b0 [ 77.087652][ T5157] ? __pfx_d_alloc_parallel+0x10/0x10 [ 77.087675][ T5157] ? __d_lookup+0x25c/0x4a0 [ 77.087704][ T5157] ? __d_lookup+0x266/0x4a0 [ 77.087735][ T5157] path_openat+0x271c/0x4280 [ 77.087765][ T5157] ? __pfx_path_openat+0x10/0x10 [ 77.087791][ T5157] do_file_open+0x20e/0x430 [ 77.087812][ T5157] ? __pfx_do_file_open+0x10/0x10 [ 77.087850][ T5157] ? alloc_fd+0x471/0x7a0 [ 77.087870][ T5157] ? do_getname+0x191/0x390 [ 77.087896][ T5157] do_sys_openat2+0x10f/0x1e0 [ 77.087921][ T5157] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.087950][ T5157] ? __sys_sendmsg+0x17f/0x210 [ 77.087978][ T5157] __x64_sys_openat+0x12d/0x210 [ 77.088004][ T5157] ? __pfx___x64_sys_openat+0x10/0x10 [ 77.088038][ T5157] do_syscall_64+0x115/0x840 [ 77.088059][ T5157] ? clear_bhb_loop+0x40/0x90 [ 77.088082][ T5157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.088101][ T5157] RIP: 0033:0x7fdaebaa7407 [ 77.088116][ T5157] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 77.088134][ T5157] RSP: 002b:00007ffe73b91360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 77.088150][ T5157] RAX: ffffffffffffffda RBX: 00007fdaec156880 RCX: 00007fdaebaa7407 [ 77.088163][ T5157] RDX: 0000000000080141 RSI: 0000564741bc202e RDI: ffffffffffffff9c [ 77.088174][ T5157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.088185][ T5157] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 77.088196][ T5157] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 77.088221][ T5157] [ 77.088329][ T5157] udevd[5157]: could not touch /run/udev/queue: Cannot allocate memory [ 80.761249][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 80.761267][ T50] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.761276][ T50] Workqueue: mld mld_ifc_work [ 80.761298][ T50] Call Trace: [ 80.761306][ T50] [ 80.761312][ T50] dump_stack_lvl+0x100/0x190 [ 80.761328][ T50] should_fail_ex.cold+0x5/0xa [ 80.761342][ T50] should_failslab+0xc2/0x120 [ 80.761359][ T50] __kmalloc_cache_noprof+0x91/0x6c0 [ 80.761372][ T50] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 80.761389][ T50] dst_cow_metrics_generic+0x4c/0x1e0 [ 80.761404][ T50] icmp6_dst_alloc+0x418/0x4f0 [ 80.761421][ T50] mld_sendpack+0x5ae/0xec0 [ 80.761438][ T50] ? __pfx_mld_sendpack+0x10/0x10 [ 80.761461][ T50] mld_ifc_work+0x75a/0xc10 [ 80.761476][ T50] ? rcu_is_watching+0x12/0xc0 [ 80.761493][ T50] process_one_work+0xa23/0x1940 [ 80.761516][ T50] ? __pfx_process_one_work+0x10/0x10 [ 80.761536][ T50] ? __pfx_mld_ifc_work+0x10/0x10 [ 80.761553][ T50] worker_thread+0x5ef/0xe50 [ 80.761574][ T50] ? kthread+0x13a/0x450 [ 80.761587][ T50] ? __pfx_worker_thread+0x10/0x10 [ 80.761602][ T50] kthread+0x370/0x450 [ 80.761621][ T50] ? __pfx_kthread+0x10/0x10 [ 80.761637][ T50] ret_from_fork+0x72b/0xd50 [ 80.761652][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 80.761666][ T50] ? __switch_to+0x800/0x10f0 [ 80.761684][ T50] ? __pfx_kthread+0x10/0x10 [ 80.761698][ T50] ret_from_fork_asm+0x1a/0x30 [ 80.761721][ T50] [ 80.761733][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 80.761757][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.761768][ T5971] Call Trace: [ 80.761776][ T5971] [ 80.761783][ T5971] dump_stack_lvl+0x100/0x190 [ 80.761807][ T5971] should_fail_ex.cold+0x5/0xa [ 80.761826][ T5971] should_failslab+0xc2/0x120 [ 80.761851][ T5971] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 80.761875][ T5971] ? __alloc_skb+0x140/0x710 [ 80.761902][ T5971] __alloc_skb+0x140/0x710 [ 80.761921][ T5971] ? __alloc_skb+0x5b7/0x710 [ 80.761951][ T5971] ? __pfx___alloc_skb+0x10/0x10 [ 80.762007][ T5971] inet6_ifmcaddr_notify+0xd6/0x1d0 [ 80.762036][ T5971] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 80.762066][ T5971] __ipv6_dev_mc_dec+0x297/0x340 [ 80.762097][ T5971] ipv6_mc_destroy_dev+0x2cd/0x690 [ 80.762114][ T5971] ? __local_bh_enable_ip+0x9e/0x120 [ 80.762138][ T5971] addrconf_ifdown.isra.0+0x148a/0x1b70 [ 80.762159][ T5971] ? trace_contention_end+0x126/0x160 [ 80.762184][ T5971] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 80.762215][ T5971] addrconf_notify+0x4a3/0x1ba0 [ 80.762241][ T5971] ? __pfx_tls_dev_event+0x10/0x10 [ 80.762267][ T5971] ? __pfx_addrconf_notify+0x10/0x10 [ 80.762293][ T5971] ? ip6mr_device_event+0x1c4/0x230 [ 80.762320][ T5971] notifier_call_chain+0x99/0x3f0 [ 80.762348][ T5971] call_netdevice_notifiers_info+0xbe/0x110 [ 80.762384][ T5971] unregister_netdevice_many_notify+0x1141/0x2140 [ 80.762419][ T5971] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 80.762472][ T5971] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 80.762493][ T5971] ? linkwatch_fire_event+0x211/0x270 [ 80.762515][ T5971] ? netif_carrier_off+0xa8/0xc0 [ 80.762549][ T5971] unregister_netdevice_queue+0x30b/0x3c0 [ 80.762576][ T5971] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 80.762602][ T5971] ? linkwatch_schedule_work+0x16f/0x1a0 [ 80.762622][ T5971] ? linkwatch_fire_event+0x74/0x270 [ 80.762645][ T5971] __tun_detach+0x1371/0x16e0 [ 80.762672][ T5971] ? __pfx_tun_chr_close+0x10/0x10 [ 80.762691][ T5971] tun_chr_close+0xc2/0x220 [ 80.762709][ T5971] ? __pfx_tun_chr_close+0x10/0x10 [ 80.762725][ T5971] __fput+0x3ff/0xb50 [ 80.762753][ T5971] task_work_run+0x150/0x240 [ 80.762806][ T5971] ? __pfx_task_work_run+0x10/0x10 [ 80.762839][ T5971] do_exit+0x951/0x2ae0 [ 80.762867][ T5971] ? do_raw_spin_lock+0x128/0x260 [ 80.762887][ T5971] ? __pfx_do_exit+0x10/0x10 [ 80.762909][ T5971] ? do_group_exit+0x1bd/0x2a0 [ 80.762934][ T5971] ? rcu_is_watching+0x12/0xc0 [ 80.762959][ T5971] do_group_exit+0xd5/0x2a0 [ 80.762986][ T5971] __ia32_sys_exit_group+0x3e/0x50 [ 80.763011][ T5971] ia32_sys_call+0x19ea/0x19f0 [ 80.763038][ T5971] __do_fast_syscall_32+0xe7/0x970 [ 80.763063][ T5971] ? lockdep_hardirqs_on+0x78/0x100 [ 80.763087][ T5971] do_fast_syscall_32+0x32/0x70 [ 80.763111][ T5971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.763134][ T5971] RIP: 0023:0xf700efec [ 80.763150][ T5971] Code: Unable to access opcode bytes at 0xf700efc2. [ 80.763158][ T5971] RSP: 002b:00000000ff80fddc EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 80.763177][ T5971] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ff80fe28 [ 80.763188][ T5971] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00000000f714f936 [ 80.763198][ T5971] RBP: 00000000f73d6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 80.763209][ T5971] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.763220][ T5971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.763244][ T5971] [ 81.138923][ T845] cfg80211: failed to load regulatory.db [ 81.144469][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.194863][ T5459] 8021q: adding VLAN 0 to HW filter on device eth8 [ 81.273127][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.279377][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.282245][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.286277][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.292352][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.399244][ T5974] veth0_vlan: entered promiscuous mode [ 81.406325][ T5974] veth1_vlan: entered promiscuous mode [ 81.430731][ T5974] veth0_macvtap: entered promiscuous mode [ 81.436060][ T5974] veth1_macvtap: entered promiscuous mode [ 81.445034][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.453632][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.460637][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.464892][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.465142][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.468390][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.472973][ T5459] 8021q: adding VLAN 0 to HW filter on device eth9 [ 81.478016][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.478172][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.480226][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480266][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480287][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480306][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.482538][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.485800][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.491915][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.496909][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.563872][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.569384][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.606230][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.608888][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.632264][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.707094][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.827825][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.831169][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.833885][ T6159] bridge_slave_0: entered allmulticast mode [ 81.836953][ T6159] bridge_slave_0: entered promiscuous mode [ 81.866949][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.888556][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.891790][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.895041][ T6159] bridge_slave_1: entered allmulticast mode [ 81.899041][ T6159] bridge_slave_1: entered promiscuous mode [ 81.946324][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.961495][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.981727][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.049197][ T6159] team0: Port device team_slave_0 added [ 82.084908][ T6159] team0: Port device team_slave_1 added [ 82.130902][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.133102][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.141134][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.146589][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.148847][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.156541][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.251632][ T6159] hsr_slave_0: entered promiscuous mode [ 82.255311][ T6159] hsr_slave_1: entered promiscuous mode [ 82.381852][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.384367][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.386655][ T6175] bridge_slave_0: entered allmulticast mode [ 82.390088][ T6175] bridge_slave_0: entered promiscuous mode [ 82.403114][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.405466][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.409369][ T6175] bridge_slave_1: entered allmulticast mode [ 82.411991][ T6175] bridge_slave_1: entered promiscuous mode [ 82.450747][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.464716][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.519279][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.524950][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.529606][ T6177] bridge_slave_0: entered allmulticast mode [ 82.536300][ T6177] bridge_slave_0: entered promiscuous mode [ 82.545953][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.548373][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.550604][ T6177] bridge_slave_1: entered allmulticast mode [ 82.553235][ T6177] bridge_slave_1: entered promiscuous mode [ 82.560027][ T6175] team0: Port device team_slave_0 added [ 82.595261][ T6175] team0: Port device team_slave_1 added [ 82.614384][ T6177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.666898][ T6177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.670180][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.673715][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.684112][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.703018][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.706631][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.718227][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.828979][ T6177] team0: Port device team_slave_0 added [ 82.855439][ T6177] team0: Port device team_slave_1 added [ 82.889860][ T6175] hsr_slave_0: entered promiscuous mode [ 82.892481][ T6175] hsr_slave_1: entered promiscuous mode [ 82.894778][ T6175] debugfs: 'hsr0' already exists in 'hsr' [ 82.896928][ T6175] Cannot create hsr debugfs directory [ 82.936379][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.943141][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.963277][ T6177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.977744][ T6177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.982923][ T6177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.997496][ T6177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.125471][ T6177] hsr_slave_0: entered promiscuous mode [ 83.128786][ T6177] hsr_slave_1: entered promiscuous mode [ 83.131274][ T6177] debugfs: 'hsr0' already exists in 'hsr' [ 83.133415][ T6177] Cannot create hsr debugfs directory [ 83.195941][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.356330][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.365067][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10 [ 83.378064][ T5750] Bluetooth: hci0: command tx timeout [ 83.429995][ T6159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.435563][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.438846][ T6159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.443976][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.447429][ T6159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.454701][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.478399][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.485314][ T6159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.492329][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.527717][ T5750] Bluetooth: hci3: command tx timeout [ 83.545603][ T6175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.551059][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.565123][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.573463][ T6175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.577601][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.580352][ T6175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.584421][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.587707][ T6175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.591537][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.607891][ T5459] 8021q: adding VLAN 0 to HW filter on device eth11 [ 83.618611][ T5750] Bluetooth: hci1: command tx timeout [ 83.720832][ T6177] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 83.728499][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.731613][ T6177] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 83.736518][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.740650][ T6177] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 83.744687][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.756485][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.769828][ T6177] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 83.778352][ T6177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.841346][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.852863][ T12] bridge_slave_1: left allmulticast mode [ 83.856972][ T12] bridge_slave_1: left promiscuous mode [ 83.864272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.876973][ T12] bridge_slave_0: left allmulticast mode [ 83.882747][ T12] bridge_slave_0: left promiscuous mode [ 83.885390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.913171][ T12] bridge_slave_1: left allmulticast mode [ 83.915499][ T12] bridge_slave_1: left promiscuous mode [ 83.918585][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.924223][ T12] bridge_slave_0: left allmulticast mode [ 83.926576][ T12] bridge_slave_0: left promiscuous mode [ 83.929536][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.950944][ T12] bridge_slave_1: left allmulticast mode [ 83.952734][ T12] bridge_slave_1: left promiscuous mode [ 83.954634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.960826][ T12] bridge_slave_0: left allmulticast mode [ 83.962658][ T12] bridge_slave_0: left promiscuous mode [ 83.966230][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.034527][ T5895] IPVS: starting estimator thread 0... [ 84.067502][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.073495][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.077742][ T12] bond0 (unregistering): Released all slaves [ 84.117387][ T6292] IPVS: using max 44 ests per chain, 105600 per kthread [ 84.119089][ T12] FAULT_INJECTION: forcing a failure. [ 84.119089][ T12] name failslab, interval 1, probability 1, space 0, times 97 [ 84.124107][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.124123][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.124134][ T12] Workqueue: netns cleanup_net [ 84.124157][ T12] Call Trace: [ 84.124163][ T12] [ 84.124168][ T12] dump_stack_lvl+0x100/0x190 [ 84.124185][ T12] should_fail_ex.cold+0x5/0xa [ 84.124198][ T12] should_failslab+0xc2/0x120 [ 84.124215][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.124231][ T12] ? __alloc_skb+0x140/0x710 [ 84.124248][ T12] __alloc_skb+0x140/0x710 [ 84.124260][ T12] ? __alloc_skb+0x5b7/0x710 [ 84.124277][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 84.124290][ T12] ? kasan_quarantine_put+0x104/0x240 [ 84.124302][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 84.124317][ T12] ? inetdev_event+0x980/0x17f0 [ 84.124332][ T12] inet_netconf_notify_devconf+0x9d/0x170 [ 84.124346][ T12] inetdev_event+0xa70/0x17f0 [ 84.124359][ T12] ? ib_netdevice_event+0xfc/0x330 [ 84.124373][ T12] ? __pfx_inetdev_event+0x10/0x10 [ 84.124386][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.124405][ T12] notifier_call_chain+0x99/0x3f0 [ 84.124424][ T12] call_netdevice_notifiers_info+0xbe/0x110 [ 84.124444][ T12] unregister_netdevice_many_notify+0x1141/0x2140 [ 84.124466][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 84.124482][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 84.124498][ T12] ? mutex_is_locked+0x17/0x60 [ 84.124508][ T12] ? rtnl_is_locked+0x15/0x20 [ 84.124521][ T12] ops_undo_list+0x8ff/0xab0 [ 84.124539][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 84.124554][ T12] ? cleanup_net+0x332/0x920 [ 84.124571][ T12] ? idr_destroy+0x62/0x2e0 [ 84.124583][ T12] cleanup_net+0x499/0x920 [ 84.124600][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 84.124619][ T12] ? rcu_is_watching+0x12/0xc0 [ 84.124634][ T12] process_one_work+0xa23/0x1940 [ 84.124656][ T12] ? __pfx_process_one_work+0x10/0x10 [ 84.124675][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 84.124693][ T12] worker_thread+0x5ef/0xe50 [ 84.124713][ T12] ? kthread+0x13a/0x450 [ 84.124727][ T12] ? __pfx_worker_thread+0x10/0x10 [ 84.124742][ T12] kthread+0x370/0x450 [ 84.124755][ T12] ? __pfx_kthread+0x10/0x10 [ 84.124770][ T12] ret_from_fork+0x72b/0xd50 [ 84.124785][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 84.124799][ T12] ? __switch_to+0x800/0x10f0 [ 84.124817][ T12] ? __pfx_kthread+0x10/0x10 [ 84.124831][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.124853][ T12] [ 84.178070][ T48] FAULT_INJECTION: forcing a failure. [ 84.178070][ T48] name failslab, interval 1, probability 1, space 0, times 96 [ 84.178955][ T36] FAULT_INJECTION: forcing a failure. [ 84.178955][ T36] name failslab, interval 1, probability 1, space 0, times 96 [ 84.180242][ T48] CPU: 2 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 84.180258][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.180267][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.180289][ T48] Call Trace: [ 84.180294][ T48] [ 84.180300][ T48] dump_stack_lvl+0x100/0x190 [ 84.180316][ T48] should_fail_ex.cold+0x5/0xa [ 84.180330][ T48] should_failslab+0xc2/0x120 [ 84.180347][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.180363][ T48] ? __alloc_skb+0x140/0x710 [ 84.180380][ T48] __alloc_skb+0x140/0x710 [ 84.180392][ T48] ? __alloc_skb+0x5b7/0x710 [ 84.180405][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 84.180420][ T48] ? kfree_skbmem+0x19f/0x210 [ 84.180433][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.180457][ T48] process_one_work+0xa23/0x1940 [ 84.180480][ T48] ? __pfx_process_one_work+0x10/0x10 [ 84.180499][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.180516][ T48] worker_thread+0x5ef/0xe50 [ 84.180536][ T48] ? kthread+0x13a/0x450 [ 84.180550][ T48] ? __pfx_worker_thread+0x10/0x10 [ 84.180565][ T48] kthread+0x370/0x450 [ 84.180579][ T48] ? __pfx_kthread+0x10/0x10 [ 84.180594][ T48] ret_from_fork+0x72b/0xd50 [ 84.180609][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 84.180623][ T48] ? __switch_to+0x800/0x10f0 [ 84.180641][ T48] ? __pfx_kthread+0x10/0x10 [ 84.180729][ T48] ret_from_fork_asm+0x1a/0x30 [ 84.180754][ T48] [ 84.184275][ T12] FAULT_INJECTION: forcing a failure. [ 84.184275][ T12] name failslab, interval 1, probability 1, space 0, times 95 [ 84.184471][ T36] CPU: 3 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.184487][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.184495][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.184516][ T36] Call Trace: [ 84.184521][ T36] [ 84.184526][ T36] dump_stack_lvl+0x100/0x190 [ 84.184541][ T36] should_fail_ex.cold+0x5/0xa [ 84.184555][ T36] should_failslab+0xc2/0x120 [ 84.184571][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.184587][ T36] ? __alloc_skb+0x140/0x710 [ 84.184603][ T36] __alloc_skb+0x140/0x710 [ 84.184616][ T36] ? __alloc_skb+0x5b7/0x710 [ 84.184634][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 84.184649][ T36] ? kfree_skbmem+0x19f/0x210 [ 84.184661][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.184682][ T36] process_one_work+0xa23/0x1940 [ 84.184704][ T36] ? __pfx_process_one_work+0x10/0x10 [ 84.184723][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.184739][ T36] worker_thread+0x5ef/0xe50 [ 84.184759][ T36] ? kthread+0x13a/0x450 [ 84.184773][ T36] ? __pfx_worker_thread+0x10/0x10 [ 84.184788][ T36] kthread+0x370/0x450 [ 84.184801][ T36] ? __pfx_kthread+0x10/0x10 [ 84.184816][ T36] ret_from_fork+0x72b/0xd50 [ 84.184831][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 84.184845][ T36] ? __switch_to+0x800/0x10f0 [ 84.184863][ T36] ? __pfx_kthread+0x10/0x10 [ 84.184878][ T36] ret_from_fork_asm+0x1a/0x30 [ 84.184899][ T36] [ 84.248092][ T50] FAULT_INJECTION: forcing a failure. [ 84.248092][ T50] name failslab, interval 1, probability 1, space 0, times 94 [ 84.253249][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.253266][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.253274][ T12] Workqueue: netns cleanup_net [ 84.253298][ T12] Call Trace: [ 84.253302][ T12] [ 84.253308][ T12] dump_stack_lvl+0x100/0x190 [ 84.253324][ T12] should_fail_ex.cold+0x5/0xa [ 84.253339][ T12] should_failslab+0xc2/0x120 [ 84.253355][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.253371][ T12] ? __alloc_skb+0x140/0x710 [ 84.253387][ T12] __alloc_skb+0x140/0x710 [ 84.253400][ T12] ? __alloc_skb+0x5b7/0x710 [ 84.253413][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 84.253431][ T12] rtmsg_ifa+0x16a/0x270 [ 84.253443][ T12] ? __pfx_rtmsg_ifa+0x10/0x10 [ 84.253459][ T12] __inet_del_ifa+0x3cb/0xf40 [ 84.253475][ T12] inetdev_event+0x3e1/0x17f0 [ 84.253488][ T12] ? ib_netdevice_event+0xfc/0x330 [ 84.253502][ T12] ? __pfx_inetdev_event+0x10/0x10 [ 84.253516][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.253535][ T12] notifier_call_chain+0x99/0x3f0 [ 84.253554][ T12] call_netdevice_notifiers_info+0xbe/0x110 [ 84.253573][ T12] unregister_netdevice_many_notify+0x1141/0x2140 [ 84.253594][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 84.253610][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 84.253627][ T12] ? mutex_is_locked+0x17/0x60 [ 84.253638][ T12] ? rtnl_is_locked+0x15/0x20 [ 84.253651][ T12] ops_undo_list+0x8ff/0xab0 [ 84.253670][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 84.253684][ T12] ? cleanup_net+0x332/0x920 [ 84.253701][ T12] ? idr_destroy+0x62/0x2e0 [ 84.253713][ T12] cleanup_net+0x499/0x920 [ 84.253731][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 84.253749][ T12] ? rcu_is_watching+0x12/0xc0 [ 84.253766][ T12] process_one_work+0xa23/0x1940 [ 84.253787][ T12] ? __pfx_process_one_work+0x10/0x10 [ 84.253807][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 84.253825][ T12] worker_thread+0x5ef/0xe50 [ 84.253846][ T12] ? kthread+0x13a/0x450 [ 84.253860][ T12] ? __pfx_worker_thread+0x10/0x10 [ 84.253874][ T12] kthread+0x370/0x450 [ 84.253888][ T12] ? __pfx_kthread+0x10/0x10 [ 84.253903][ T12] ret_from_fork+0x72b/0xd50 [ 84.253917][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 84.253931][ T12] ? __switch_to+0x800/0x10f0 [ 84.253949][ T12] ? __pfx_kthread+0x10/0x10 [ 84.253964][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.253986][ T12] [ 84.254688][ T12] FAULT_INJECTION: forcing a failure. [ 84.254688][ T12] name failslab, interval 1, probability 1, space 0, times 93 [ 84.256207][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 84.256222][ T50] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.256230][ T50] Workqueue: mld mld_ifc_work [ 84.256249][ T50] Call Trace: [ 84.256254][ T50] [ 84.256259][ T50] dump_stack_lvl+0x100/0x190 [ 84.256274][ T50] should_fail_ex.cold+0x5/0xa [ 84.256286][ T50] should_failslab+0xc2/0x120 [ 84.256302][ T50] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.256318][ T50] ? __alloc_skb+0x140/0x710 [ 84.256335][ T50] __alloc_skb+0x140/0x710 [ 84.256350][ T50] ? __alloc_skb+0x5b7/0x710 [ 84.256370][ T50] ? __pfx___alloc_skb+0x10/0x10 [ 84.256390][ T50] ? debug_object_activate+0x343/0x4b0 [ 84.256423][ T50] mld_newpack.isra.0+0x18e/0xa20 [ 84.256445][ T50] ? lock_acquire+0x1b9/0x370 [ 84.256474][ T50] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 84.256499][ T50] ? rcu_is_watching+0x12/0xc0 [ 84.256520][ T50] ? trace_contention_end+0x126/0x160 [ 84.256548][ T50] ? add_grhead+0x299/0x340 [ 84.256568][ T50] add_grhead+0x299/0x340 [ 84.256592][ T50] add_grec+0x1389/0x1930 [ 84.256623][ T50] ? __pfx_add_grec+0x10/0x10 [ 84.256651][ T50] mld_ifc_work+0x3c5/0xc10 [ 84.256687][ T50] ? rcu_is_watching+0x12/0xc0 [ 84.256710][ T50] process_one_work+0xa23/0x1940 [ 84.256745][ T50] ? __pfx_process_one_work+0x10/0x10 [ 84.256777][ T50] ? __pfx_mld_ifc_work+0x10/0x10 [ 84.256802][ T50] worker_thread+0x5ef/0xe50 [ 84.256835][ T50] ? kthread+0x13a/0x450 [ 84.256857][ T50] ? __pfx_worker_thread+0x10/0x10 [ 84.256879][ T50] kthread+0x370/0x450 [ 84.256899][ T50] ? __pfx_kthread+0x10/0x10 [ 84.256922][ T50] ret_from_fork+0x72b/0xd50 [ 84.256944][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 84.256966][ T50] ? __switch_to+0x800/0x10f0 [ 84.256988][ T50] ? __pfx_kthread+0x10/0x10 [ 84.257003][ T50] ret_from_fork_asm+0x1a/0x30 [ 84.257035][ T50] [ 84.397723][ T171] FAULT_INJECTION: forcing a failure. [ 84.397723][ T171] name failslab, interval 1, probability 1, space 0, times 91 [ 84.398145][ T48] FAULT_INJECTION: forcing a failure. [ 84.398145][ T48] name failslab, interval 1, probability 1, space 0, times 91 [ 84.398175][ T48] CPU: 3 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 84.398196][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.398208][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.398241][ T48] Call Trace: [ 84.398248][ T48] [ 84.398257][ T48] dump_stack_lvl+0x100/0x190 [ 84.398283][ T48] should_fail_ex.cold+0x5/0xa [ 84.398306][ T48] should_failslab+0xc2/0x120 [ 84.398333][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.398360][ T48] ? __alloc_skb+0x140/0x710 [ 84.398388][ T48] __alloc_skb+0x140/0x710 [ 84.398409][ T48] ? __alloc_skb+0x5b7/0x710 [ 84.398431][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 84.398456][ T48] ? kfree_skbmem+0x19f/0x210 [ 84.398477][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.398515][ T48] process_one_work+0xa23/0x1940 [ 84.398554][ T48] ? __pfx_process_one_work+0x10/0x10 [ 84.398588][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.398616][ T48] worker_thread+0x5ef/0xe50 [ 84.398651][ T48] ? kthread+0x13a/0x450 [ 84.398674][ T48] ? __pfx_worker_thread+0x10/0x10 [ 84.398698][ T48] kthread+0x370/0x450 [ 84.398720][ T48] ? __pfx_kthread+0x10/0x10 [ 84.398742][ T48] ret_from_fork+0x72b/0xd50 [ 84.398790][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 84.398810][ T48] ? __switch_to+0x800/0x10f0 [ 84.398838][ T48] ? __pfx_kthread+0x10/0x10 [ 84.398864][ T48] ret_from_fork_asm+0x1a/0x30 [ 84.398902][ T48] [ 84.399883][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.399898][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.399906][ T12] Workqueue: netns cleanup_net [ 84.399926][ T12] Call Trace: [ 84.399931][ T12] [ 84.399936][ T12] dump_stack_lvl+0x100/0x190 [ 84.399956][ T12] should_fail_ex.cold+0x5/0xa [ 84.399976][ T12] should_failslab+0xc2/0x120 [ 84.400000][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.400023][ T12] ? __alloc_skb+0x140/0x710 [ 84.400053][ T12] __alloc_skb+0x140/0x710 [ 84.400073][ T12] ? __alloc_skb+0x5b7/0x710 [ 84.400093][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 84.400115][ T12] ? if_nlmsg_size+0x4b/0xd80 [ 84.400144][ T12] rtmsg_ifinfo_build_skb+0x81/0x260 [ 84.400166][ T12] unregister_netdevice_many_notify+0x11e2/0x2140 [ 84.400201][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 84.400226][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 84.400252][ T12] ? mutex_is_locked+0x17/0x60 [ 84.400269][ T12] ? rtnl_is_locked+0x15/0x20 [ 84.400289][ T12] ops_undo_list+0x8ff/0xab0 [ 84.400317][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 84.400340][ T12] ? cleanup_net+0x332/0x920 [ 84.400366][ T12] ? idr_destroy+0x62/0x2e0 [ 84.400386][ T12] cleanup_net+0x499/0x920 [ 84.400413][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 84.400441][ T12] ? rcu_is_watching+0x12/0xc0 [ 84.400466][ T12] process_one_work+0xa23/0x1940 [ 84.400501][ T12] ? __pfx_process_one_work+0x10/0x10 [ 84.400532][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 84.400560][ T12] worker_thread+0x5ef/0xe50 [ 84.400593][ T12] ? kthread+0x13a/0x450 [ 84.400614][ T12] ? __pfx_worker_thread+0x10/0x10 [ 84.400637][ T12] kthread+0x370/0x450 [ 84.400658][ T12] ? __pfx_kthread+0x10/0x10 [ 84.400681][ T12] ret_from_fork+0x72b/0xd50 [ 84.400704][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 84.400726][ T12] ? __switch_to+0x800/0x10f0 [ 84.400752][ T12] ? __pfx_kthread+0x10/0x10 [ 84.400775][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.400810][ T12] [ 84.485630][ T36] FAULT_INJECTION: forcing a failure. [ 84.485630][ T36] name failslab, interval 1, probability 1, space 0, times 88 [ 84.485656][ T36] CPU: 3 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.485670][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.485677][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 84.485700][ T36] Call Trace: [ 84.485704][ T36] [ 84.485709][ T36] dump_stack_lvl+0x100/0x190 [ 84.485727][ T36] should_fail_ex.cold+0x5/0xa [ 84.485748][ T36] should_failslab+0xc2/0x120 [ 84.485773][ T36] __kmalloc_noprof+0xfc/0x820 [ 84.485799][ T36] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 84.485834][ T36] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 84.485862][ T36] ? kasan_save_stack+0x3f/0x50 [ 84.485884][ T36] ? kasan_save_stack+0x30/0x50 [ 84.485904][ T36] ? __kasan_kmalloc+0xaa/0xb0 [ 84.485922][ T36] ? __kmalloc_noprof+0x322/0x820 [ 84.485946][ T36] ? lock_acquire+0x1b9/0x370 [ 84.485981][ T36] ? find_held_lock+0x2b/0x80 [ 84.485996][ T36] ? __kfree_rcu_sheaf+0x195/0x730 [ 84.486010][ T36] ? __kfree_rcu_sheaf+0x195/0x730 [ 84.486024][ T36] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 84.486045][ T36] ? kvfree_call_rcu+0x1be/0x4f0 [ 84.486058][ T36] ? __asan_memcpy+0x3c/0x60 [ 84.486071][ T36] ieee80211_inform_bss+0x159/0x1170 [ 84.486091][ T36] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 84.486110][ T36] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 84.486128][ T36] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 84.486145][ T36] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 84.486160][ T36] ? unwind_next_frame+0x3be/0x2090 [ 84.486180][ T36] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 84.486198][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 84.486234][ T36] ? stack_trace_save+0x8e/0xc0 [ 84.486257][ T36] ? __pfx_stack_trace_save+0x10/0x10 [ 84.486282][ T36] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 84.486304][ T36] cfg80211_inform_bss_data+0x230/0x3b60 [ 84.486324][ T36] ? __kmalloc_noprof+0x322/0x820 [ 84.486337][ T36] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 84.486355][ T36] ? cfg80211_wiphy_work+0x2b7/0x550 [ 84.486369][ T36] ? process_one_work+0xa23/0x1940 [ 84.486385][ T36] ? worker_thread+0x5ef/0xe50 [ 84.486399][ T36] ? kthread+0x370/0x450 [ 84.486413][ T36] ? ret_from_fork+0x72b/0xd50 [ 84.486426][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 84.486443][ T36] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 84.486463][ T36] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.486482][ T36] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 84.486501][ T36] ? __lock_acquire+0x49f/0x1a40 [ 84.486518][ T36] ? __lock_acquire+0x49f/0x1a40 [ 84.486538][ T36] ? __lock_acquire+0x49f/0x1a40 [ 84.486555][ T36] ? find_held_lock+0x2b/0x80 [ 84.486568][ T36] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 84.486584][ T36] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 84.486604][ T36] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 84.486623][ T36] ieee80211_bss_info_update+0x310/0xab0 [ 84.486641][ T36] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 84.486661][ T36] ? rcu_is_watching+0x12/0xc0 [ 84.486674][ T36] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 84.486689][ T36] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 84.486707][ T36] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 84.486730][ T36] ieee80211_iface_work+0xa9a/0x1070 [ 84.486770][ T36] cfg80211_wiphy_work+0x2b7/0x550 [ 84.486790][ T36] process_one_work+0xa23/0x1940 [ 84.486810][ T36] ? __pfx_process_one_work+0x10/0x10 [ 84.486829][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 84.486847][ T36] worker_thread+0x5ef/0xe50 [ 84.486867][ T36] ? kthread+0x13a/0x450 [ 84.486880][ T36] ? __pfx_worker_thread+0x10/0x10 [ 84.486894][ T36] kthread+0x370/0x450 [ 84.486908][ T36] ? __pfx_kthread+0x10/0x10 [ 84.486923][ T36] ret_from_fork+0x72b/0xd50 [ 84.486936][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 84.486954][ T36] ? __switch_to+0x800/0x10f0 [ 84.486972][ T36] ? __pfx_kthread+0x10/0x10 [ 84.486987][ T36] ret_from_fork_asm+0x1a/0x30 [ 84.487007][ T36] [ 84.557479][ T36] FAULT_INJECTION: forcing a failure. [ 84.557479][ T36] name failslab, interval 1, probability 1, space 0, times 87 [ 84.558604][ T171] CPU: 2 UID: 0 PID: 171 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.558621][ T171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.558629][ T171] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.558651][ T171] Call Trace: [ 84.558656][ T171] [ 84.558662][ T171] dump_stack_lvl+0x100/0x190 [ 84.558678][ T171] should_fail_ex.cold+0x5/0xa [ 84.558692][ T171] should_failslab+0xc2/0x120 [ 84.558709][ T171] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.558725][ T171] ? __alloc_skb+0x140/0x710 [ 84.558742][ T171] __alloc_skb+0x140/0x710 [ 84.558774][ T171] ? __alloc_skb+0x5b7/0x710 [ 84.558788][ T171] ? __pfx___alloc_skb+0x10/0x10 [ 84.558804][ T171] ? kfree_skbmem+0x19f/0x210 [ 84.558816][ T171] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.558838][ T171] process_one_work+0xa23/0x1940 [ 84.558860][ T171] ? __pfx_process_one_work+0x10/0x10 [ 84.558880][ T171] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.558897][ T171] worker_thread+0x5ef/0xe50 [ 84.558916][ T171] ? __pfx_worker_thread+0x10/0x10 [ 84.558932][ T171] ? kthread+0x13a/0x450 [ 84.558946][ T171] ? __pfx_worker_thread+0x10/0x10 [ 84.558961][ T171] kthread+0x370/0x450 [ 84.558974][ T171] ? __pfx_kthread+0x10/0x10 [ 84.558989][ T171] ret_from_fork+0x72b/0xd50 [ 84.559005][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 84.559022][ T171] ? __switch_to+0x800/0x10f0 [ 84.559040][ T171] ? __pfx_kthread+0x10/0x10 [ 84.559055][ T171] ret_from_fork_asm+0x1a/0x30 [ 84.559076][ T171] [ 84.657752][ T1165] FAULT_INJECTION: forcing a failure. [ 84.657752][ T1165] name failslab, interval 1, probability 1, space 0, times 85 [ 84.658965][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.658981][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.658989][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.659010][ T36] Call Trace: [ 84.659015][ T36] [ 84.659021][ T36] dump_stack_lvl+0x100/0x190 [ 84.659042][ T36] should_fail_ex.cold+0x5/0xa [ 84.659055][ T36] should_failslab+0xc2/0x120 [ 84.659071][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.659088][ T36] ? __alloc_skb+0x140/0x710 [ 84.659105][ T36] __alloc_skb+0x140/0x710 [ 84.659117][ T36] ? __alloc_skb+0x5b7/0x710 [ 84.659131][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 84.659144][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.659157][ T36] ? __pfx___might_resched+0x10/0x10 [ 84.659178][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.659199][ T36] process_one_work+0xa23/0x1940 [ 84.659221][ T36] ? __pfx_process_one_work+0x10/0x10 [ 84.659240][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.659257][ T36] worker_thread+0x5ef/0xe50 [ 84.659277][ T36] ? kthread+0x13a/0x450 [ 84.659291][ T36] ? __pfx_worker_thread+0x10/0x10 [ 84.659306][ T36] kthread+0x370/0x450 [ 84.659320][ T36] ? __pfx_kthread+0x10/0x10 [ 84.659335][ T36] ret_from_fork+0x72b/0xd50 [ 84.659351][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 84.659365][ T36] ? __switch_to+0x800/0x10f0 [ 84.659383][ T36] ? __pfx_kthread+0x10/0x10 [ 84.659398][ T36] ret_from_fork_asm+0x1a/0x30 [ 84.659419][ T36] [ 84.660920][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.661047][ T1165] CPU: 2 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 84.661064][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.661072][ T1165] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.661091][ T1165] Call Trace: [ 84.661096][ T1165] [ 84.661100][ T1165] dump_stack_lvl+0x100/0x190 [ 84.661116][ T1165] should_fail_ex.cold+0x5/0xa [ 84.661128][ T1165] should_failslab+0xc2/0x120 [ 84.661144][ T1165] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.661159][ T1165] ? __alloc_skb+0x140/0x710 [ 84.661175][ T1165] __alloc_skb+0x140/0x710 [ 84.661188][ T1165] ? __alloc_skb+0x5b7/0x710 [ 84.661202][ T1165] ? __pfx___alloc_skb+0x10/0x10 [ 84.661217][ T1165] ? kfree_skbmem+0x19f/0x210 [ 84.661229][ T1165] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.661250][ T1165] process_one_work+0xa23/0x1940 [ 84.661271][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 84.661291][ T1165] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.661307][ T1165] worker_thread+0x5ef/0xe50 [ 84.661327][ T1165] ? kthread+0x13a/0x450 [ 84.661341][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 84.661355][ T1165] kthread+0x370/0x450 [ 84.661369][ T1165] ? __pfx_kthread+0x10/0x10 [ 84.661384][ T1165] ret_from_fork+0x72b/0xd50 [ 84.661398][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 84.661412][ T1165] ? __switch_to+0x800/0x10f0 [ 84.661429][ T1165] ? __pfx_kthread+0x10/0x10 [ 84.661444][ T1165] ret_from_fork_asm+0x1a/0x30 [ 84.661465][ T1165] [ 84.767650][ T36] FAULT_INJECTION: forcing a failure. [ 84.767650][ T36] name failslab, interval 1, probability 1, space 0, times 82 [ 84.818411][ T5974] FAULT_INJECTION: forcing a failure. [ 84.818411][ T5974] name failslab, interval 1, probability 1, space 0, times 81 [ 84.820000][ T36] CPU: 2 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 84.820025][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.820039][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.820071][ T36] Call Trace: [ 84.820079][ T36] [ 84.820087][ T36] dump_stack_lvl+0x100/0x190 [ 84.820111][ T36] should_fail_ex.cold+0x5/0xa [ 84.820135][ T36] should_failslab+0xc2/0x120 [ 84.820161][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.820188][ T36] ? __alloc_skb+0x140/0x710 [ 84.820216][ T36] __alloc_skb+0x140/0x710 [ 84.820238][ T36] ? __alloc_skb+0x5b7/0x710 [ 84.820260][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 84.820286][ T36] ? kfree_skbmem+0x19f/0x210 [ 84.820308][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.820346][ T36] process_one_work+0xa23/0x1940 [ 84.820385][ T36] ? __pfx_process_one_work+0x10/0x10 [ 84.820419][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.820448][ T36] worker_thread+0x5ef/0xe50 [ 84.820484][ T36] ? kthread+0x13a/0x450 [ 84.820507][ T36] ? __pfx_worker_thread+0x10/0x10 [ 84.820531][ T36] kthread+0x370/0x450 [ 84.820554][ T36] ? __pfx_kthread+0x10/0x10 [ 84.820580][ T36] ret_from_fork+0x72b/0xd50 [ 84.820605][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 84.820629][ T36] ? __switch_to+0x800/0x10f0 [ 84.820658][ T36] ? __pfx_kthread+0x10/0x10 [ 84.820684][ T36] ret_from_fork_asm+0x1a/0x30 [ 84.820723][ T36] [ 84.894701][ T171] FAULT_INJECTION: forcing a failure. [ 84.894701][ T171] name failslab, interval 1, probability 1, space 0, times 80 [ 84.894736][ T171] CPU: 2 UID: 0 PID: 171 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.894782][ T171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.894795][ T171] Workqueue: events_unbound cfg80211_wiphy_work [ 84.894829][ T171] Call Trace: [ 84.894836][ T171] [ 84.894844][ T171] dump_stack_lvl+0x100/0x190 [ 84.894870][ T171] should_fail_ex.cold+0x5/0xa [ 84.894892][ T171] should_failslab+0xc2/0x120 [ 84.894920][ T171] __kmalloc_noprof+0xfc/0x820 [ 84.894945][ T171] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 84.894978][ T171] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 84.895011][ T171] ? unwind_next_frame+0x3be/0x2090 [ 84.895044][ T171] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 84.895071][ T171] ? ret_from_fork_asm+0x1a/0x30 [ 84.895112][ T171] ? stack_trace_save+0x8e/0xc0 [ 84.895139][ T171] ? __pfx_stack_trace_save+0x10/0x10 [ 84.895170][ T171] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 84.895195][ T171] cfg80211_inform_bss_data+0x230/0x3b60 [ 84.895222][ T171] ? __kmalloc_noprof+0x322/0x820 [ 84.895242][ T171] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 84.895273][ T171] ? cfg80211_wiphy_work+0x2b7/0x550 [ 84.895298][ T171] ? process_one_work+0xa23/0x1940 [ 84.895325][ T171] ? worker_thread+0x5ef/0xe50 [ 84.895349][ T171] ? kthread+0x370/0x450 [ 84.895373][ T171] ? ret_from_fork+0x72b/0xd50 [ 84.895395][ T171] ? ret_from_fork_asm+0x1a/0x30 [ 84.895426][ T171] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 84.895458][ T171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.895487][ T171] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 84.895520][ T171] ? __lock_acquire+0x49f/0x1a40 [ 84.895550][ T171] ? __lock_acquire+0x49f/0x1a40 [ 84.895588][ T171] ? __lock_acquire+0x49f/0x1a40 [ 84.895617][ T171] ? find_held_lock+0x2b/0x80 [ 84.895639][ T171] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 84.895666][ T171] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 84.895701][ T171] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 84.895735][ T171] ieee80211_bss_info_update+0x310/0xab0 [ 84.895765][ T171] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 84.895800][ T171] ? rcu_is_watching+0x12/0xc0 [ 84.895821][ T171] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 84.895845][ T171] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 84.895874][ T171] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 84.895912][ T171] ieee80211_iface_work+0xa9a/0x1070 [ 84.895942][ T171] cfg80211_wiphy_work+0x2b7/0x550 [ 84.895971][ T171] process_one_work+0xa23/0x1940 [ 84.896012][ T171] ? __pfx_process_one_work+0x10/0x10 [ 84.896046][ T171] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 84.896076][ T171] worker_thread+0x5ef/0xe50 [ 84.896108][ T171] ? __pfx_worker_thread+0x10/0x10 [ 84.896134][ T171] ? kthread+0x13a/0x450 [ 84.896156][ T171] ? __pfx_worker_thread+0x10/0x10 [ 84.896180][ T171] kthread+0x370/0x450 [ 84.896202][ T171] ? __pfx_kthread+0x10/0x10 [ 84.896228][ T171] ret_from_fork+0x72b/0xd50 [ 84.896251][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 84.896274][ T171] ? __switch_to+0x800/0x10f0 [ 84.896303][ T171] ? __pfx_kthread+0x10/0x10 [ 84.896329][ T171] ret_from_fork_asm+0x1a/0x30 [ 84.896366][ T171] [ 84.957876][ T171] FAULT_INJECTION: forcing a failure. [ 84.957876][ T171] name failslab, interval 1, probability 1, space 0, times 79 [ 84.959096][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 84.959118][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.959128][ T5974] Call Trace: [ 84.959134][ T5974] [ 84.959141][ T5974] dump_stack_lvl+0x100/0x190 [ 84.959166][ T5974] should_fail_ex.cold+0x5/0xa [ 84.959185][ T5974] should_failslab+0xc2/0x120 [ 84.959207][ T5974] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.959229][ T5974] ? stack_trace_save+0x8e/0xc0 [ 84.959251][ T5974] ? alloc_empty_file+0x5b/0x1c0 [ 84.959280][ T5974] alloc_empty_file+0x5b/0x1c0 [ 84.959302][ T5974] path_openat+0xe7/0x4280 [ 84.959321][ T5974] ? kasan_save_track+0x14/0x30 [ 84.959343][ T5974] ? __kasan_slab_alloc+0x89/0x90 [ 84.959361][ T5974] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 84.959378][ T5974] ? do_getname+0x35/0x390 [ 84.959395][ T5974] ? do_sys_openat2+0xc7/0x1e0 [ 84.959414][ T5974] ? __ia32_compat_sys_openat+0x12d/0x210 [ 84.959435][ T5974] ? __do_fast_syscall_32+0xe7/0x970 [ 84.959460][ T5974] ? __pfx_path_openat+0x10/0x10 [ 84.959481][ T5974] do_file_open+0x20e/0x430 [ 84.959498][ T5974] ? __lock_acquire+0x49f/0x1a40 [ 84.959525][ T5974] ? __pfx_do_file_open+0x10/0x10 [ 84.959557][ T5974] ? _raw_spin_unlock+0x28/0x50 [ 84.959576][ T5974] ? alloc_fd+0x471/0x7a0 [ 84.959602][ T5974] do_sys_openat2+0x10f/0x1e0 [ 84.959624][ T5974] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.959654][ T5974] ? kmem_cache_free+0x127/0x6b0 [ 84.959670][ T5974] ? __pfx_path_umount+0x10/0x10 [ 84.959692][ T5974] __ia32_compat_sys_openat+0x12d/0x210 [ 84.959715][ T5974] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 84.959740][ T5974] ? __pfx___ia32_sys_umount+0x10/0x10 [ 84.959765][ T5974] __do_fast_syscall_32+0xe7/0x970 [ 84.959789][ T5974] do_fast_syscall_32+0x32/0x70 [ 84.959809][ T5974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.959830][ T5974] RIP: 0023:0xf7f35fec [ 84.959844][ T5974] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 84.959860][ T5974] RSP: 002b:00000000ffe7df10 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 84.959878][ T5974] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffe7f074 [ 84.959889][ T5974] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f73c6ff4 [ 84.959900][ T5974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.959911][ T5974] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.959920][ T5974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.959943][ T5974] [ 84.960199][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.961898][ T171] CPU: 2 UID: 0 PID: 171 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 84.961920][ T171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.961933][ T171] Workqueue: events_unbound nsim_dev_trap_report_work [ 84.961961][ T171] Call Trace: [ 84.961968][ T171] [ 84.961975][ T171] dump_stack_lvl+0x100/0x190 [ 84.962005][ T171] should_fail_ex.cold+0x5/0xa [ 84.962025][ T171] should_failslab+0xc2/0x120 [ 84.962049][ T171] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.962072][ T171] ? __alloc_skb+0x140/0x710 [ 84.962100][ T171] __alloc_skb+0x140/0x710 [ 84.962120][ T171] ? __alloc_skb+0x5b7/0x710 [ 84.962141][ T171] ? __pfx___alloc_skb+0x10/0x10 [ 84.962167][ T171] ? kfree_skbmem+0x19f/0x210 [ 84.962187][ T171] nsim_dev_trap_report_work+0x2af/0xd20 [ 84.962223][ T171] process_one_work+0xa23/0x1940 [ 84.962259][ T171] ? __pfx_process_one_work+0x10/0x10 [ 84.962291][ T171] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 84.962318][ T171] worker_thread+0x5ef/0xe50 [ 84.962348][ T171] ? __pfx_worker_thread+0x10/0x10 [ 84.962372][ T171] ? kthread+0x13a/0x450 [ 84.962394][ T171] ? __pfx_worker_thread+0x10/0x10 [ 84.962415][ T171] kthread+0x370/0x450 [ 84.962435][ T171] ? __pfx_kthread+0x10/0x10 [ 84.962457][ T171] ret_from_fork+0x72b/0xd50 [ 84.962481][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 84.962504][ T171] ? __switch_to+0x800/0x10f0 [ 84.962536][ T171] ? __pfx_kthread+0x10/0x10 [ 84.962560][ T171] ret_from_fork_asm+0x1a/0x30 [ 84.962598][ T171] [ 84.967217][ C1] FAULT_INJECTION: forcing a failure. [ 84.967217][ C1] name failslab, interval 1, probability 1, space 0, times 77 [ 84.967626][ C0] FAULT_INJECTION: forcing a failure. [ 84.967626][ C0] name failslab, interval 1, probability 1, space 0, times 77 [ 84.967653][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 84.967673][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.967684][ C0] Call Trace: [ 84.967691][ C0] [ 84.967698][ C0] dump_stack_lvl+0x100/0x190 [ 84.967722][ C0] should_fail_ex.cold+0x5/0xa [ 84.967744][ C0] should_failslab+0xc2/0x120 [ 84.967768][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 84.967792][ C0] ? dst_alloc+0x99/0x1a0 [ 84.967815][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 84.967842][ C0] dst_alloc+0x99/0x1a0 [ 84.967866][ C0] icmp6_dst_alloc+0x79/0x4f0 [ 84.967891][ C0] ndisc_send_skb+0x133f/0x1bf0 [ 84.967919][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 84.967944][ C0] ? kmalloc_reserve+0xf9/0x350 [ 84.967970][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 84.967993][ C0] ? __asan_memcpy+0x3c/0x60 [ 84.968016][ C0] ndisc_send_rs+0x129/0x680 [ 84.968043][ C0] addrconf_rs_timer+0x424/0x880 [ 84.968067][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 84.968094][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 84.968116][ C0] call_timer_fn+0x19a/0x610 [ 84.968150][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 84.968177][ C0] ? __run_timers+0x747/0xb00 [ 84.968202][ C0] ? rcu_is_watching+0x12/0xc0 [ 84.968229][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 84.968249][ C0] __run_timers+0x757/0xb00 [ 84.968280][ C0] ? __pfx___run_timers+0x10/0x10 [ 84.968314][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 84.968339][ C0] run_timer_base+0x114/0x190 [ 84.968364][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 84.968392][ C0] run_timer_softirq+0x1a/0x50 [ 84.968417][ C0] handle_softirqs+0x1ea/0x9b0 [ 84.968442][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 84.968461][ C0] ? _raw_spin_unlock+0x28/0x50 [ 84.968478][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 84.968504][ C0] __irq_exit_rcu+0x162/0x210 [ 84.968524][ C0] irq_exit_rcu+0x9/0x30 [ 84.968542][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 84.968563][ C0] [ 84.968569][ C0] [ 84.968599][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.968623][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 84.968644][ C0] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 84.968660][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000206 [ 84.968676][ C0] RAX: 00000000000cfa8b RBX: ffffffff8e891480 RCX: ffffffff8bb872d5 [ 84.968688][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 84.968698][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100564678d [ 84.968710][ C0] R10: ffff88802b233c6b R11: 0000000000000000 R12: 0000000000000000 [ 84.968721][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 84.968737][ C0] ? ct_kernel_exit+0x125/0x180 [ 84.968761][ C0] default_idle+0x9/0x10 [ 84.968782][ C0] default_idle_call+0x6c/0xb0 [ 84.968804][ C0] do_idle+0x3a7/0x5b0 [ 84.968824][ C0] ? __pfx_do_idle+0x10/0x10 [ 84.968843][ C0] ? rest_init+0x23d/0x260 [ 84.968871][ C0] cpu_startup_entry+0x4f/0x60 [ 84.968892][ C0] rest_init+0x251/0x260 [ 84.968915][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 84.968944][ C0] start_kernel+0x48e/0x490 [ 84.968966][ C0] x86_64_start_reservations+0x24/0x30 [ 84.968989][ C0] x86_64_start_kernel+0x12b/0x130 [ 84.969012][ C0] common_startup_64+0x13e/0x158 [ 84.969048][ C0] [ 84.996803][ C3] FAULT_INJECTION: forcing a failure. [ 84.996803][ C3] name failslab, interval 1, probability 1, space 0, times 76 [ 84.999908][ C1] CPU: 1 UID: 0 PID: 5974 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 84.999934][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.999945][ C1] Call Trace: [ 84.999955][ C1] [ 84.999963][ C1] dump_stack_lvl+0x100/0x190 [ 84.999993][ C1] should_fail_ex.cold+0x5/0xa [ 85.000018][ C1] should_failslab+0xc2/0x120 [ 85.000044][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.000072][ C1] ? __alloc_skb+0x140/0x710 [ 85.000102][ C1] __alloc_skb+0x140/0x710 [ 85.000123][ C1] ? __alloc_skb+0x5b7/0x710 [ 85.000146][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 85.000170][ C1] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 85.000197][ C1] ndisc_alloc_skb+0xd8/0x530 [ 85.000223][ C1] ndisc_send_rs+0x370/0x680 [ 85.000251][ C1] addrconf_rs_timer+0x424/0x880 [ 85.000278][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 85.000306][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 85.000328][ C1] call_timer_fn+0x19a/0x610 [ 85.000355][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 85.000385][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 85.000407][ C1] ? mark_held_locks+0x40/0x70 [ 85.000438][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 85.000460][ C1] __run_timers+0x757/0xb00 [ 85.000492][ C1] ? __pfx___run_timers+0x10/0x10 [ 85.000528][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 85.000551][ C1] run_timer_base+0x114/0x190 [ 85.000578][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 85.000608][ C1] run_timer_softirq+0x1a/0x50 [ 85.000639][ C1] handle_softirqs+0x1ea/0x9b0 [ 85.000665][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 85.000687][ C1] ? _raw_spin_unlock+0x28/0x50 [ 85.000704][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 85.000730][ C1] __irq_exit_rcu+0x162/0x210 [ 85.000751][ C1] irq_exit_rcu+0x9/0x30 [ 85.000770][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 85.000793][ C1] [ 85.000799][ C1] [ 85.000806][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.000829][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 85.000857][ C1] Code: 63 00 be 03 00 00 00 5b e9 02 1e 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 c5 23 5a 12 <48> 8b 34 24 65 48 8b 15 a1 23 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 85.000874][ C1] RSP: 0018:ffffc900043e7680 EFLAGS: 00000206 [ 85.000891][ C1] RAX: 0000000080000001 RBX: 000000000000000c RCX: ffffffff8285474e [ 85.000903][ C1] RDX: ffff888022500000 RSI: ffffffff828547b2 RDI: ffff888022500000 [ 85.000916][ C1] RBP: ffff88802fe79000 R08: 0000000000000006 R09: 0000000000001000 [ 85.000927][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 85.000938][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 85.000955][ C1] ? __nr_to_section+0x3e/0x100 [ 85.000979][ C1] ? __nr_to_section+0xa2/0x100 [ 85.001003][ C1] __nr_to_section+0xaa/0x100 [ 85.001026][ C1] lookup_page_ext+0x46/0x100 [ 85.001050][ C1] page_table_check_clear+0x309/0x8f0 [ 85.001078][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 85.001103][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 85.001127][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 85.001145][ C1] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 85.001179][ C1] __zap_vma_range+0x2ccc/0x4a30 [ 85.001223][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 85.001252][ C1] ? find_held_lock+0x2b/0x80 [ 85.001281][ C1] unmap_vmas+0x299/0x5f0 [ 85.001309][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 85.001335][ C1] ? mas_next_slot+0x10a3/0x1960 [ 85.001372][ C1] exit_mmap+0x1ef/0xa00 [ 85.001401][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 85.001426][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.001453][ C1] ? uprobe_clear_state+0x49/0x260 [ 85.001471][ C1] ? find_held_lock+0x2b/0x80 [ 85.001493][ C1] ? uprobe_clear_state+0x5f/0x260 [ 85.001514][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 85.001548][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 85.001578][ C1] __mmput+0x12a/0x410 [ 85.001600][ C1] mmput+0x67/0x80 [ 85.001620][ C1] do_exit+0x8b1/0x2ae0 [ 85.001651][ C1] ? do_raw_spin_lock+0x128/0x260 [ 85.001671][ C1] ? __pfx_do_exit+0x10/0x10 [ 85.001694][ C1] ? do_group_exit+0x1bd/0x2a0 [ 85.001720][ C1] ? rcu_is_watching+0x12/0xc0 [ 85.001745][ C1] do_group_exit+0xd5/0x2a0 [ 85.001772][ C1] __ia32_sys_exit_group+0x3e/0x50 [ 85.001797][ C1] ia32_sys_call+0x19ea/0x19f0 [ 85.001826][ C1] __do_fast_syscall_32+0xe7/0x970 [ 85.001850][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 85.001873][ C1] do_fast_syscall_32+0x32/0x70 [ 85.001896][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.001920][ C1] RIP: 0023:0xf7f35fec [ 85.001936][ C1] Code: Unable to access opcode bytes at 0xf7f35fc2. [ 85.001944][ C1] RSP: 002b:00000000ffe7dedc EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 85.001959][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 85.001972][ C1] RDX: 00000000f7125037 RSI: 00000000f73cd300 RDI: 00000000f72014d9 [ 85.001983][ C1] RBP: 00000000ffe7df38 R08: 0000000000000000 R09: 0000000000000000 [ 85.001993][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.002005][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.002027][ C1] [ 85.077912][ T171] FAULT_INJECTION: forcing a failure. [ 85.077912][ T171] name failslab, interval 1, probability 1, space 0, times 74 [ 85.079414][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 85.079431][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.079439][ C3] Call Trace: [ 85.079445][ C3] [ 85.079451][ C3] dump_stack_lvl+0x100/0x190 [ 85.079471][ C3] should_fail_ex.cold+0x5/0xa [ 85.079485][ C3] should_failslab+0xc2/0x120 [ 85.079503][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.079520][ C3] ? __alloc_skb+0x5b7/0x710 [ 85.079535][ C3] ? __alloc_skb+0x140/0x710 [ 85.079551][ C3] __alloc_skb+0x140/0x710 [ 85.079564][ C3] ? __alloc_skb+0x5b7/0x710 [ 85.079578][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 85.079593][ C3] ? lock_acquire+0x1b9/0x370 [ 85.079613][ C3] __netdev_alloc_skb+0x7a/0x960 [ 85.079632][ C3] __ieee80211_beacon_get+0xba1/0x1ee0 [ 85.079651][ C3] ? __lock_acquire+0x49f/0x1a40 [ 85.079669][ C3] ieee80211_beacon_get_tim+0xa6/0x280 [ 85.079685][ C3] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 85.079703][ C3] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 85.079725][ C3] __iterate_interfaces+0x2e6/0x650 [ 85.079740][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 85.079766][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 85.079793][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 85.079822][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 85.079842][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 85.079861][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 85.079884][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 85.079898][ C3] handle_softirqs+0x1ea/0x9b0 [ 85.079915][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 85.079927][ C3] ? _raw_spin_unlock+0x28/0x50 [ 85.079939][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 85.079954][ C3] __irq_exit_rcu+0x162/0x210 [ 85.079967][ C3] irq_exit_rcu+0x9/0x30 [ 85.079979][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 85.079993][ C3] [ 85.079997][ C3] [ 85.080001][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.080015][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.080029][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.080040][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000202 [ 85.080050][ C3] RAX: 000000000006ee6b RBX: ffff88801c7fa540 RCX: ffffffff8bb872d5 [ 85.080058][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 85.080065][ C3] RBP: ffffed10038ff4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 85.080072][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 85.080079][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 85.080089][ C3] ? ct_kernel_exit+0x125/0x180 [ 85.080105][ C3] default_idle+0x9/0x10 [ 85.080119][ C3] default_idle_call+0x6c/0xb0 [ 85.080137][ C3] do_idle+0x3a7/0x5b0 [ 85.080151][ C3] ? __pfx_do_idle+0x10/0x10 [ 85.080162][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 85.080179][ C3] cpu_startup_entry+0x4f/0x60 [ 85.080192][ C3] start_secondary+0x21d/0x2d0 [ 85.080205][ C3] ? __pfx_start_secondary+0x10/0x10 [ 85.080220][ C3] common_startup_64+0x13e/0x158 [ 85.080244][ C3] [ 85.080551][ T13] FAULT_INJECTION: forcing a failure. [ 85.080551][ T13] name failslab, interval 1, probability 1, space 0, times 73 [ 85.081635][ T171] CPU: 2 UID: 0 PID: 171 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 85.081673][ T171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.081686][ T171] Workqueue: events_unbound nsim_dev_trap_report_work [ 85.081716][ T171] Call Trace: [ 85.081723][ T171] [ 85.081731][ T171] dump_stack_lvl+0x100/0x190 [ 85.081753][ T171] should_fail_ex.cold+0x5/0xa [ 85.081778][ T12] bond0 (unregistering): Released all slaves [ 85.081777][ T171] should_failslab+0xc2/0x120 [ 85.081803][ T171] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.081829][ T171] ? __alloc_skb+0x140/0x710 [ 85.081855][ T171] __alloc_skb+0x140/0x710 [ 85.081877][ T171] ? __alloc_skb+0x5b7/0x710 [ 85.081899][ T171] ? __pfx___alloc_skb+0x10/0x10 [ 85.081923][ T171] ? kfree_skbmem+0x19f/0x210 [ 85.081945][ T171] nsim_dev_trap_report_work+0x2af/0xd20 [ 85.081980][ T171] process_one_work+0xa23/0x1940 [ 85.082024][ T171] ? __pfx_process_one_work+0x10/0x10 [ 85.082056][ T171] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.082083][ T171] worker_thread+0x5ef/0xe50 [ 85.082112][ T171] ? __pfx_worker_thread+0x10/0x10 [ 85.082135][ T171] ? kthread+0x13a/0x450 [ 85.082158][ T171] ? __pfx_worker_thread+0x10/0x10 [ 85.082182][ T171] kthread+0x370/0x450 [ 85.082204][ T171] ? __pfx_kthread+0x10/0x10 [ 85.082228][ T171] ret_from_fork+0x72b/0xd50 [ 85.082251][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 85.082273][ T171] ? __switch_to+0x800/0x10f0 [ 85.082301][ T171] ? __pfx_kthread+0x10/0x10 [ 85.082326][ T171] ret_from_fork_asm+0x1a/0x30 [ 85.082363][ T171] [ 85.085018][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 85.085033][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.085041][ T13] Workqueue: bat_events batadv_mcast_mla_update [ 85.085063][ T13] Call Trace: [ 85.085067][ T13] [ 85.085072][ T13] dump_stack_lvl+0x100/0x190 [ 85.085087][ T13] should_fail_ex.cold+0x5/0xa [ 85.085099][ T13] should_failslab+0xc2/0x120 [ 85.085115][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.085131][ T13] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 85.085151][ T13] batadv_mcast_mla_update+0x19ae/0x3200 [ 85.085171][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 85.085190][ T13] ? debug_object_deactivate+0x2e4/0x3b0 [ 85.085213][ T13] ? rcu_is_watching+0x12/0xc0 [ 85.085229][ T13] process_one_work+0xa23/0x1940 [ 85.085251][ T13] ? __pfx_process_one_work+0x10/0x10 [ 85.085271][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 85.085289][ T13] worker_thread+0x5ef/0xe50 [ 85.085309][ T13] ? kthread+0x13a/0x450 [ 85.085324][ T13] ? __pfx_worker_thread+0x10/0x10 [ 85.085339][ T13] kthread+0x370/0x450 [ 85.085352][ T13] ? __pfx_kthread+0x10/0x10 [ 85.085367][ T13] ret_from_fork+0x72b/0xd50 [ 85.085382][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 85.085396][ T13] ? __switch_to+0x800/0x10f0 [ 85.085413][ T13] ? __pfx_kthread+0x10/0x10 [ 85.085428][ T13] ret_from_fork_asm+0x1a/0x30 [ 85.085449][ T13] [ 85.267418][ T13] FAULT_INJECTION: forcing a failure. [ 85.267418][ T13] name failslab, interval 1, probability 1, space 0, times 71 [ 85.267451][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 85.267472][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.267485][ T13] Workqueue: bat_events batadv_mcast_mla_update [ 85.267518][ T13] Call Trace: [ 85.267525][ T13] [ 85.267534][ T13] dump_stack_lvl+0x100/0x190 [ 85.267558][ T13] should_fail_ex.cold+0x5/0xa [ 85.267581][ T13] should_failslab+0xc2/0x120 [ 85.267607][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.267633][ T13] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 85.267664][ T13] batadv_mcast_mla_update+0x19ae/0x3200 [ 85.267696][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 85.267727][ T13] ? debug_object_deactivate+0x2e4/0x3b0 [ 85.267762][ T13] ? rcu_is_watching+0x12/0xc0 [ 85.267788][ T13] process_one_work+0xa23/0x1940 [ 85.267826][ T13] ? __pfx_process_one_work+0x10/0x10 [ 85.267858][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 85.267886][ T13] worker_thread+0x5ef/0xe50 [ 85.267920][ T13] ? kthread+0x13a/0x450 [ 85.267941][ T13] ? __pfx_worker_thread+0x10/0x10 [ 85.267964][ T13] kthread+0x370/0x450 [ 85.267986][ T13] ? __pfx_kthread+0x10/0x10 [ 85.268008][ T13] ret_from_fork+0x72b/0xd50 [ 85.268032][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 85.268055][ T13] ? __switch_to+0x800/0x10f0 [ 85.268082][ T13] ? __pfx_kthread+0x10/0x10 [ 85.268105][ T13] ret_from_fork_asm+0x1a/0x30 [ 85.268140][ T13] [ 85.287878][ T171] FAULT_INJECTION: forcing a failure. [ 85.287878][ T171] name failslab, interval 1, probability 1, space 0, times 70 [ 85.338072][ T1165] FAULT_INJECTION: forcing a failure. [ 85.338072][ T1165] name failslab, interval 1, probability 1, space 0, times 70 [ 85.339901][ T171] CPU: 2 UID: 0 PID: 171 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 85.339942][ T171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.339955][ T171] Workqueue: events_unbound nsim_dev_trap_report_work [ 85.339993][ T171] Call Trace: [ 85.340001][ T171] [ 85.340009][ T171] dump_stack_lvl+0x100/0x190 [ 85.340036][ T171] should_fail_ex.cold+0x5/0xa [ 85.340059][ T171] should_failslab+0xc2/0x120 [ 85.340086][ T171] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.340112][ T171] ? __alloc_skb+0x140/0x710 [ 85.340140][ T171] __alloc_skb+0x140/0x710 [ 85.340162][ T171] ? __alloc_skb+0x5b7/0x710 [ 85.340184][ T171] ? __pfx___alloc_skb+0x10/0x10 [ 85.340209][ T171] ? kfree_skbmem+0x19f/0x210 [ 85.340231][ T171] nsim_dev_trap_report_work+0x2af/0xd20 [ 85.340268][ T171] process_one_work+0xa23/0x1940 [ 85.340307][ T171] ? __pfx_process_one_work+0x10/0x10 [ 85.340341][ T171] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.340369][ T171] worker_thread+0x5ef/0xe50 [ 85.340401][ T171] ? __pfx_worker_thread+0x10/0x10 [ 85.340427][ T171] ? kthread+0x13a/0x450 [ 85.340451][ T171] ? __pfx_worker_thread+0x10/0x10 [ 85.340475][ T171] kthread+0x370/0x450 [ 85.340497][ T171] ? __pfx_kthread+0x10/0x10 [ 85.340522][ T171] ret_from_fork+0x72b/0xd50 [ 85.340546][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 85.340570][ T171] ? __switch_to+0x800/0x10f0 [ 85.340599][ T171] ? __pfx_kthread+0x10/0x10 [ 85.340625][ T171] ret_from_fork_asm+0x1a/0x30 [ 85.340663][ T171] [ 85.342397][ T171] FAULT_INJECTION: forcing a failure. [ 85.342397][ T171] name failslab, interval 1, probability 1, space 0, times 69 [ 85.342863][ T1165] CPU: 1 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 85.342886][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.342898][ T1165] Workqueue: events_unbound nsim_dev_trap_report_work [ 85.342925][ T1165] Call Trace: [ 85.342934][ T1165] [ 85.342941][ T1165] dump_stack_lvl+0x100/0x190 [ 85.342964][ T1165] should_fail_ex.cold+0x5/0xa [ 85.342986][ T1165] should_failslab+0xc2/0x120 [ 85.343010][ T1165] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.343035][ T1165] ? __alloc_skb+0x140/0x710 [ 85.343062][ T1165] __alloc_skb+0x140/0x710 [ 85.343083][ T1165] ? __alloc_skb+0x5b7/0x710 [ 85.343104][ T1165] ? __pfx___alloc_skb+0x10/0x10 [ 85.343127][ T1165] ? kfree_skbmem+0x19f/0x210 [ 85.343149][ T1165] nsim_dev_trap_report_work+0x2af/0xd20 [ 85.343184][ T1165] process_one_work+0xa23/0x1940 [ 85.343221][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 85.343253][ T1165] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.343280][ T1165] worker_thread+0x5ef/0xe50 [ 85.343313][ T1165] ? kthread+0x13a/0x450 [ 85.343335][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 85.343358][ T1165] kthread+0x370/0x450 [ 85.343380][ T1165] ? __pfx_kthread+0x10/0x10 [ 85.343402][ T1165] ret_from_fork+0x72b/0xd50 [ 85.343425][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 85.343448][ T1165] ? __switch_to+0x800/0x10f0 [ 85.343474][ T1165] ? __pfx_kthread+0x10/0x10 [ 85.343498][ T1165] ret_from_fork_asm+0x1a/0x30 [ 85.343531][ T1165] [ 85.406520][ C3] FAULT_INJECTION: forcing a failure. [ 85.406520][ C3] name failslab, interval 1, probability 1, space 0, times 68 [ 85.768444][ T13] FAULT_INJECTION: forcing a failure. [ 85.768444][ T13] name failslab, interval 1, probability 1, space 0, times 66 [ 85.772092][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 85.772110][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.772122][ C3] Call Trace: [ 85.772128][ C3] [ 85.772134][ C3] dump_stack_lvl+0x100/0x190 [ 85.772154][ C3] should_fail_ex.cold+0x5/0xa [ 85.772168][ C3] should_failslab+0xc2/0x120 [ 85.772185][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.772202][ C3] ? __alloc_skb+0x140/0x710 [ 85.772220][ C3] __alloc_skb+0x140/0x710 [ 85.772233][ C3] ? __alloc_skb+0x5b7/0x710 [ 85.772247][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 85.772262][ C3] ? do_raw_spin_lock+0x1e0/0x260 [ 85.772278][ C3] skb_copy+0x1ca/0x3a0 [ 85.772293][ C3] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 85.772315][ C3] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 85.772330][ C3] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 85.772348][ C3] ? __lock_acquire+0x49f/0x1a40 [ 85.772367][ C3] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 85.772385][ C3] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 85.772402][ C3] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 85.772422][ C3] __iterate_interfaces+0x2e6/0x650 [ 85.772436][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 85.772454][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 85.772470][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 85.772487][ C3] mac80211_hwsim_beacon+0xe5/0x2a0 [ 85.772500][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 85.772513][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 85.772536][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 85.772551][ C3] handle_softirqs+0x1ea/0x9b0 [ 85.772566][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 85.772579][ C3] ? _raw_spin_unlock+0x28/0x50 [ 85.772591][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 85.772606][ C3] __irq_exit_rcu+0x162/0x210 [ 85.772619][ C3] irq_exit_rcu+0x9/0x30 [ 85.772631][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 85.772645][ C3] [ 85.772648][ C3] [ 85.772653][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.772667][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.772681][ C3] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 85.772692][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000202 [ 85.772702][ C3] RAX: 000000000006f15d RBX: ffff88801c7fa540 RCX: ffffffff8bb872d5 [ 85.772710][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 85.772717][ C3] RBP: ffffed10038ff4a8 R08: 0000000000000001 R09: ffffed10056a678d [ 85.772724][ C3] R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000 [ 85.772730][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 85.772740][ C3] ? ct_kernel_exit+0x125/0x180 [ 85.772760][ C3] default_idle+0x9/0x10 [ 85.772773][ C3] default_idle_call+0x6c/0xb0 [ 85.772788][ C3] do_idle+0x3a7/0x5b0 [ 85.772801][ C3] ? __pfx_do_idle+0x10/0x10 [ 85.772813][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 85.772830][ C3] cpu_startup_entry+0x4f/0x60 [ 85.772843][ C3] start_secondary+0x21d/0x2d0 [ 85.772857][ C3] ? __pfx_start_secondary+0x10/0x10 [ 85.772872][ C3] common_startup_64+0x13e/0x158 [ 85.772896][ C3] [ 85.773122][ T171] CPU: 2 UID: 0 PID: 171 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 85.773148][ T171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.773159][ T171] Workqueue: events_unbound nsim_dev_trap_report_work [ 85.773189][ T171] Call Trace: [ 85.773196][ T171] [ 85.773204][ T171] dump_stack_lvl+0x100/0x190 [ 85.773228][ T171] should_fail_ex.cold+0x5/0xa [ 85.773250][ T171] should_failslab+0xc2/0x120 [ 85.773276][ T171] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.773302][ T171] ? __alloc_skb+0x140/0x710 [ 85.773329][ T171] __alloc_skb+0x140/0x710 [ 85.773349][ T171] ? __alloc_skb+0x5b7/0x710 [ 85.773372][ T171] ? __pfx___alloc_skb+0x10/0x10 [ 85.773398][ T171] ? kfree_skbmem+0x19f/0x210 [ 85.773421][ T171] nsim_dev_trap_report_work+0x2af/0xd20 [ 85.773457][ T171] process_one_work+0xa23/0x1940 [ 85.773495][ T171] ? __pfx_process_one_work+0x10/0x10 [ 85.773529][ T171] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.773558][ T171] worker_thread+0x5ef/0xe50 [ 85.773590][ T171] ? __pfx_worker_thread+0x10/0x10 [ 85.773618][ T171] ? kthread+0x13a/0x450 [ 85.773642][ T171] ? __pfx_worker_thread+0x10/0x10 [ 85.773673][ T171] kthread+0x370/0x450 [ 85.773696][ T171] ? __pfx_kthread+0x10/0x10 [ 85.773722][ T171] ret_from_fork+0x72b/0xd50 [ 85.773745][ T171] ? __pfx_ret_from_fork+0x10/0x10 [ 85.773769][ T171] ? __switch_to+0x800/0x10f0 [ 85.773798][ T171] ? __pfx_kthread+0x10/0x10 [ 85.773824][ T171] ret_from_fork_asm+0x1a/0x30 [ 85.773849][ T5750] Bluetooth: hci0: command tx timeout [ 85.773859][ T171] [ 85.775814][ T5105] Bluetooth: hci3: command tx timeout [ 85.775848][ T5105] Bluetooth: hci1: command tx timeout [ 85.777291][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 85.777314][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.777326][ T13] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 85.777356][ T13] Call Trace: [ 85.777363][ T13] [ 85.777371][ T13] dump_stack_lvl+0x100/0x190 [ 85.777394][ T13] should_fail_ex.cold+0x5/0xa [ 85.777416][ T13] should_failslab+0xc2/0x120 [ 85.777443][ T13] __kmalloc_noprof+0xfc/0x820 [ 85.777464][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.777487][ T13] ? batadv_tt_prepare_tvlv_local_data+0x1cb/0x7a0 [ 85.777544][ T13] batadv_tt_prepare_tvlv_local_data+0x1cb/0x7a0 [ 85.777580][ T13] batadv_tt_tvlv_container_update+0x60f/0x8b0 [ 85.777612][ T13] ? __pfx_batadv_tt_tvlv_container_update+0x10/0x10 [ 85.777644][ T13] ? __lock_acquire+0x49f/0x1a40 [ 85.777680][ T13] batadv_tt_local_commit_changes_nolock+0xd75/0xeb0 [ 85.777708][ T13] ? __pfx_batadv_tt_local_commit_changes_nolock+0x10/0x10 [ 85.777738][ T13] ? do_raw_spin_lock+0x128/0x260 [ 85.777758][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.777778][ T13] ? find_held_lock+0x2b/0x80 [ 85.777807][ T13] batadv_tt_local_commit_changes+0x25/0x30 [ 85.777828][ T13] batadv_iv_ogm_schedule_buff+0xd98/0x15e0 [ 85.777850][ T13] ? __pfx_pskb_expand_head+0x10/0x10 [ 85.777882][ T13] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 85.777915][ T13] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 85.777948][ T13] process_one_work+0xa23/0x1940 [ 85.777987][ T13] ? __pfx_process_one_work+0x10/0x10 [ 85.778020][ T13] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 85.778048][ T13] worker_thread+0x5ef/0xe50 [ 85.778085][ T13] ? kthread+0x13a/0x450 [ 85.778107][ T13] ? __pfx_worker_thread+0x10/0x10 [ 85.778132][ T13] kthread+0x370/0x450 [ 85.778155][ T13] ? __pfx_kthread+0x10/0x10 [ 85.778179][ T13] ret_from_fork+0x72b/0xd50 [ 85.778204][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 85.778228][ T13] ? __switch_to+0x800/0x10f0 [ 85.778256][ T13] ? __pfx_kthread+0x10/0x10 [ 85.778281][ T13] ret_from_fork_asm+0x1a/0x30 [ 85.778318][ T13] [ 85.887897][ T1163] FAULT_INJECTION: forcing a failure. [ 85.887897][ T1163] name failslab, interval 1, probability 1, space 0, times 62 [ 85.888007][ T36] FAULT_INJECTION: forcing a failure. [ 85.888007][ T36] name failslab, interval 1, probability 1, space 0, times 62 [ 85.888039][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 85.888061][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.888073][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 85.888105][ T36] Call Trace: [ 85.888112][ T36] [ 85.888120][ T36] dump_stack_lvl+0x100/0x190 [ 85.888146][ T36] should_fail_ex.cold+0x5/0xa [ 85.888169][ T36] should_failslab+0xc2/0x120 [ 85.888196][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.888221][ T36] ? __alloc_skb+0x140/0x710 [ 85.888247][ T36] __alloc_skb+0x140/0x710 [ 85.888267][ T36] ? __alloc_skb+0x5b7/0x710 [ 85.888287][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 85.888313][ T36] ? kfree_skbmem+0x19f/0x210 [ 85.888332][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 85.888366][ T36] process_one_work+0xa23/0x1940 [ 85.888401][ T36] ? __pfx_process_one_work+0x10/0x10 [ 85.888431][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.888457][ T36] worker_thread+0x5ef/0xe50 [ 85.888491][ T36] ? kthread+0x13a/0x450 [ 85.888519][ T36] ? __pfx_worker_thread+0x10/0x10 [ 85.888541][ T36] kthread+0x370/0x450 [ 85.888561][ T36] ? __pfx_kthread+0x10/0x10 [ 85.888583][ T36] ret_from_fork+0x72b/0xd50 [ 85.888606][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 85.888627][ T36] ? __switch_to+0x800/0x10f0 [ 85.888655][ T36] ? __pfx_kthread+0x10/0x10 [ 85.888678][ T36] ret_from_fork_asm+0x1a/0x30 [ 85.888714][ T36] [ 85.937891][ C2] FAULT_INJECTION: forcing a failure. [ 85.937891][ C2] name failslab, interval 1, probability 1, space 0, times 61 [ 85.938136][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 85.938160][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.938173][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 85.938207][ T1163] Call Trace: [ 85.938215][ T1163] [ 85.938224][ T1163] dump_stack_lvl+0x100/0x190 [ 85.938251][ T1163] should_fail_ex.cold+0x5/0xa [ 85.938274][ T1163] should_failslab+0xc2/0x120 [ 85.938301][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 85.938329][ T1163] ? __alloc_skb+0x140/0x710 [ 85.938358][ T1163] __alloc_skb+0x140/0x710 [ 85.938380][ T1163] ? __alloc_skb+0x5b7/0x710 [ 85.938402][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 85.938428][ T1163] ? kfree_skbmem+0x19f/0x210 [ 85.938451][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 85.938489][ T1163] process_one_work+0xa23/0x1940 [ 85.938533][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 85.938566][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 85.938594][ T1163] worker_thread+0x5ef/0xe50 [ 85.938629][ T1163] ? kthread+0x13a/0x450 [ 85.938653][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 85.938678][ T1163] kthread+0x370/0x450 [ 85.938701][ T1163] ? __pfx_kthread+0x10/0x10 [ 85.938726][ T1163] ret_from_fork+0x72b/0xd50 [ 85.938771][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 85.938797][ T1163] ? __switch_to+0x800/0x10f0 [ 85.938825][ T1163] ? __pfx_kthread+0x10/0x10 [ 85.938851][ T1163] ret_from_fork_asm+0x1a/0x30 [ 85.938889][ T1163] [ 85.998273][ T36] FAULT_INJECTION: forcing a failure. [ 85.998273][ T36] name failslab, interval 1, probability 1, space 0, times 60 [ 85.999720][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 85.999746][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.999757][ C2] Call Trace: [ 85.999766][ C2] [ 85.999774][ C2] dump_stack_lvl+0x100/0x190 [ 85.999804][ C2] should_fail_ex.cold+0x5/0xa [ 85.999827][ C2] should_failslab+0xc2/0x120 [ 85.999856][ C2] kmem_cache_alloc_noprof+0x91/0x6a0 [ 85.999883][ C2] ? dst_alloc+0x99/0x1a0 [ 85.999910][ C2] ? __pfx_ip6_dst_gc+0x10/0x10 [ 85.999941][ C2] dst_alloc+0x99/0x1a0 [ 85.999967][ C2] icmp6_dst_alloc+0x79/0x4f0 [ 85.999997][ C2] ndisc_send_skb+0x133f/0x1bf0 [ 86.000028][ C2] ? __pfx_ndisc_send_skb+0x10/0x10 [ 86.000057][ C2] ? kmalloc_reserve+0xf9/0x350 [ 86.000085][ C2] ? ndisc_alloc_skb+0x319/0x530 [ 86.000111][ C2] ? __asan_memcpy+0x3c/0x60 [ 86.000137][ C2] ndisc_send_rs+0x129/0x680 [ 86.000166][ C2] addrconf_rs_timer+0x424/0x880 [ 86.000194][ C2] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 86.000225][ C2] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 86.000249][ C2] call_timer_fn+0x19a/0x610 [ 86.000280][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 86.000310][ C2] ? __run_timers+0x747/0xb00 [ 86.000339][ C2] ? rcu_is_watching+0x12/0xc0 [ 86.000365][ C2] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 86.000387][ C2] __run_timers+0x757/0xb00 [ 86.000422][ C2] ? __pfx___run_timers+0x10/0x10 [ 86.000461][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 86.000488][ C2] run_timer_base+0x114/0x190 [ 86.000517][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 86.000549][ C2] run_timer_softirq+0x1a/0x50 [ 86.000576][ C2] handle_softirqs+0x1ea/0x9b0 [ 86.000604][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 86.000632][ C2] ? _raw_spin_unlock+0x28/0x50 [ 86.000651][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 86.000680][ C2] __irq_exit_rcu+0x162/0x210 [ 86.000701][ C2] irq_exit_rcu+0x9/0x30 [ 86.000722][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 86.000747][ C2] [ 86.000754][ C2] [ 86.000762][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.000786][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 86.000809][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 86.000828][ C2] RSP: 0018:ffffc9000047fe00 EFLAGS: 00000206 [ 86.000846][ C2] RAX: 000000000006c453 RBX: ffff88801c7fca80 RCX: ffffffff8bb872d5 [ 86.000858][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 86.000871][ C2] RBP: ffffed10038ff950 R08: 0000000000000001 R09: ffffed100568678d [ 86.000883][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 86.000896][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 86.000912][ C2] ? ct_kernel_exit+0x125/0x180 [ 86.000938][ C2] default_idle+0x9/0x10 [ 86.000962][ C2] default_idle_call+0x6c/0xb0 [ 86.000987][ C2] do_idle+0x3a7/0x5b0 [ 86.001009][ C2] ? __pfx_do_idle+0x10/0x10 [ 86.001035][ C2] cpu_startup_entry+0x4f/0x60 [ 86.001056][ C2] start_secondary+0x21d/0x2d0 [ 86.001079][ C2] ? __pfx_start_secondary+0x10/0x10 [ 86.001104][ C2] common_startup_64+0x13e/0x158 [ 86.001146][ C2] [ 86.001895][ T1163] FAULT_INJECTION: forcing a failure. [ 86.001895][ T1163] name failslab, interval 1, probability 1, space 0, times 59 [ 86.003342][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 86.003364][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.003376][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.003406][ T36] Call Trace: [ 86.003414][ T36] [ 86.003422][ T36] dump_stack_lvl+0x100/0x190 [ 86.003454][ T36] should_fail_ex.cold+0x5/0xa [ 86.003475][ T36] should_failslab+0xc2/0x120 [ 86.003503][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.003529][ T36] ? __alloc_skb+0x140/0x710 [ 86.003556][ T36] __alloc_skb+0x140/0x710 [ 86.003576][ T36] ? __alloc_skb+0x5b7/0x710 [ 86.003598][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 86.003622][ T36] ? kfree_skbmem+0x19f/0x210 [ 86.003643][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.003675][ T36] process_one_work+0xa23/0x1940 [ 86.003711][ T36] ? __pfx_process_one_work+0x10/0x10 [ 86.003744][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.003772][ T36] worker_thread+0x5ef/0xe50 [ 86.003805][ T36] ? kthread+0x13a/0x450 [ 86.003826][ T36] ? __pfx_worker_thread+0x10/0x10 [ 86.003850][ T36] kthread+0x370/0x450 [ 86.003868][ T36] ? __pfx_kthread+0x10/0x10 [ 86.003892][ T36] ret_from_fork+0x72b/0xd50 [ 86.003915][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 86.003939][ T36] ? __switch_to+0x800/0x10f0 [ 86.003967][ T36] ? __pfx_kthread+0x10/0x10 [ 86.003987][ T36] ret_from_fork_asm+0x1a/0x30 [ 86.004024][ T36] [ 86.118017][ T107] FAULT_INJECTION: forcing a failure. [ 86.118017][ T107] name failslab, interval 1, probability 1, space 0, times 57 [ 86.119322][ T1163] CPU: 1 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 86.119347][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.119360][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.119393][ T1163] Call Trace: [ 86.119402][ T1163] [ 86.119410][ T1163] dump_stack_lvl+0x100/0x190 [ 86.119436][ T1163] should_fail_ex.cold+0x5/0xa [ 86.119459][ T1163] should_failslab+0xc2/0x120 [ 86.119486][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.119518][ T1163] ? __alloc_skb+0x140/0x710 [ 86.119547][ T1163] __alloc_skb+0x140/0x710 [ 86.119569][ T1163] ? __alloc_skb+0x5b7/0x710 [ 86.119591][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 86.119617][ T1163] ? kfree_skbmem+0x19f/0x210 [ 86.119639][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.119677][ T1163] process_one_work+0xa23/0x1940 [ 86.119714][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 86.119746][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.119774][ T1163] worker_thread+0x5ef/0xe50 [ 86.119808][ T1163] ? kthread+0x13a/0x450 [ 86.119830][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 86.119854][ T1163] kthread+0x370/0x450 [ 86.119877][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.119902][ T1163] ret_from_fork+0x72b/0xd50 [ 86.119927][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 86.119951][ T1163] ? __switch_to+0x800/0x10f0 [ 86.119981][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.120005][ T1163] ret_from_fork_asm+0x1a/0x30 [ 86.120043][ T1163] [ 86.249831][ T1165] ------------[ cut here ]------------ [ 86.251690][ T107] CPU: 2 UID: 0 PID: 107 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 86.251715][ T107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.251727][ T107] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.251760][ T107] Call Trace: [ 86.251767][ T107] [ 86.251774][ T107] dump_stack_lvl+0x100/0x190 [ 86.251798][ T107] should_fail_ex.cold+0x5/0xa [ 86.251819][ T107] should_failslab+0xc2/0x120 [ 86.251844][ T107] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.251870][ T107] ? __alloc_skb+0x140/0x710 [ 86.251899][ T107] __alloc_skb+0x140/0x710 [ 86.251920][ T107] ? __alloc_skb+0x5b7/0x710 [ 86.251943][ T107] ? __pfx___alloc_skb+0x10/0x10 [ 86.251969][ T107] ? kfree_skbmem+0x19f/0x210 [ 86.251990][ T107] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.252028][ T107] process_one_work+0xa23/0x1940 [ 86.252066][ T107] ? __pfx_process_one_work+0x10/0x10 [ 86.252101][ T107] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.252128][ T107] worker_thread+0x5ef/0xe50 [ 86.252161][ T107] ? __pfx_worker_thread+0x10/0x10 [ 86.252187][ T107] ? kthread+0x13a/0x450 [ 86.252209][ T107] ? __pfx_worker_thread+0x10/0x10 [ 86.252231][ T107] kthread+0x370/0x450 [ 86.252253][ T107] ? __pfx_kthread+0x10/0x10 [ 86.252278][ T107] ret_from_fork+0x72b/0xd50 [ 86.252303][ T107] ? __pfx_ret_from_fork+0x10/0x10 [ 86.252327][ T107] ? __switch_to+0x800/0x10f0 [ 86.252355][ T107] ? __pfx_kthread+0x10/0x10 [ 86.252381][ T107] ret_from_fork_asm+0x1a/0x30 [ 86.252419][ T107] [ 86.256460][ T12] FAULT_INJECTION: forcing a failure. [ 86.256460][ T12] name failslab, interval 1, probability 1, space 0, times 53 [ 86.258419][ T1165] !sta [ 86.259409][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 86.259425][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.259433][ T12] Workqueue: netns cleanup_net [ 86.259456][ T12] Call Trace: [ 86.259461][ T12] [ 86.259467][ T12] dump_stack_lvl+0x100/0x190 [ 86.259483][ T12] should_fail_ex.cold+0x5/0xa [ 86.259497][ T12] should_failslab+0xc2/0x120 [ 86.259513][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.259530][ T12] ? __alloc_skb+0x140/0x710 [ 86.259547][ T12] __alloc_skb+0x140/0x710 [ 86.259559][ T12] ? __alloc_skb+0x5b7/0x710 [ 86.259573][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 86.259586][ T12] ? kasan_quarantine_put+0x104/0x240 [ 86.259599][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 86.259614][ T12] ? addrconf_sysctl_unregister+0x100/0x1c0 [ 86.259629][ T12] inet6_netconf_notify_devconf+0x9d/0x170 [ 86.259643][ T12] addrconf_sysctl_unregister+0x134/0x1c0 [ 86.259659][ T12] addrconf_ifdown.isra.0+0x1522/0x1b70 [ 86.259674][ T12] ? trace_contention_end+0x126/0x160 [ 86.259690][ T12] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 86.259708][ T12] addrconf_notify+0x4a3/0x1ba0 [ 86.259725][ T12] ? __pfx_tls_dev_event+0x10/0x10 [ 86.259741][ T12] ? __pfx_addrconf_notify+0x10/0x10 [ 86.259757][ T12] ? ip6mr_device_event+0x1c4/0x230 [ 86.259775][ T12] notifier_call_chain+0x99/0x3f0 [ 86.259793][ T12] call_netdevice_notifiers_info+0xbe/0x110 [ 86.259813][ T12] unregister_netdevice_many_notify+0x1141/0x2140 [ 86.259834][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 86.259850][ T12] ? lockdep_hardirqs_on+0x78/0x100 [ 86.259866][ T12] ? mutex_is_locked+0x17/0x60 [ 86.259876][ T12] ? rtnl_is_locked+0x15/0x20 [ 86.259889][ T12] ops_undo_list+0x8ff/0xab0 [ 86.259907][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 86.259922][ T12] ? cleanup_net+0x332/0x920 [ 86.259939][ T12] ? idr_destroy+0x62/0x2e0 [ 86.259951][ T12] cleanup_net+0x499/0x920 [ 86.259969][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 86.259987][ T12] ? rcu_is_watching+0x12/0xc0 [ 86.260003][ T12] process_one_work+0xa23/0x1940 [ 86.260025][ T12] ? __pfx_process_one_work+0x10/0x10 [ 86.260045][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 86.260063][ T12] worker_thread+0x5ef/0xe50 [ 86.260083][ T12] ? kthread+0x13a/0x450 [ 86.260097][ T12] ? __pfx_worker_thread+0x10/0x10 [ 86.260111][ T12] kthread+0x370/0x450 [ 86.260125][ T12] ? __pfx_kthread+0x10/0x10 [ 86.260140][ T12] ret_from_fork+0x72b/0xd50 [ 86.260159][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 86.260173][ T12] ? __switch_to+0x800/0x10f0 [ 86.260191][ T12] ? __pfx_kthread+0x10/0x10 [ 86.260206][ T12] ret_from_fork_asm+0x1a/0x30 [ 86.260227][ T12] [ 86.278620][ T107] FAULT_INJECTION: forcing a failure. [ 86.278620][ T107] name failslab, interval 1, probability 1, space 0, times 52 [ 86.280029][ T1165] WARNING: net/mac80211/mlme.c:4898 at ieee80211_mgd_probe_ap_send+0x3dd/0x4b0, CPU#3: kworker/u33:9/1165 [ 86.281925][ T107] CPU: 2 UID: 0 PID: 107 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.281949][ T107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.281963][ T107] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.281994][ T107] Call Trace: [ 86.282003][ T107] [ 86.282012][ T107] dump_stack_lvl+0x100/0x190 [ 86.282035][ T107] should_fail_ex.cold+0x5/0xa [ 86.282056][ T107] should_failslab+0xc2/0x120 [ 86.282081][ T107] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.282108][ T107] ? __alloc_skb+0x140/0x710 [ 86.282132][ T107] __alloc_skb+0x140/0x710 [ 86.282151][ T107] ? __alloc_skb+0x5b7/0x710 [ 86.282170][ T107] ? __pfx___alloc_skb+0x10/0x10 [ 86.282194][ T107] ? kfree_skbmem+0x19f/0x210 [ 86.282214][ T107] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.282249][ T107] process_one_work+0xa23/0x1940 [ 86.282284][ T107] ? __pfx_process_one_work+0x10/0x10 [ 86.282315][ T107] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.282342][ T107] worker_thread+0x5ef/0xe50 [ 86.282372][ T107] ? __pfx_worker_thread+0x10/0x10 [ 86.282398][ T107] ? kthread+0x13a/0x450 [ 86.282421][ T107] ? __pfx_worker_thread+0x10/0x10 [ 86.282446][ T107] kthread+0x370/0x450 [ 86.282470][ T107] ? __pfx_kthread+0x10/0x10 [ 86.282494][ T107] ret_from_fork+0x72b/0xd50 [ 86.282518][ T107] ? __pfx_ret_from_fork+0x10/0x10 [ 86.282544][ T107] ? __switch_to+0x800/0x10f0 [ 86.282571][ T107] ? __pfx_kthread+0x10/0x10 [ 86.282596][ T107] ret_from_fork_asm+0x1a/0x30 [ 86.282637][ T107] [ 86.567584][ C2] FAULT_INJECTION: forcing a failure. [ 86.567584][ C2] name failslab, interval 1, probability 1, space 0, times 50 [ 86.567737][ T1165] Modules linked in: [ 86.569597][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 86.569623][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.569640][ C2] Call Trace: [ 86.569649][ C2] [ 86.569658][ C2] dump_stack_lvl+0x100/0x190 [ 86.569688][ C2] should_fail_ex.cold+0x5/0xa [ 86.569708][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.569734][ C2] should_failslab+0xc2/0x120 [ 86.569763][ C2] __kmalloc_cache_noprof+0x91/0x6c0 [ 86.569786][ C2] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 86.569817][ C2] dst_cow_metrics_generic+0x4c/0x1e0 [ 86.569843][ C2] icmp6_dst_alloc+0x418/0x4f0 [ 86.569873][ C2] ndisc_send_skb+0x133f/0x1bf0 [ 86.569904][ C2] ? __pfx_ndisc_send_skb+0x10/0x10 [ 86.569933][ C2] ? kmalloc_reserve+0xf9/0x350 [ 86.569962][ C2] ? ndisc_alloc_skb+0x319/0x530 [ 86.569989][ C2] ? __asan_memcpy+0x3c/0x60 [ 86.570015][ C2] ndisc_send_rs+0x129/0x680 [ 86.570045][ C2] addrconf_rs_timer+0x424/0x880 [ 86.570074][ C2] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 86.570104][ C2] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 86.570128][ C2] call_timer_fn+0x19a/0x610 [ 86.570156][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 86.570186][ C2] ? __run_timers+0x747/0xb00 [ 86.570216][ C2] ? rcu_is_watching+0x12/0xc0 [ 86.570243][ C2] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 86.570265][ C2] __run_timers+0x757/0xb00 [ 86.570300][ C2] ? __pfx___run_timers+0x10/0x10 [ 86.570338][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 86.570364][ C2] run_timer_base+0x114/0x190 [ 86.570393][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 86.570424][ C2] run_timer_softirq+0x1a/0x50 [ 86.570451][ C2] handle_softirqs+0x1ea/0x9b0 [ 86.570479][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 86.570498][ C2] ? _raw_spin_unlock+0x28/0x50 [ 86.570518][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 86.570543][ C2] __irq_exit_rcu+0x162/0x210 [ 86.570563][ C2] irq_exit_rcu+0x9/0x30 [ 86.570582][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 86.570604][ C2] [ 86.570611][ C2] [ 86.570618][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.570646][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 86.570670][ C2] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 2d 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 86.570688][ C2] RSP: 0018:ffffc9000047fe00 EFLAGS: 00000206 [ 86.570705][ C2] RAX: 000000000006cbf9 RBX: ffff88801c7fca80 RCX: ffffffff8bb872d5 [ 86.570718][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a87c3 RDI: ffffffff8c400a80 [ 86.570731][ C2] RBP: ffffed10038ff950 R08: 0000000000000001 R09: ffffed100568678d [ 86.570770][ C2] R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000 [ 86.570783][ C2] R13: 0000000000000000 R14: 1ffff9200008ffc4 R15: dffffc0000000000 [ 86.570803][ C2] ? ct_kernel_exit+0x125/0x180 [ 86.570832][ C2] default_idle+0x9/0x10 [ 86.570857][ C2] default_idle_call+0x6c/0xb0 [ 86.570882][ C2] do_idle+0x3a7/0x5b0 [ 86.570906][ C2] ? __pfx_do_idle+0x10/0x10 [ 86.570934][ C2] cpu_startup_entry+0x4f/0x60 [ 86.570958][ C2] start_secondary+0x21d/0x2d0 [ 86.570982][ C2] ? __pfx_start_secondary+0x10/0x10 [ 86.571010][ C2] common_startup_64+0x13e/0x158 [ 86.571051][ C2] [ 86.607396][ T13] FAULT_INJECTION: forcing a failure. [ 86.607396][ T13] name failslab, interval 1, probability 1, space 0, times 49 [ 86.609656][ T1165] [ 86.613562][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 86.613588][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.613601][ T13] Workqueue: bat_events batadv_mcast_mla_update [ 86.613635][ T13] Call Trace: [ 86.613645][ T13] [ 86.613654][ T13] dump_stack_lvl+0x100/0x190 [ 86.613680][ T13] should_fail_ex.cold+0x5/0xa [ 86.613702][ T13] should_failslab+0xc2/0x120 [ 86.613729][ T13] __kmalloc_cache_noprof+0x91/0x6c0 [ 86.613751][ T13] ? batadv_mcast_mla_update+0x19ae/0x3200 [ 86.613784][ T13] batadv_mcast_mla_update+0x19ae/0x3200 [ 86.613819][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 86.613849][ T13] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.613888][ T13] ? rcu_is_watching+0x12/0xc0 [ 86.613915][ T13] process_one_work+0xa23/0x1940 [ 86.613954][ T13] ? __pfx_process_one_work+0x10/0x10 [ 86.613987][ T13] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 86.614018][ T13] worker_thread+0x5ef/0xe50 [ 86.614053][ T13] ? kthread+0x13a/0x450 [ 86.614077][ T13] ? __pfx_worker_thread+0x10/0x10 [ 86.614100][ T13] kthread+0x370/0x450 [ 86.614124][ T13] ? __pfx_kthread+0x10/0x10 [ 86.614147][ T13] ret_from_fork+0x72b/0xd50 [ 86.614171][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 86.614194][ T13] ? __switch_to+0x800/0x10f0 [ 86.614222][ T13] ? __pfx_kthread+0x10/0x10 [ 86.614247][ T13] ret_from_fork_asm+0x1a/0x30 [ 86.614285][ T13] [ 86.639247][ T1163] FAULT_INJECTION: forcing a failure. [ 86.639247][ T1163] name failslab, interval 1, probability 1, space 0, times 48 [ 86.641025][ T1165] CPU: 3 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 86.643108][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 86.643132][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.643145][ T1163] Workqueue: events_unbound cfg80211_wiphy_work [ 86.643179][ T1163] Call Trace: [ 86.643187][ T1163] [ 86.643195][ T1163] dump_stack_lvl+0x100/0x190 [ 86.643220][ T1163] should_fail_ex.cold+0x5/0xa [ 86.643241][ T1163] should_failslab+0xc2/0x120 [ 86.643268][ T1163] __kmalloc_noprof+0xfc/0x820 [ 86.643292][ T1163] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 86.643327][ T1163] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 86.643359][ T1163] ? kasan_save_stack+0x3f/0x50 [ 86.643380][ T1163] ? kasan_save_stack+0x30/0x50 [ 86.643400][ T1163] ? __kasan_kmalloc+0xaa/0xb0 [ 86.643417][ T1163] ? __kmalloc_noprof+0x322/0x820 [ 86.643443][ T1163] ? lock_acquire+0x1b9/0x370 [ 86.643472][ T1163] ? find_held_lock+0x2b/0x80 [ 86.643492][ T1163] ? __kfree_rcu_sheaf+0x195/0x730 [ 86.643515][ T1163] ? __kfree_rcu_sheaf+0x195/0x730 [ 86.643535][ T1163] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 86.643567][ T1163] ? kvfree_call_rcu+0x1be/0x4f0 [ 86.643588][ T1163] ? __asan_memcpy+0x3c/0x60 [ 86.643609][ T1163] ieee80211_inform_bss+0x159/0x1170 [ 86.643641][ T1163] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 86.643671][ T1163] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 86.643696][ T1163] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 86.643719][ T1163] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 86.643744][ T1163] ? unwind_next_frame+0x3be/0x2090 [ 86.643775][ T1163] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 86.643800][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 86.643840][ T1163] ? stack_trace_save+0x8e/0xc0 [ 86.643867][ T1163] ? __pfx_stack_trace_save+0x10/0x10 [ 86.643892][ T1163] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 86.643914][ T1163] cfg80211_inform_bss_data+0x230/0x3b60 [ 86.643938][ T1163] ? __kmalloc_noprof+0x322/0x820 [ 86.643956][ T1163] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 86.643983][ T1163] ? cfg80211_wiphy_work+0x2b7/0x550 [ 86.644007][ T1163] ? process_one_work+0xa23/0x1940 [ 86.644032][ T1163] ? worker_thread+0x5ef/0xe50 [ 86.644052][ T1163] ? kthread+0x370/0x450 [ 86.644072][ T1163] ? ret_from_fork+0x72b/0xd50 [ 86.644091][ T1163] ? ret_from_fork_asm+0x1a/0x30 [ 86.644117][ T1163] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 86.644146][ T1163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.644175][ T1163] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 86.644208][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 86.644235][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 86.644272][ T1163] ? __lock_acquire+0x49f/0x1a40 [ 86.644298][ T1163] ? find_held_lock+0x2b/0x80 [ 86.644319][ T1163] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 86.644345][ T1163] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 86.644381][ T1163] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 86.644420][ T1163] ieee80211_bss_info_update+0x310/0xab0 [ 86.644454][ T1163] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 86.644489][ T1163] ? rcu_is_watching+0x12/0xc0 [ 86.644512][ T1163] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 86.644536][ T1163] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 86.644567][ T1163] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 86.644608][ T1163] ieee80211_iface_work+0xa9a/0x1070 [ 86.644642][ T1163] cfg80211_wiphy_work+0x2b7/0x550 [ 86.644670][ T1163] process_one_work+0xa23/0x1940 [ 86.644704][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 86.644735][ T1163] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 86.644765][ T1163] worker_thread+0x5ef/0xe50 [ 86.644798][ T1163] ? kthread+0x13a/0x450 [ 86.644820][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 86.644844][ T1163] kthread+0x370/0x450 [ 86.644864][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.644889][ T1163] ret_from_fork+0x72b/0xd50 [ 86.644911][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 86.644933][ T1163] ? __switch_to+0x800/0x10f0 [ 86.644961][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.644987][ T1163] ret_from_fork_asm+0x1a/0x30 [ 86.645024][ T1163] [ 86.777450][ T48] FAULT_INJECTION: forcing a failure. [ 86.777450][ T48] name failslab, interval 1, probability 1, space 0, times 46 [ 86.777683][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.781974][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 86.781999][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.782012][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.782047][ T48] Call Trace: [ 86.782055][ T48] [ 86.782063][ T48] dump_stack_lvl+0x100/0x190 [ 86.782089][ T48] should_fail_ex.cold+0x5/0xa [ 86.782113][ T48] should_failslab+0xc2/0x120 [ 86.782140][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.782167][ T48] ? __alloc_skb+0x140/0x710 [ 86.782196][ T48] __alloc_skb+0x140/0x710 [ 86.782218][ T48] ? __alloc_skb+0x5b7/0x710 [ 86.782241][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 86.782263][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.782286][ T48] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.782312][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.782350][ T48] process_one_work+0xa23/0x1940 [ 86.782389][ T48] ? __pfx_process_one_work+0x10/0x10 [ 86.782423][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.782451][ T48] worker_thread+0x5ef/0xe50 [ 86.782488][ T48] ? kthread+0x13a/0x450 [ 86.782511][ T48] ? __pfx_worker_thread+0x10/0x10 [ 86.782540][ T48] kthread+0x370/0x450 [ 86.782564][ T48] ? __pfx_kthread+0x10/0x10 [ 86.782590][ T48] ret_from_fork+0x72b/0xd50 [ 86.782616][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 86.782645][ T48] ? __switch_to+0x800/0x10f0 [ 86.782675][ T48] ? __pfx_kthread+0x10/0x10 [ 86.782701][ T48] ret_from_fork_asm+0x1a/0x30 [ 86.782766][ T48] [ 86.847298][ C1] FAULT_INJECTION: forcing a failure. [ 86.847298][ C1] name failslab, interval 1, probability 1, space 0, times 42 [ 86.848036][ T1165] Workqueue: events_unbound cfg80211_wiphy_work [ 86.850311][ C1] CPU: 1 UID: 0 PID: 5728 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 86.850340][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.850352][ C1] Call Trace: [ 86.850361][ C1] [ 86.850369][ C1] dump_stack_lvl+0x100/0x190 [ 86.850399][ C1] should_fail_ex.cold+0x5/0xa [ 86.850423][ C1] should_failslab+0xc2/0x120 [ 86.850452][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 86.850477][ C1] ? lock_acquire+0x1b9/0x370 [ 86.850509][ C1] ? skb_clone+0x190/0x400 [ 86.850541][ C1] skb_clone+0x190/0x400 [ 86.850568][ C1] dev_queue_xmit_nit+0x255/0xa60 [ 86.850601][ C1] dev_hard_start_xmit+0x2f5/0x760 [ 86.850637][ C1] sch_direct_xmit+0x1b2/0xc70 [ 86.850668][ C1] ? lock_acquire+0x1b9/0x370 [ 86.850696][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 86.850725][ C1] ? do_raw_spin_lock+0x240/0x260 [ 86.850784][ C1] __dev_queue_xmit+0x27ac/0x4970 [ 86.850818][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 86.850838][ C1] ? __lock_acquire+0x49f/0x1a40 [ 86.850874][ C1] ? __lock_acquire+0x49f/0x1a40 [ 86.850904][ C1] ? lock_acquire+0x1b9/0x370 [ 86.850940][ C1] ? lock_acquire+0x1b9/0x370 [ 86.850974][ C1] ? mark_held_locks+0x40/0x70 [ 86.851007][ C1] ip_finish_output2+0xf4a/0x2400 [ 86.851040][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 86.851062][ C1] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 86.851090][ C1] __ip_finish_output.part.0+0x444/0x6f0 [ 86.851116][ C1] ip_output+0x39b/0xc10 [ 86.851140][ C1] ? __pfx_ip_output+0x10/0x10 [ 86.851165][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 86.851192][ C1] ? __pfx_ip_output+0x10/0x10 [ 86.851216][ C1] ip_local_out+0x193/0x1f0 [ 86.851241][ C1] __ip_queue_xmit+0x885/0x1e90 [ 86.851269][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 86.851293][ C1] __tcp_transmit_skb+0x3506/0x4f20 [ 86.851338][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 86.851367][ C1] ? kmalloc_reserve+0x148/0x350 [ 86.851391][ C1] ? kmalloc_reserve+0xf9/0x350 [ 86.851427][ C1] __tcp_send_ack.part.0+0x4db/0x940 [ 86.851461][ C1] tcp_send_ack+0x84/0xa0 [ 86.851481][ C1] tcp_delack_timer_handler+0x33b/0x4e0 [ 86.851503][ C1] ? __pfx_tcp_delack_timer_handler+0x10/0x10 [ 86.851531][ C1] tcp_delack_timer+0x25a/0x3e0 [ 86.851553][ C1] ? __pfx_tcp_delack_timer+0x10/0x10 [ 86.851572][ C1] call_timer_fn+0x19a/0x610 [ 86.851602][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 86.851633][ C1] ? do_raw_spin_lock+0x128/0x260 [ 86.851658][ C1] ? __pfx_tcp_delack_timer+0x10/0x10 [ 86.851679][ C1] ? mark_held_locks+0x40/0x70 [ 86.851711][ C1] ? __pfx_tcp_delack_timer+0x10/0x10 [ 86.851731][ C1] __run_timers+0x757/0xb00 [ 86.851767][ C1] ? __pfx___run_timers+0x10/0x10 [ 86.851807][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 86.851834][ C1] run_timer_base+0x114/0x190 [ 86.851861][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 86.851894][ C1] run_timer_softirq+0x1a/0x50 [ 86.851921][ C1] handle_softirqs+0x1ea/0x9b0 [ 86.851949][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 86.851969][ C1] ? irqtime_account_delta+0x9a/0x110 [ 86.851996][ C1] ? scomp_acomp_comp_decomp+0x741/0xc40 [ 86.852019][ C1] do_softirq+0xac/0xe0 [ 86.852040][ C1] [ 86.852047][ C1] [ 86.852054][ C1] __local_bh_enable_ip+0xf8/0x120 [ 86.852077][ C1] scomp_acomp_comp_decomp+0x741/0xc40 [ 86.852101][ C1] ? __pfx_scomp_acomp_comp_decomp+0x10/0x10 [ 86.852124][ C1] ? __asan_memset+0x23/0x50 [ 86.852149][ C1] crypto_acomp_decompress+0x14c/0x540 [ 86.852181][ C1] ? __asan_memset+0x23/0x50 [ 86.852203][ C1] zswap_decompress+0x4c7/0x810 [ 86.852240][ C1] ? __pfx_zswap_decompress+0x10/0x10 [ 86.852273][ C1] ? xa_load+0x153/0x2c0 [ 86.852307][ C1] ? find_held_lock+0x2b/0x80 [ 86.852334][ C1] zswap_load+0x25e/0x7c0 [ 86.852357][ C1] swap_read_folio+0xab7/0x2ec0 [ 86.852389][ C1] ? __pfx_swap_read_folio+0x10/0x10 [ 86.852411][ C1] ? show_swap_cache_info+0xb0/0x100 [ 86.852432][ C1] ? find_held_lock+0x2b/0x80 [ 86.852453][ C1] ? mlock_drain_local+0x254/0x4e0 [ 86.852475][ C1] ? mlock_drain_local+0x254/0x4e0 [ 86.852500][ C1] swap_cache_read_folio+0xae/0x140 [ 86.852525][ C1] swap_cluster_readahead+0x387/0x5f0 [ 86.852558][ C1] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 86.852594][ C1] ? __lock_acquire+0x49f/0x1a40 [ 86.852627][ C1] ? get_vma_policy+0x23d/0x3b0 [ 86.852658][ C1] swapin_readahead+0x159/0x1200 [ 86.852690][ C1] ? __pfx_swapin_readahead+0x10/0x10 [ 86.852719][ C1] ? swap_table_get+0x10d/0x2c0 [ 86.852741][ C1] ? swap_cache_get_folio+0x28d/0x360 [ 86.852763][ C1] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 86.852784][ C1] ? __pfx_softleaf_type+0x10/0x10 [ 86.852812][ C1] ? do_swap_page+0xf98/0x5780 [ 86.852830][ C1] do_swap_page+0xf98/0x5780 [ 86.852865][ C1] ? __pfx_do_swap_page+0x10/0x10 [ 86.852884][ C1] ? __lock_acquire+0x49f/0x1a40 [ 86.852916][ C1] ? rcu_is_watching+0x12/0xc0 [ 86.852940][ C1] ? __pte_offset_map+0x179/0x310 [ 86.852969][ C1] __handle_mm_fault+0x192f/0x2a00 [ 86.852995][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 86.853026][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.853050][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 86.853088][ C1] handle_mm_fault+0x37b/0xa30 [ 86.853113][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 86.853149][ C1] exc_page_fault+0x6f/0xd0 [ 86.853173][ C1] asm_exc_page_fault+0x26/0x30 [ 86.853194][ C1] RIP: 0033:0x7f262c17f0d3 [ 86.853214][ C1] Code: 01 62 e1 fe 28 7f 41 01 62 e1 fe 28 7f 41 02 62 e1 fe 28 7f 41 03 c3 48 3b 15 29 92 07 00 73 5f 40 0f b6 c6 48 89 d1 48 89 fa aa 48 89 d0 c3 83 fa 10 7d 22 62 e1 fd 08 7e c1 83 fa 08 7d 27 [ 86.853232][ C1] RSP: 002b:00007ffd173985c8 EFLAGS: 00010287 [ 86.853249][ C1] RAX: 0000000000000000 RBX: 00007f262b9cd010 RCX: 00000000002cc010 [ 86.853263][ C1] RDX: 00007f262b9cd010 RSI: 0000000000000000 RDI: 00007f262b9f9000 [ 86.853275][ C1] RBP: 0000557cc70e8b50 R08: 0000000000000000 R09: 0000000000000000 [ 86.853287][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557cc70eb7d0 [ 86.853299][ C1] R13: 0000557c91dabb12 R14: 0000557cc70ee770 R15: 0000557cc70e8b50 [ 86.853327][ C1] [ 86.888995][ T1163] FAULT_INJECTION: forcing a failure. [ 86.888995][ T1163] name failslab, interval 1, probability 1, space 0, times 41 [ 86.889039][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 86.889061][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.889074][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.889107][ T1163] Call Trace: [ 86.889114][ T1163] [ 86.889123][ T1163] dump_stack_lvl+0x100/0x190 [ 86.889147][ T1163] should_fail_ex.cold+0x5/0xa [ 86.889170][ T1163] should_failslab+0xc2/0x120 [ 86.889197][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.889224][ T1163] ? __alloc_skb+0x140/0x710 [ 86.889253][ T1163] __alloc_skb+0x140/0x710 [ 86.889274][ T1163] ? __alloc_skb+0x5b7/0x710 [ 86.889297][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 86.889322][ T1163] ? kfree_skbmem+0x19f/0x210 [ 86.889343][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.889380][ T1163] process_one_work+0xa23/0x1940 [ 86.889418][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 86.889451][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.889479][ T1163] worker_thread+0x5ef/0xe50 [ 86.889513][ T1163] ? kthread+0x13a/0x450 [ 86.889536][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 86.889559][ T1163] kthread+0x370/0x450 [ 86.889582][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.889607][ T1163] ret_from_fork+0x72b/0xd50 [ 86.889631][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 86.889653][ T1163] ? __switch_to+0x800/0x10f0 [ 86.889682][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.889707][ T1163] ret_from_fork_asm+0x1a/0x30 [ 86.889745][ T1163] [ 86.997689][ T48] FAULT_INJECTION: forcing a failure. [ 86.997689][ T48] name failslab, interval 1, probability 1, space 0, times 38 [ 86.997997][ T1163] FAULT_INJECTION: forcing a failure. [ 86.997997][ T1163] name failslab, interval 1, probability 1, space 0, times 37 [ 86.998018][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 86.998032][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.998040][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 86.998069][ T1163] Call Trace: [ 86.998073][ T1163] [ 86.998078][ T1163] dump_stack_lvl+0x100/0x190 [ 86.998094][ T1163] should_fail_ex.cold+0x5/0xa [ 86.998108][ T1163] should_failslab+0xc2/0x120 [ 86.998125][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.998141][ T1163] ? __alloc_skb+0x140/0x710 [ 86.998158][ T1163] __alloc_skb+0x140/0x710 [ 86.998170][ T1163] ? __alloc_skb+0x5b7/0x710 [ 86.998184][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 86.998199][ T1163] ? kfree_skbmem+0x19f/0x210 [ 86.998211][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 86.998232][ T1163] process_one_work+0xa23/0x1940 [ 86.998254][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 86.998274][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 86.998290][ T1163] worker_thread+0x5ef/0xe50 [ 86.998310][ T1163] ? kthread+0x13a/0x450 [ 86.998325][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 86.998339][ T1163] kthread+0x370/0x450 [ 86.998353][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.998368][ T1163] ret_from_fork+0x72b/0xd50 [ 86.998383][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 86.998397][ T1163] ? __switch_to+0x800/0x10f0 [ 86.998414][ T1163] ? __pfx_kthread+0x10/0x10 [ 86.998430][ T1163] ret_from_fork_asm+0x1a/0x30 [ 86.998451][ T1163] [ 86.998673][ T1165] [ 87.000452][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 87.000475][ T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.000487][ T48] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.000516][ T48] Call Trace: [ 87.000523][ T48] [ 87.000531][ T48] dump_stack_lvl+0x100/0x190 [ 87.000555][ T48] should_fail_ex.cold+0x5/0xa [ 87.000576][ T48] should_failslab+0xc2/0x120 [ 87.000600][ T48] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.000625][ T48] ? __alloc_skb+0x140/0x710 [ 87.000653][ T48] __alloc_skb+0x140/0x710 [ 87.000674][ T48] ? __alloc_skb+0x5b7/0x710 [ 87.000696][ T48] ? __pfx___alloc_skb+0x10/0x10 [ 87.000721][ T48] ? kfree_skbmem+0x19f/0x210 [ 87.000742][ T48] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.000778][ T48] process_one_work+0xa23/0x1940 [ 87.000817][ T48] ? __pfx_process_one_work+0x10/0x10 [ 87.000851][ T48] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.000879][ T48] worker_thread+0x5ef/0xe50 [ 87.000914][ T48] ? kthread+0x13a/0x450 [ 87.000938][ T48] ? __pfx_worker_thread+0x10/0x10 [ 87.000962][ T48] kthread+0x370/0x450 [ 87.000992][ T48] ? __pfx_kthread+0x10/0x10 [ 87.001018][ T48] ret_from_fork+0x72b/0xd50 [ 87.001043][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 87.001067][ T48] ? __switch_to+0x800/0x10f0 [ 87.001096][ T48] ? __pfx_kthread+0x10/0x10 [ 87.001122][ T48] ret_from_fork_asm+0x1a/0x30 [ 87.001161][ T48] [ 87.139110][ T36] FAULT_INJECTION: forcing a failure. [ 87.139110][ T36] name failslab, interval 1, probability 1, space 0, times 34 [ 87.139146][ T36] CPU: 2 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 87.139159][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.139167][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.139188][ T36] Call Trace: [ 87.139193][ T36] [ 87.139198][ T36] dump_stack_lvl+0x100/0x190 [ 87.139213][ T36] should_fail_ex.cold+0x5/0xa [ 87.139227][ T36] should_failslab+0xc2/0x120 [ 87.139244][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.139260][ T36] ? __alloc_skb+0x140/0x710 [ 87.139280][ T36] __alloc_skb+0x140/0x710 [ 87.139299][ T36] ? __alloc_skb+0x5b7/0x710 [ 87.139319][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 87.139342][ T36] ? kfree_skbmem+0x19f/0x210 [ 87.139361][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.139393][ T36] process_one_work+0xa23/0x1940 [ 87.139427][ T36] ? __pfx_process_one_work+0x10/0x10 [ 87.139458][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.139483][ T36] worker_thread+0x5ef/0xe50 [ 87.139516][ T36] ? kthread+0x13a/0x450 [ 87.139536][ T36] ? __pfx_worker_thread+0x10/0x10 [ 87.139558][ T36] kthread+0x370/0x450 [ 87.139579][ T36] ? __pfx_kthread+0x10/0x10 [ 87.139602][ T36] ret_from_fork+0x72b/0xd50 [ 87.139627][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 87.139662][ T36] ? __switch_to+0x800/0x10f0 [ 87.139689][ T36] ? __pfx_kthread+0x10/0x10 [ 87.139712][ T36] ret_from_fork_asm+0x1a/0x30 [ 87.139738][ T36] [ 87.347960][ T1163] FAULT_INJECTION: forcing a failure. [ 87.347960][ T1163] name failslab, interval 1, probability 1, space 0, times 27 [ 87.348987][ T1165] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.351541][ T1163] CPU: 1 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 87.351565][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.351578][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.351608][ T1163] Call Trace: [ 87.351615][ T1163] [ 87.351622][ T1163] dump_stack_lvl+0x100/0x190 [ 87.351643][ T1163] should_fail_ex.cold+0x5/0xa [ 87.351662][ T1163] should_failslab+0xc2/0x120 [ 87.351683][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.351704][ T1163] ? __alloc_skb+0x140/0x710 [ 87.351727][ T1163] __alloc_skb+0x140/0x710 [ 87.351743][ T1163] ? __alloc_skb+0x5b7/0x710 [ 87.351760][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 87.351780][ T1163] ? kfree_skbmem+0x19f/0x210 [ 87.351798][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.351827][ T1163] process_one_work+0xa23/0x1940 [ 87.351858][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 87.351883][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.351904][ T1163] worker_thread+0x5ef/0xe50 [ 87.351963][ T1163] ? kthread+0x13a/0x450 [ 87.352002][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 87.352021][ T1163] kthread+0x370/0x450 [ 87.352039][ T1163] ? __pfx_kthread+0x10/0x10 [ 87.352059][ T1163] ret_from_fork+0x72b/0xd50 [ 87.352078][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 87.352096][ T1163] ? __switch_to+0x800/0x10f0 [ 87.352120][ T1163] ? __pfx_kthread+0x10/0x10 [ 87.352139][ T1163] ret_from_fork_asm+0x1a/0x30 [ 87.352170][ T1163] [ 87.448483][ C3] FAULT_INJECTION: forcing a failure. [ 87.448483][ C3] name failslab, interval 1, probability 1, space 0, times 25 [ 87.448584][ C3] CPU: 3 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 87.448607][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.448619][ C3] Workqueue: events_unbound cfg80211_wiphy_work [ 87.448653][ C3] Call Trace: [ 87.448659][ C3] [ 87.448667][ C3] dump_stack_lvl+0x100/0x190 [ 87.448693][ C3] should_fail_ex.cold+0x5/0xa [ 87.448715][ C3] should_failslab+0xc2/0x120 [ 87.448741][ C3] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.448766][ C3] ? __alloc_skb+0x140/0x710 [ 87.448794][ C3] __alloc_skb+0x140/0x710 [ 87.448815][ C3] ? __alloc_skb+0x5b7/0x710 [ 87.448836][ C3] ? __pfx___alloc_skb+0x10/0x10 [ 87.448860][ C3] ? do_raw_spin_lock+0x128/0x260 [ 87.448886][ C3] lapb_send_control+0x3a/0x330 [ 87.448910][ C3] lapb_t1timer_expiry+0x5ed/0x910 [ 87.448930][ C3] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 87.448949][ C3] call_timer_fn+0x19a/0x610 [ 87.448976][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 87.449006][ C3] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 87.449020][ C3] ? mark_held_locks+0x40/0x70 [ 87.449038][ C3] ? __pfx_lapb_t1timer_expiry+0x10/0x10 [ 87.449049][ C3] __run_timers+0x757/0xb00 [ 87.449069][ C3] ? __pfx___run_timers+0x10/0x10 [ 87.449090][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 87.449104][ C3] run_timer_base+0x114/0x190 [ 87.449120][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 87.449143][ C3] run_timer_softirq+0x1a/0x50 [ 87.449159][ C3] handle_softirqs+0x1ea/0x9b0 [ 87.449174][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 87.449187][ C3] ? _raw_spin_unlock+0x28/0x50 [ 87.449197][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 87.449213][ C3] __irq_exit_rcu+0x162/0x210 [ 87.449225][ C3] irq_exit_rcu+0x9/0x30 [ 87.449237][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 87.449251][ C3] [ 87.449254][ C3] [ 87.449259][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.449273][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 87.449289][ C3] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 87.449300][ C3] RSP: 0018:ffffc90006d474d8 EFLAGS: 00000293 [ 87.449309][ C3] RAX: ffffffff8f9af798 RBX: ffffffff8f9af740 RCX: ffffffff81e7f251 [ 87.449316][ C3] RDX: ffff888020f2ca80 RSI: ffffffff81e7f25f RDI: ffff888020f2ca80 [ 87.449323][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 87.449330][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000003abb [ 87.449336][ C3] R13: ffffffff8f9af798 R14: ffffc90006d47558 R15: dffffc0000000000 [ 87.449347][ C3] ? console_flush_one_record+0xab1/0xe50 [ 87.449360][ C3] ? console_flush_one_record+0xabf/0xe50 [ 87.449375][ C3] ? console_flush_one_record+0xabf/0xe50 [ 87.449391][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 87.449404][ C3] ? __lock_acquire+0x49f/0x1a40 [ 87.449424][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 87.449441][ C3] console_unlock+0x103/0x260 [ 87.449454][ C3] ? __pfx_console_unlock+0x10/0x10 [ 87.449467][ C3] ? lock_acquire+0x140/0x370 [ 87.449488][ C3] vprintk_emit+0x407/0x6b0 [ 87.449502][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 87.449515][ C3] ? print_worker_info.cold+0x30/0x5e [ 87.449531][ C3] ? print_worker_info+0x14f/0x280 [ 87.449546][ C3] _printk+0xcf/0x110 [ 87.449557][ C3] ? __pfx__printk+0x10/0x10 [ 87.449569][ C3] ? _printk+0xcf/0x110 [ 87.449581][ C3] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.449601][ C3] show_ip+0x26/0x40 [ 87.449616][ C3] show_iret_regs+0x11/0x40 [ 87.449631][ C3] __show_regs+0x2b/0x70 [ 87.449650][ C3] ? dump_stack_print_info+0x18c/0x220 [ 87.449667][ C3] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.449686][ C3] show_regs+0x33/0x50 [ 87.449698][ C3] __warn.cold+0x185/0x318 [ 87.449711][ C3] __report_bug+0x30f/0x440 [ 87.449723][ C3] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.449742][ C3] ? __pfx___report_bug+0x10/0x10 [ 87.449754][ C3] ? do_raw_spin_lock+0x128/0x260 [ 87.449767][ C3] ? find_held_lock+0x2b/0x80 [ 87.449783][ C3] ? __lock_acquire+0x49f/0x1a40 [ 87.449800][ C3] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.449818][ C3] report_bug+0xb2/0x220 [ 87.449831][ C3] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.449849][ C3] handle_bug+0x16a/0x2a0 [ 87.449864][ C3] exc_invalid_op+0x17/0x50 [ 87.449878][ C3] asm_exc_invalid_op+0x1a/0x20 [ 87.449889][ C3] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.449907][ C3] Code: 00 31 ff 41 89 c5 89 c6 e8 10 91 c1 f6 45 85 ed 0f 85 ad fc ff ff e8 92 96 c1 f6 90 0f 0b 90 e9 9f fc ff ff e8 84 96 c1 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 84 d6 22 91 e8 df 24 31 f7 e9 5f [ 87.449917][ C3] RSP: 0018:ffffc90006d47b60 EFLAGS: 00010293 [ 87.449925][ C3] RAX: 0000000000000000 RBX: ffff88806020cec0 RCX: ffffc90006d47afc [ 87.449932][ C3] RDX: ffff888020f2ca80 RSI: ffffffff8b4815dc RDI: ffff888020f2cf44 [ 87.449939][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.449946][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806020d920 [ 87.449952][ C3] R13: ffff88806020ecc2 R14: 0000000000000001 R15: 0000000000000000 [ 87.449963][ C3] ? ieee80211_mgd_probe_ap_send+0x3dc/0x4b0 [ 87.449984][ C3] ieee80211_mgd_probe_ap+0x35e/0x420 [ 87.450004][ C3] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 87.450024][ C3] cfg80211_wiphy_work+0x2b7/0x550 [ 87.450042][ C3] process_one_work+0xa23/0x1940 [ 87.450063][ C3] ? __pfx_process_one_work+0x10/0x10 [ 87.450083][ C3] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.450100][ C3] worker_thread+0x5ef/0xe50 [ 87.450120][ C3] ? kthread+0x13a/0x450 [ 87.450139][ C3] ? __pfx_worker_thread+0x10/0x10 [ 87.450154][ C3] kthread+0x370/0x450 [ 87.450168][ C3] ? __pfx_kthread+0x10/0x10 [ 87.450183][ C3] ret_from_fork+0x72b/0xd50 [ 87.450199][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 87.450213][ C3] ? __switch_to+0x800/0x10f0 [ 87.450230][ C3] ? __pfx_kthread+0x10/0x10 [ 87.450245][ C3] ret_from_fork_asm+0x1a/0x30 [ 87.450265][ C3] [ 87.478517][ T1163] FAULT_INJECTION: forcing a failure. [ 87.478517][ T1163] name failslab, interval 1, probability 1, space 0, times 22 [ 87.478553][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 87.478575][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.478588][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.478620][ T1163] Call Trace: [ 87.478627][ T1163] [ 87.478635][ T1163] dump_stack_lvl+0x100/0x190 [ 87.478661][ T1163] should_fail_ex.cold+0x5/0xa [ 87.478684][ T1163] should_failslab+0xc2/0x120 [ 87.478710][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.478767][ T1163] ? __alloc_skb+0x140/0x710 [ 87.478798][ T1163] __alloc_skb+0x140/0x710 [ 87.478820][ T1163] ? __alloc_skb+0x5b7/0x710 [ 87.478843][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 87.478869][ T1163] ? kfree_skbmem+0x19f/0x210 [ 87.478891][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.478929][ T1163] process_one_work+0xa23/0x1940 [ 87.478968][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 87.479008][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.479037][ T1163] worker_thread+0x5ef/0xe50 [ 87.479073][ T1163] ? kthread+0x13a/0x450 [ 87.479097][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 87.479121][ T1163] kthread+0x370/0x450 [ 87.479145][ T1163] ? __pfx_kthread+0x10/0x10 [ 87.479171][ T1163] ret_from_fork+0x72b/0xd50 [ 87.479196][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 87.479220][ T1163] ? __switch_to+0x800/0x10f0 [ 87.479250][ T1163] ? __pfx_kthread+0x10/0x10 [ 87.479276][ T1163] ret_from_fork_asm+0x1a/0x30 [ 87.479314][ T1163] [ 87.480100][ T36] FAULT_INJECTION: forcing a failure. [ 87.480100][ T36] name failslab, interval 1, probability 1, space 0, times 21 [ 87.481294][ T1165] Code: 00 31 ff 41 89 c5 89 c6 e8 10 91 c1 f6 45 85 ed 0f 85 ad fc ff ff e8 92 96 c1 f6 90 0f 0b 90 e9 9f fc ff ff e8 84 96 c1 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 84 d6 22 91 e8 df 24 31 f7 e9 5f [ 87.484485][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 87.484512][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.484525][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.484555][ T36] Call Trace: [ 87.484565][ T36] [ 87.484574][ T36] dump_stack_lvl+0x100/0x190 [ 87.484600][ T36] should_fail_ex.cold+0x5/0xa [ 87.484623][ T36] should_failslab+0xc2/0x120 [ 87.484650][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.484676][ T36] ? __alloc_skb+0x140/0x710 [ 87.484706][ T36] __alloc_skb+0x140/0x710 [ 87.484728][ T36] ? __alloc_skb+0x5b7/0x710 [ 87.484750][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 87.484777][ T36] ? kfree_skbmem+0x19f/0x210 [ 87.484799][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.484837][ T36] process_one_work+0xa23/0x1940 [ 87.484876][ T36] ? __pfx_process_one_work+0x10/0x10 [ 87.484911][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.484939][ T36] worker_thread+0x5ef/0xe50 [ 87.484982][ T36] ? kthread+0x13a/0x450 [ 87.485007][ T36] ? __pfx_worker_thread+0x10/0x10 [ 87.485031][ T36] kthread+0x370/0x450 [ 87.485054][ T36] ? __pfx_kthread+0x10/0x10 [ 87.485080][ T36] ret_from_fork+0x72b/0xd50 [ 87.485105][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 87.485129][ T36] ? __switch_to+0x800/0x10f0 [ 87.485158][ T36] ? __pfx_kthread+0x10/0x10 [ 87.485184][ T36] ret_from_fork_asm+0x1a/0x30 [ 87.485223][ T36] [ 87.528182][ T5825] FAULT_INJECTION: forcing a failure. [ 87.528182][ T5825] name failslab, interval 1, probability 1, space 0, times 20 [ 87.530249][ T1165] RSP: 0018:ffffc90006d47b60 EFLAGS: 00010293 [ 87.531018][ T5825] CPU: 2 UID: 0 PID: 5825 Comm: kworker/u32:4 Not tainted syzkaller #0 PREEMPT(full) [ 87.531037][ T5825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.531045][ T5825] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 87.531066][ T5825] Call Trace: [ 87.531071][ T5825] [ 87.531076][ T5825] dump_stack_lvl+0x100/0x190 [ 87.531093][ T5825] should_fail_ex.cold+0x5/0xa [ 87.531106][ T5825] should_failslab+0xc2/0x120 [ 87.531123][ T5825] kmem_cache_alloc_noprof+0x91/0x6a0 [ 87.531137][ T5825] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.531150][ T5825] ? skb_clone+0x190/0x400 [ 87.531168][ T5825] skb_clone+0x190/0x400 [ 87.531183][ T5825] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 87.531202][ T5825] process_one_work+0xa23/0x1940 [ 87.531224][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 87.531244][ T5825] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 87.531260][ T5825] worker_thread+0x5ef/0xe50 [ 87.531279][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 87.531295][ T5825] ? kthread+0x13a/0x450 [ 87.531309][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 87.531324][ T5825] kthread+0x370/0x450 [ 87.531337][ T5825] ? __pfx_kthread+0x10/0x10 [ 87.531352][ T5825] ret_from_fork+0x72b/0xd50 [ 87.531367][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 87.531381][ T5825] ? __switch_to+0x800/0x10f0 [ 87.531398][ T5825] ? __pfx_kthread+0x10/0x10 [ 87.531413][ T5825] ret_from_fork_asm+0x1a/0x30 [ 87.531435][ T5825] [ 87.668338][ T36] FAULT_INJECTION: forcing a failure. [ 87.668338][ T36] name failslab, interval 1, probability 1, space 0, times 18 [ 87.669756][ T1165] [ 87.669763][ T1165] RAX: 0000000000000000 RBX: ffff88806020cec0 RCX: ffffc90006d47afc [ 87.671576][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 87.671599][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.671611][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 87.671645][ T36] Call Trace: [ 87.671654][ T36] [ 87.671661][ T36] dump_stack_lvl+0x100/0x190 [ 87.671685][ T36] should_fail_ex.cold+0x5/0xa [ 87.671706][ T36] should_failslab+0xc2/0x120 [ 87.671731][ T36] __kmalloc_noprof+0xfc/0x820 [ 87.671754][ T36] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 87.671787][ T36] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 87.671812][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.671827][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.671843][ T36] ? __lock_acquire+0x49f/0x1a40 [ 87.671863][ T36] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 87.671886][ T36] ? rcu_is_watching+0x12/0xc0 [ 87.671903][ T36] ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70 [ 87.671929][ T36] ? do_raw_spin_lock+0x128/0x260 [ 87.671948][ T36] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 87.671985][ T36] ieee80211_iface_work+0xa9a/0x1070 [ 87.672008][ T36] cfg80211_wiphy_work+0x2b7/0x550 [ 87.672025][ T36] process_one_work+0xa23/0x1940 [ 87.672048][ T36] ? __pfx_process_one_work+0x10/0x10 [ 87.672068][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.672085][ T36] worker_thread+0x5ef/0xe50 [ 87.672110][ T36] ? kthread+0x13a/0x450 [ 87.672124][ T36] ? __pfx_worker_thread+0x10/0x10 [ 87.672141][ T36] kthread+0x370/0x450 [ 87.672162][ T36] ? __pfx_kthread+0x10/0x10 [ 87.672185][ T36] ret_from_fork+0x72b/0xd50 [ 87.672208][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 87.672222][ T36] ? __switch_to+0x800/0x10f0 [ 87.672240][ T36] ? __pfx_kthread+0x10/0x10 [ 87.672255][ T36] ret_from_fork_asm+0x1a/0x30 [ 87.672281][ T36] [ 87.707336][ T1163] FAULT_INJECTION: forcing a failure. [ 87.707336][ T1163] name failslab, interval 1, probability 1, space 0, times 17 [ 87.708138][ T1165] RDX: ffff888020f2ca80 RSI: ffffffff8b4815dc RDI: ffff888020f2cf44 [ 87.709494][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 87.709510][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.709518][ T1163] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.709540][ T1163] Call Trace: [ 87.709545][ T1163] [ 87.709551][ T1163] dump_stack_lvl+0x100/0x190 [ 87.709566][ T1163] should_fail_ex.cold+0x5/0xa [ 87.709585][ T1163] should_failslab+0xc2/0x120 [ 87.709602][ T1163] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.709619][ T1163] ? __alloc_skb+0x140/0x710 [ 87.709636][ T1163] __alloc_skb+0x140/0x710 [ 87.709649][ T1163] ? __alloc_skb+0x5b7/0x710 [ 87.709663][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 87.709678][ T1163] ? kfree_skbmem+0x19f/0x210 [ 87.709690][ T1163] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.709711][ T1163] process_one_work+0xa23/0x1940 [ 87.709734][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 87.709753][ T1163] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.709770][ T1163] worker_thread+0x5ef/0xe50 [ 87.709790][ T1163] ? kthread+0x13a/0x450 [ 87.709805][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 87.709819][ T1163] kthread+0x370/0x450 [ 87.709833][ T1163] ? __pfx_kthread+0x10/0x10 [ 87.709848][ T1163] ret_from_fork+0x72b/0xd50 [ 87.709864][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 87.709878][ T1163] ? __switch_to+0x800/0x10f0 [ 87.709896][ T1163] ? __pfx_kthread+0x10/0x10 [ 87.709911][ T1163] ret_from_fork_asm+0x1a/0x30 [ 87.709933][ T1163] [ 87.847482][ T5750] Bluetooth: hci1: command tx timeout [ 87.847519][ T5757] Bluetooth: hci3: command tx timeout [ 87.851441][ T1165] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.851459][ T1165] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806020d920 [ 87.851473][ T1165] R13: ffff88806020ecc2 R14: 0000000000000001 R15: 0000000000000000 [ 87.851485][ T1165] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 87.851518][ T1165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.851533][ T1165] CR2: 00007ffe73b87fe8 CR3: 000000006b59f000 CR4: 0000000000352ef0 [ 87.851546][ T1165] Call Trace: [ 87.851556][ T1165] [ 87.851568][ T1165] ieee80211_mgd_probe_ap+0x35e/0x420 [ 87.851601][ T1165] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 87.851622][ T1165] cfg80211_wiphy_work+0x2b7/0x550 [ 87.851643][ T1165] process_one_work+0xa23/0x1940 [ 87.851667][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 87.851688][ T1165] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.851706][ T1165] worker_thread+0x5ef/0xe50 [ 87.851726][ T1165] ? kthread+0x13a/0x450 [ 87.851742][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 87.851757][ T1165] kthread+0x370/0x450 [ 87.851772][ T1165] ? __pfx_kthread+0x10/0x10 [ 87.851788][ T1165] ret_from_fork+0x72b/0xd50 [ 87.851804][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 87.851819][ T1165] ? __switch_to+0x800/0x10f0 [ 87.851839][ T1165] ? __pfx_kthread+0x10/0x10 [ 87.851854][ T1165] ret_from_fork_asm+0x1a/0x30 [ 87.851877][ T1165] [ 87.851884][ T1165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.851894][ T1165] CPU: 3 UID: 0 PID: 1165 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 87.851907][ T1165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.851916][ T1165] Workqueue: events_unbound cfg80211_wiphy_work [ 87.851934][ T1165] Call Trace: [ 87.851938][ T1165] [ 87.851943][ T1165] dump_stack_lvl+0x100/0x190 [ 87.851955][ T1165] vpanic+0x552/0x970 [ 87.851968][ T1165] ? __pfx_vpanic+0x10/0x10 [ 87.851990][ T1165] panic+0xd1/0xe0 [ 87.852007][ T1165] ? __pfx_panic+0x10/0x10 [ 87.852031][ T1165] ? check_panic_on_warn+0x1f/0x90 [ 87.852059][ T1165] check_panic_on_warn.cold+0x19/0x34 [ 87.852071][ T1165] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.852089][ T1165] __warn.cold+0x191/0x318 [ 87.852106][ T1165] __report_bug+0x30f/0x440 [ 87.852132][ T1165] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.852160][ T1165] ? __pfx___report_bug+0x10/0x10 [ 87.852179][ T1165] ? do_raw_spin_lock+0x128/0x260 [ 87.852201][ T1165] ? find_held_lock+0x2b/0x80 [ 87.852231][ T1165] ? __lock_acquire+0x49f/0x1a40 [ 87.852253][ T1165] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.852275][ T1165] report_bug+0xb2/0x220 [ 87.852296][ T1165] ? ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.852321][ T1165] handle_bug+0x16a/0x2a0 [ 87.852345][ T1165] exc_invalid_op+0x17/0x50 [ 87.852368][ T1165] asm_exc_invalid_op+0x1a/0x20 [ 87.852386][ T1165] RIP: 0010:ieee80211_mgd_probe_ap_send+0x3dd/0x4b0 [ 87.852413][ T1165] Code: 00 31 ff 41 89 c5 89 c6 e8 10 91 c1 f6 45 85 ed 0f 85 ad fc ff ff e8 92 96 c1 f6 90 0f 0b 90 e9 9f fc ff ff e8 84 96 c1 f6 90 <0f> 0b 90 e9 ef fc ff ff 48 c7 c7 84 d6 22 91 e8 df 24 31 f7 e9 5f [ 87.852430][ T1165] RSP: 0018:ffffc90006d47b60 EFLAGS: 00010293 [ 87.852445][ T1165] RAX: 0000000000000000 RBX: ffff88806020cec0 RCX: ffffc90006d47afc [ 87.852456][ T1165] RDX: ffff888020f2ca80 RSI: ffffffff8b4815dc RDI: ffff888020f2cf44 [ 87.852467][ T1165] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.852478][ T1165] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806020d920 [ 87.852488][ T1165] R13: ffff88806020ecc2 R14: 0000000000000001 R15: 0000000000000000 [ 87.852505][ T1165] ? ieee80211_mgd_probe_ap_send+0x3dc/0x4b0 [ 87.852541][ T1165] ieee80211_mgd_probe_ap+0x35e/0x420 [ 87.852570][ T1165] ieee80211_beacon_connection_loss_work+0xdb/0x110 [ 87.852594][ T1165] cfg80211_wiphy_work+0x2b7/0x550 [ 87.852612][ T1165] process_one_work+0xa23/0x1940 [ 87.852635][ T1165] ? __pfx_process_one_work+0x10/0x10 [ 87.852655][ T1165] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.852672][ T1165] worker_thread+0x5ef/0xe50 [ 87.852693][ T1165] ? kthread+0x13a/0x450 [ 87.852707][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 87.852722][ T1165] kthread+0x370/0x450 [ 87.852736][ T1165] ? __pfx_kthread+0x10/0x10 [ 87.852751][ T1165] ret_from_fork+0x72b/0xd50 [ 87.852765][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 87.852779][ T1165] ? __switch_to+0x800/0x10f0 [ 87.852796][ T1165] ? __pfx_kthread+0x10/0x10 [ 87.852812][ T1165] ret_from_fork_asm+0x1a/0x30 [ 87.852832][ T1165] [ 87.854292][ T1165] Kernel Offset: disabled